Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: opC4TVqWk5odob9uQg1k28qmelu7wBge3v/gRRgqonk=
Subject key identifier: 19:34:D4:AE:77:1E:65:DE:D1:B5:B7:F0:5A:56:AB:4B:AF:20:08:B7
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 0196A0BF758E00DCC10224A7F58CD1C94E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 14B8
Signing time: Mon 05 May 2025 14:00:24 +0000
Manifest this update: Mon 05 May 2025 14:00:24 +0000
Manifest next update: Tue 06 May 2025 14:00:24 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: j401+gN88P9BMZ9/e0NRMR+yeU6ozUND9ssj9Q2MK3k=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:75:8e:00:dc:c1:02:24:a7:f5:8c:d1:c9:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: May 5 14:00:24 2025 GMT
Not After : May 6 14:00:24 2025 GMT
Subject: CN=1934d4ae771e65ded1b5b7f05a56ab4baf2008b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:20:a3:cb:41:56:2d:6e:03:8a:05:bb:43:
66:83:df:8e:7c:1c:db:17:19:71:18:de:b9:b3:0f:
2f:f3:f1:65:69:2a:d2:8a:b1:9d:56:82:c5:e1:d8:
03:7d:a3:97:26:d3:86:13:6e:8b:fb:c4:92:24:e8:
eb:75:87:52:ab:2d:4e:c9:66:c7:a2:5a:b1:7c:f0:
fa:0e:14:50:bc:36:39:33:1a:64:4a:75:7e:9e:f9:
cc:72:93:4f:75:6a:17:52:0a:b3:55:56:d1:de:82:
8d:2a:2e:50:b0:49:c6:ec:83:3e:93:02:dc:d7:e6:
ba:4e:0c:d1:17:06:7d:af:bc:1f:2d:14:7e:90:b8:
ab:17:6f:76:97:da:cd:d5:27:40:67:22:c7:3d:9b:
8d:38:23:ab:a9:dd:59:ce:22:5e:41:73:05:4e:07:
87:93:c8:b0:34:d9:3e:be:ff:02:82:ff:10:c7:1b:
38:1d:72:03:33:96:bf:8e:1d:80:61:50:f6:d8:17:
ab:c8:f5:c9:c9:2f:69:9f:61:07:10:71:a3:9d:71:
75:48:b0:b5:04:f2:a9:42:40:4d:d3:d2:04:4f:0c:
ec:a7:1e:58:2d:44:32:54:09:e1:88:5d:dd:2e:2e:
cf:a7:01:24:d6:c9:61:1a:2d:c5:03:c9:1f:d4:20:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:D4:AE:77:1E:65:DE:D1:B5:B7:F0:5A:56:AB:4B:AF:20:08:B7
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:78:8b:19:cd:22:83:8d:17:05:34:f0:c5:b4:94:0f:04:f6:
c3:b5:db:71:a3:9f:d8:31:23:a7:33:ea:ae:b7:a2:0d:7c:b1:
7c:e3:35:8a:bf:82:2d:d3:72:10:6a:ed:a2:c0:83:d0:a1:90:
f4:b1:9e:89:2c:21:eb:79:99:d9:56:36:64:90:0a:f8:13:43:
d5:03:d0:39:08:76:0c:9f:c1:ac:86:a9:a5:bf:9c:8b:7b:b4:
eb:56:2b:dd:d6:e5:a7:aa:40:82:d3:0d:a4:3e:f3:d9:d3:c3:
b0:88:89:d3:ec:71:3d:48:72:d0:90:4a:d3:c5:80:bb:75:37:
92:99:03:8b:8f:28:48:f0:ae:df:08:38:3c:e5:df:61:4e:c0:
e9:9c:61:92:bf:2f:aa:50:b3:5d:63:e2:9f:b9:a6:35:81:e8:
93:cd:1f:0b:f6:47:74:ef:3b:5e:af:ba:d0:77:2c:96:a8:08:
17:8e:ef:27:43:11:bd:b4:f7:4a:c8:ab:7b:3a:18:ab:cc:26:
4b:fd:88:f0:50:1b:f5:87:ad:07:da:ae:87:41:46:13:20:05:
3e:eb:62:ed:83:85:df:29:89:93:e6:b9:65:6e:a5:54:8a:3f:
6b:f7:b8:d0:b5:59:e9:ab:36:7c:5c:cc:cb:00:db:96:e7:7d:
37:aa:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:39:13 2025 by rpki-client