Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: Z+g6M4uTGKRrbeWp2h490eRgm5h31BVaPk49/1bNIJQ=
Subject key identifier: 58:65:81:76:CE:FF:17:58:F4:2B:80:F9:B2:7D:37:9D:2D:0D:2C:22
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 0196A8429690AE7C0838790AA9FFC9695A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 01:00:58 +0000
Manifest this update: Wed 07 May 2025 01:00:58 +0000
Manifest next update: Thu 08 May 2025 01:00:58 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: ILcHqe22jH26Y91C42LwAbhsMe1A4B2QGCZtVznLL+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:96:90:ae:7c:08:38:79:0a:a9:ff:c9:69:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: May 7 01:00:58 2025 GMT
Not After : May 8 01:00:58 2025 GMT
Subject: CN=58658176ceff1758f42b80f9b27d379d2d0d2c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:a7:4d:6b:c2:93:e0:0e:c0:cd:17:65:16:
7b:7f:5c:06:3f:76:8e:69:0a:d2:b5:3b:3d:9e:3e:
e3:0f:b0:15:83:82:be:e3:e4:c8:12:c4:99:7a:d7:
8e:3a:41:96:e3:78:d9:16:03:63:83:d6:fd:e0:9b:
08:cf:4d:ab:3e:70:f3:7e:e8:79:69:ab:43:ee:d0:
09:d6:98:26:0c:a3:55:6a:1c:5e:ab:27:e7:9c:52:
b2:f3:d4:da:2f:44:4a:c2:3e:c0:6e:a1:95:aa:7e:
e0:ad:16:22:f8:30:5d:99:9f:69:74:55:06:34:0c:
de:ab:58:a7:48:a5:d2:82:7e:6a:3a:9f:70:a0:5a:
70:16:05:0f:67:86:99:d7:69:b9:46:bd:30:60:69:
5a:e3:54:a8:d1:dc:bb:85:a7:27:ba:62:3e:9b:6c:
3e:95:04:d7:65:6e:03:2d:8e:a2:10:41:81:5a:db:
39:94:c4:b1:15:f2:a1:67:85:bd:3c:55:24:c5:c8:
65:ef:44:14:8f:f4:d4:8b:14:ea:d5:82:ae:0c:15:
7a:b9:69:be:98:e1:4e:42:4d:66:67:c4:18:98:7e:
d0:6b:81:2e:22:b0:c3:5f:24:40:d2:b1:7d:38:6c:
76:42:d3:db:8d:37:cb:d5:60:f6:3d:23:21:1d:75:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:81:76:CE:FF:17:58:F4:2B:80:F9:B2:7D:37:9D:2D:0D:2C:22
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b3:d0:d7:ec:64:e1:e5:c1:a3:18:f8:e3:ea:93:6d:86:5c:
92:eb:73:8a:6e:55:8b:a0:96:ce:de:0d:84:9f:15:31:21:24:
ed:d9:58:79:d5:0c:99:87:3b:2d:32:48:57:bc:49:ae:dc:05:
a9:b2:83:d1:f1:d3:7d:0c:6e:f5:02:f9:02:61:4b:5d:27:c9:
d4:94:fc:91:bc:b1:bd:82:47:dd:cc:a1:a0:57:58:ae:58:77:
23:87:22:0f:52:67:87:7e:1e:f1:a0:93:1b:43:23:d9:46:33:
5b:c0:8c:ad:65:95:b8:b7:2d:71:d9:3a:4f:6e:d0:16:55:02:
02:61:4e:67:f0:33:a5:22:54:13:3f:8c:e0:b8:ca:08:a0:04:
42:5b:43:48:24:b2:35:24:51:37:15:0d:ca:73:cb:0d:95:46:
4b:92:5f:a3:98:53:9e:d0:24:85:2c:38:3a:6e:33:b1:46:c6:
99:9d:fb:bb:71:4b:fa:bd:9e:0b:da:aa:dd:36:4f:03:f0:0f:
5a:61:a9:d9:48:5c:d6:75:5b:76:53:26:f5:11:a7:e8:3c:dc:
ce:6a:02:77:ac:9e:d0:c4:39:fe:11:58:7b:92:44:2f:30:d1:
b3:fb:4e:21:63:11:a6:2e:9f:d0:c9:65:76:3d:b8:d7:e6:2b:
5f:22:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:52:26 2025 by rpki-client