Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: XNPcuxyn0P3Ebj8WHhQwUGii2n7sO9NRoPOkCYmNsY8=
Subject key identifier: 13:11:10:B3:5F:22:F0:02:CB:67:8F:DE:D7:5F:58:A5:BF:F6:E5:F9
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 01967BA078FD33334F1B8409D63AA9A25350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 02E8
Signing time: Mon 28 Apr 2025 09:00:36 +0000
Manifest this update: Mon 28 Apr 2025 09:00:36 +0000
Manifest next update: Tue 29 Apr 2025 09:00:36 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: VpeL74khNdnLfAhyndBXaueSpxO2IOjux8zu7VZSvKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:78:fd:33:33:4f:1b:84:09:d6:3a:a9:a2:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Apr 28 09:00:36 2025 GMT
Not After : Apr 29 09:00:36 2025 GMT
Subject: CN=131110b35f22f002cb678fded75f58a5bff6e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:8f:8c:71:31:95:7f:eb:0f:f3:bb:a7:fa:
c4:ed:d6:1e:61:88:4e:18:79:c9:7b:ba:b1:5d:51:
4c:cd:1e:89:01:9a:ed:6e:17:16:4b:cc:76:46:db:
2a:68:45:e7:19:ae:9e:9c:c3:4b:67:6e:e7:c5:83:
2a:bf:36:68:01:93:b6:a9:1a:65:64:2c:fd:10:09:
a6:f9:ac:56:cf:6d:e5:b1:28:d0:6b:94:3e:9d:95:
ce:7a:1c:0f:12:aa:3a:bf:ac:6b:30:6d:39:3c:e1:
67:c5:0c:9f:4d:f2:54:c6:7e:c7:bb:51:bf:e6:c9:
71:a0:13:ff:e6:28:d6:ce:30:c4:34:f1:a8:d3:6f:
9d:be:97:ab:3e:07:2d:22:c8:bd:31:74:e2:78:52:
11:79:d7:85:12:7d:95:70:3e:30:47:8e:77:c0:8f:
33:f5:80:02:59:96:fe:57:1e:f7:9c:f4:1f:ff:44:
7a:f4:36:7b:51:b8:39:6d:5d:3f:25:03:da:44:22:
ad:de:29:b1:e3:57:c9:dc:ec:ea:c9:cf:c8:ac:fb:
b3:af:9a:2e:ed:b0:25:ba:54:34:79:15:48:30:01:
89:4c:0e:45:da:0d:ac:e0:e0:0e:7b:16:3c:a2:a8:
62:17:99:97:99:ec:58:39:d5:f6:7d:a8:c7:7f:53:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:10:B3:5F:22:F0:02:CB:67:8F:DE:D7:5F:58:A5:BF:F6:E5:F9
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:af:f7:b3:00:97:8a:a8:72:0e:02:56:83:e6:80:86:0e:
54:9e:12:0e:ba:1e:1e:f6:da:0c:5c:76:7a:21:4c:61:bd:d4:
1d:5d:1f:23:8b:03:9f:18:7f:95:86:01:89:af:f0:e2:be:15:
e6:90:28:86:48:d6:77:25:e4:3c:7a:06:9b:39:3d:d3:e8:e7:
ca:d8:88:ef:92:bb:fd:81:02:30:68:b7:45:0a:1e:e9:ef:c2:
ff:1f:1c:aa:90:6d:dc:83:5d:23:d2:31:3d:25:69:bb:c9:ff:
3d:8b:05:23:f1:c7:32:2f:72:f8:1b:95:29:93:f5:f9:a5:3c:
3c:67:dc:6a:9e:5c:9d:19:28:c8:d8:81:b3:77:e5:5c:6d:19:
14:c2:43:eb:79:fc:12:14:4c:59:d5:1a:24:59:7b:2d:cd:13:
2a:9a:44:9a:18:80:50:96:f3:59:93:91:f7:37:e8:6f:3f:34:
82:09:63:88:e2:e1:07:d2:bd:f7:57:ff:6c:97:91:08:fb:52:
92:4d:4d:7b:a7:a8:ef:26:bf:50:f2:f5:66:be:60:7f:d0:f5:
2d:a3:9c:f1:87:5e:7d:c1:25:b0:3c:d4:34:54:9c:f8:6a:c5:
06:63:f8:a4:20:d8:b2:f6:d4:36:bd:28:69:a5:fe:4d:58:6d:
00:a2:22:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:43 2025 by rpki-client