Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: hij0x8ekTLuRT2aSFO/DsyJxlBpsMunB2nORpCbnCVg=
Subject key identifier: 05:A2:64:FD:44:0C:75:1B:6C:DB:6F:39:7B:0F:4A:DE:D8:08:BE:D2
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0196D8C06A07D76986A27EA5908ED2B76D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0EC3
Signing time: Fri 16 May 2025 11:00:10 +0000
Manifest this update: Fri 16 May 2025 11:00:10 +0000
Manifest next update: Sat 17 May 2025 11:00:10 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: +n1Jp2bWl320fE66Jh+m44cQp9zkWGft3Mnc+ASX4xQ=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:c0:6a:07:d7:69:86:a2:7e:a5:90:8e:d2:b7:6d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: May 16 11:00:10 2025 GMT
Not After : May 17 11:00:10 2025 GMT
Subject: CN=05a264fd440c751b6cdb6f397b0f4aded808bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:a6:ea:5b:91:fd:73:cf:07:9d:f1:f2:38:
90:c5:86:94:20:99:e7:7c:e4:d0:46:08:70:3c:d4:
f0:71:a4:0c:32:9a:cb:25:de:ab:34:2a:d0:fa:f5:
5f:f3:a2:be:4a:58:72:b6:1d:86:73:ff:e8:14:f5:
4b:02:7c:e7:c1:33:b7:ef:ea:9c:5f:f5:8b:bd:8f:
01:d2:dc:71:a7:2b:a8:2e:07:0f:24:c6:59:ae:b8:
8d:53:4a:b4:c2:63:e4:a8:d9:5a:42:b3:62:e2:ff:
7d:fd:5a:62:6c:3b:37:25:d9:e8:e8:33:41:0f:cc:
d7:87:99:49:25:e9:de:23:5c:7f:e6:67:7a:da:48:
3e:ee:a0:6a:4c:3c:7a:07:12:bd:fa:a1:dc:21:a6:
11:a6:84:d2:cd:4d:d1:55:06:90:6e:d3:4a:83:a2:
8b:52:4b:dd:d1:73:53:24:c9:18:1b:d1:26:7e:a8:
a6:a3:b4:07:74:e4:09:44:46:c9:d1:3a:e2:c5:93:
29:d4:a2:16:a7:21:94:c2:89:c4:fd:68:6d:c2:59:
24:cb:98:86:3e:77:47:ae:cf:57:a1:a7:a4:3c:2a:
0e:41:65:6f:1a:33:52:ab:ab:08:a8:22:e2:5e:12:
78:05:8e:37:67:da:8d:d0:0c:69:9d:1f:4b:8b:b1:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:64:FD:44:0C:75:1B:6C:DB:6F:39:7B:0F:4A:DE:D8:08:BE:D2
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dd:11:c9:17:02:52:94:06:7b:0c:d5:9a:be:b3:13:e0:a1:
8c:b6:42:8e:6d:a9:1a:b8:54:4a:37:08:37:8e:b4:53:6d:c3:
2a:d6:3f:f8:fd:f2:16:db:40:fe:98:b8:fe:18:4a:9e:ef:f4:
b0:a6:e2:ab:d6:07:24:1a:9e:9c:07:75:fb:3c:51:cc:2c:00:
5a:6c:d3:b5:86:b7:e1:98:f0:0d:1a:ff:42:22:f9:33:64:87:
60:b7:62:29:d2:38:6d:c8:7f:68:ea:03:0c:86:75:93:21:8c:
a2:c8:a8:0a:fb:fe:92:d5:01:c6:48:f2:6d:dc:5a:9d:f6:4f:
5d:1b:62:36:89:e4:7e:77:eb:85:f7:d5:47:17:71:81:b5:60:
dd:de:6b:6c:76:ba:f3:6f:8d:83:79:5c:6f:19:be:41:fc:0d:
ac:81:2b:fe:4d:fa:f5:39:26:3e:ac:8b:5e:bd:ba:c4:63:42:
6e:2e:fd:d2:42:6c:a6:b6:ef:93:d5:76:15:bc:7e:b6:7c:e9:
7b:05:90:7c:11:2f:1c:af:4b:12:c2:70:b1:ac:c4:f3:82:30:
95:5c:10:04:ac:e8:42:4d:ca:15:fd:21:55:79:32:1a:b6:1b:
58:9c:54:48:a3:66:ed:c4:d5:b9:12:b7:d5:33:55:ab:18:bf:
7a:51:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:31:18 2025 by rpki-client