Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: gFEiiwkIepb+324lcofoqm6HVR27GtYaLVETK9H1xTY=
Subject key identifier: 48:08:DB:73:14:21:47:26:6C:DF:1E:C7:3F:6A:61:FA:A2:DA:9A:A8
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 0196CB04D4C19956A2979309EF6334A6C119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 19:00:13 +0000
Manifest this update: Tue 13 May 2025 19:00:13 +0000
Manifest next update: Wed 14 May 2025 19:00:13 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: JLA95gRuRaWD4OO+mSDsYdogI0ZlqcWRBQzmPBvE9uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:d4:c1:99:56:a2:97:93:09:ef:63:34:a6:c1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: May 13 19:00:13 2025 GMT
Not After : May 14 19:00:13 2025 GMT
Subject: CN=4808db73142147266cdf1ec73f6a61faa2da9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:7a:58:7c:8b:1b:df:94:d7:99:cd:0f:9a:
b3:53:48:f7:1e:e6:98:62:fb:dd:bb:c8:69:04:4d:
b8:ec:1c:e9:63:06:11:c5:66:0b:14:1f:85:89:b9:
da:a3:0f:c0:18:2e:f9:5c:d0:b5:b6:23:d5:0d:09:
f4:0c:18:57:96:51:af:07:8b:57:ba:31:76:6b:6e:
73:10:21:86:91:1a:99:31:4f:a1:45:a0:53:09:44:
b9:9f:79:ec:87:28:1c:d0:62:a5:1e:0c:07:ed:fa:
ca:00:92:30:35:a4:31:e4:6b:0c:0d:f8:4b:0c:be:
21:56:8b:01:19:f8:75:d2:4d:7f:b5:7b:2a:77:ff:
0f:20:e6:d7:40:2b:82:3a:6e:82:17:2f:c2:fb:0d:
1f:5a:10:ba:74:45:de:1a:c6:54:a0:24:ed:a9:9c:
22:5b:9b:7a:0b:d8:3a:6d:5e:d0:e9:5d:42:61:56:
8a:1c:af:14:a5:48:1e:9b:6f:40:75:d0:c4:cd:80:
3a:51:44:44:f1:2d:11:aa:5a:40:8c:b5:74:ee:f0:
bc:4f:37:0e:65:ec:89:9b:f4:16:8c:5a:32:d9:24:
e8:1e:15:29:8b:25:01:66:5d:65:c5:3d:0f:dd:86:
03:d5:a3:32:6d:15:04:07:8c:3d:1c:23:94:13:84:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:DB:73:14:21:47:26:6C:DF:1E:C7:3F:6A:61:FA:A2:DA:9A:A8
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7c:ea:84:7c:de:4a:89:df:56:4c:3f:9b:0c:a9:ba:ec:f9:
9e:6b:ca:c4:6e:0e:67:c9:12:07:ee:20:13:d4:06:20:01:db:
43:d7:f4:8e:9c:e9:e4:28:6c:62:45:d5:f4:88:0b:f4:e6:0d:
05:cc:5b:22:fe:b5:ef:11:c6:f1:f5:e8:96:42:1f:be:44:cd:
cf:14:fb:db:f7:22:1a:2e:56:41:3f:43:62:ed:4f:a0:0e:61:
ef:19:4f:a6:3f:d7:4a:5c:3a:3a:ae:5b:79:8e:08:ef:fe:7f:
c9:bd:e7:a7:11:1b:0f:3c:c0:58:34:28:13:fc:ba:92:c5:52:
2b:08:f0:90:59:ff:9c:fc:2f:be:a2:03:10:82:f2:9b:cd:e2:
9d:97:ab:60:91:ba:dc:3c:a2:17:95:a3:ea:5b:1a:d6:59:88:
c1:05:ff:51:8e:b0:d6:9a:bf:93:1e:5f:06:88:e8:20:6c:b9:
82:2e:c0:f6:0d:b9:02:2c:20:d2:a0:a7:ee:5a:e6:61:e8:46:
8f:cf:c1:65:df:44:c2:30:45:8c:93:30:89:f3:bd:35:ee:f1:
47:17:96:ea:90:60:4f:ae:b4:e4:38:27:cf:99:f1:1d:48:78:
99:3d:a2:d4:20:7d:1a:8d:3d:32:e4:fc:0e:60:ca:38:ef:63:
3b:1b:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:03:31 2025 by rpki-client