Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: 4ZyHZrRgMf8EuhUAEj9UFGq8PwHJ6lzRDdn6JfJmAW4=
Subject key identifier: 83:43:D2:0A:71:68:0B:50:EC:20:12:9F:98:20:CF:41:7D:47:65:D5
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 0196B8FF309A2F4C7B6F872649B75A585CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0864
Signing time: Sat 10 May 2025 07:00:53 +0000
Manifest this update: Sat 10 May 2025 07:00:53 +0000
Manifest next update: Sun 11 May 2025 07:00:53 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: fYnnCSj1lpuLZy4C+mOW/lRR9yd0GSnRk58rsWhPG1M=)
2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:30:9a:2f:4c:7b:6f:87:26:49:b7:5a:58:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: May 10 07:00:53 2025 GMT
Not After : May 11 07:00:53 2025 GMT
Subject: CN=8343d20a71680b50ec20129f9820cf417d4765d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:4c:8b:bc:03:1f:1c:60:8d:fd:8b:72:97:
f2:c0:b2:78:db:82:79:f1:75:06:1e:cf:3f:2c:06:
aa:8e:0a:24:16:ca:9c:2a:1b:2e:38:b5:f7:86:3b:
32:69:35:5c:f8:47:a4:0b:68:50:ef:a3:19:9f:1d:
74:ac:76:c2:71:e4:10:20:94:10:eb:7e:fc:2d:9e:
25:ad:93:d4:c2:fe:ef:9d:bd:8a:1d:1c:08:08:6a:
27:29:82:2e:55:78:42:7b:79:91:58:24:f0:46:84:
e2:a1:01:8a:3a:e6:a8:3b:ae:f0:3f:38:c8:d4:44:
93:c8:5a:f0:dd:f3:5e:18:19:8c:d9:a5:63:fc:26:
b2:8c:c8:ae:b9:5e:a1:ca:06:5b:6f:c5:b8:a6:55:
cb:ff:57:36:c4:fe:4d:ce:10:9d:9e:78:b8:bc:d7:
c1:62:18:ec:30:62:04:c9:9b:e2:97:32:75:a4:bd:
2f:48:5d:88:a2:fd:d0:96:c1:58:06:62:12:99:8a:
ca:de:44:c8:b9:93:a1:36:37:03:db:00:10:a9:4d:
30:02:13:e7:74:1c:4e:bf:a5:12:50:52:1c:49:c0:
35:9b:57:a5:f9:87:f2:94:08:47:7e:f6:2e:39:a6:
67:f2:fb:d4:d4:a7:3a:94:db:b2:88:c7:d6:ce:35:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:D2:0A:71:68:0B:50:EC:20:12:9F:98:20:CF:41:7D:47:65:D5
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:b2:18:30:80:89:bf:05:a4:fb:6e:01:07:63:d2:73:19:
7a:11:2a:83:c6:e6:b3:91:1e:48:95:b2:b8:1e:17:6a:69:c1:
a4:7a:e1:c3:c5:e2:b9:4b:3b:83:2c:f1:65:5d:7a:ab:61:ad:
e8:df:31:7d:be:31:f0:56:ad:ec:12:71:63:3e:3b:18:14:e2:
f6:40:8d:3c:32:ad:b6:93:7d:60:c0:3a:d8:50:1a:18:dc:3d:
6c:a3:e0:4e:6e:fd:dd:9e:6d:a0:b6:48:43:b3:2e:c7:01:6c:
3e:d7:80:6b:ce:14:71:b5:c7:ca:13:d4:f9:11:5a:ed:60:6b:
8a:b5:77:d2:5e:8b:ab:cc:29:e0:7a:bf:ed:aa:a7:70:fa:81:
38:11:5a:02:83:9a:ae:69:c7:fc:2e:eb:80:c7:3a:3b:48:2f:
1c:97:c4:2b:84:eb:28:2c:93:0a:45:2b:a4:24:00:41:d3:8a:
fb:88:3b:e7:e2:a9:df:1d:27:3a:e0:bb:8d:87:f9:c8:08:8c:
09:b0:a1:0a:09:ad:9c:e2:87:b0:4e:a0:d0:94:e8:e9:f0:ad:
c2:1a:30:44:db:e8:28:44:69:6e:0f:30:91:d3:c6:dc:74:ba:
ae:bc:7a:5c:13:31:7d:0a:b5:10:08:88:1a:83:ef:af:90:1a:
57:22:20:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/zCaL0x7b4cmSbdaWFz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjUwNTEwMDcwMDUzWhcNMjUwNTExMDcwMDUzWjAzMTEwLwYDVQQD
Eyg4MzQzZDIwYTcxNjgwYjUwZWMyMDEyOWY5ODIwY2Y0MTdkNDc2NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnlMi7wDHxxgjf2LcpfywLJ424J5
8XUGHs8/LAaqjgokFsqcKhsuOLX3hjsyaTVc+EekC2hQ76MZnx10rHbCceQQIJQQ
6378LZ4lrZPUwv7vnb2KHRwICGonKYIuVXhCe3mRWCTwRoTioQGKOuaoO67wPzjI
1ESTyFrw3fNeGBmM2aVj/CayjMiuuV6hygZbb8W4plXL/1c2xP5NzhCdnni4vNfB
YhjsMGIEyZvilzJ1pL0vSF2Iov3QlsFYBmISmYrK3kTIuZOhNjcD2wAQqU0wAhPn
dBxOv6USUFIcScA1m1el+YfylAhHfvYuOaZn8vvU1Kc6lNuyiMfWzjUgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIND0gpxaAtQ7CASn5ggz0F9R2XVMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9OyGDCA
ib8FpPtuAQdj0nMZehEqg8bms5EeSJWyuB4XamnBpHrhw8XiuUs7gyzxZV16q2Gt
6N8xfb4x8Fat7BJxYz47GBTi9kCNPDKttpN9YMA62FAaGNw9bKPgTm793Z5toLZI
Q7MuxwFsPteAa84UcbXHyhPU+RFa7WBrirV30l6Lq8wp4Hq/7aqncPqBOBFaAoOa
rmnH/C7rgMc6O0gvHJfEK4TrKCyTCkUrpCQAQdOK+4g75+Kp3x0nOuC7jYf5yAiM
CbChCgmtnOKHsE6g0JTo6fCtwhowRNvoKERpbg8wkdPG3HS6rrx6XBMxfQq1EAiI
GoPvr5AaVyIgEg==
-----END CERTIFICATE-----
Generated at Sat May 10 09:14:11 2025 by rpki-client