Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: +NhdsVrmSaTV2gey9pC6qwJQhrjBrzs970LjwawuFHk=
Subject key identifier: AF:47:0B:BA:68:5A:0C:4E:EF:DA:8F:B5:EB:58:1B:B4:4C:29:7C:D5
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 0196BFDCDA33D71024DCE8113D827F9756D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 15:00:44 +0000
Manifest this update: Sun 11 May 2025 15:00:44 +0000
Manifest next update: Mon 12 May 2025 15:00:44 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: WoqFfI2d+NQpsyeZS2dl+tNvpXaZtCVXky8a8pWkZL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:da:33:d7:10:24:dc:e8:11:3d:82:7f:97:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: May 11 15:00:44 2025 GMT
Not After : May 12 15:00:44 2025 GMT
Subject: CN=af470bba685a0c4eefda8fb5eb581bb44c297cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:16:f3:e1:29:27:75:76:9f:1f:7e:2b:70:
51:36:d4:c5:39:df:c5:c6:4f:31:43:88:2e:88:1e:
c8:01:d1:9e:1d:40:0e:8e:25:e4:f1:34:f5:01:d7:
e1:a4:97:e0:06:e0:8a:5b:20:94:8f:b5:ea:3f:37:
07:e7:5f:03:40:ad:e2:ea:95:6a:c9:2c:aa:74:bf:
ab:af:0d:fe:44:7f:d8:71:83:b5:5a:2a:ca:10:3b:
10:57:5b:be:46:8c:95:a9:33:52:37:ea:6e:32:09:
91:1c:68:86:d3:fb:62:a7:33:20:74:a8:73:db:71:
f7:c9:9d:56:bc:d6:63:b8:37:c1:5f:cc:51:32:81:
a5:f7:fb:e6:7c:3d:f5:5f:72:3c:c8:33:71:1d:5e:
02:b9:5c:e9:3b:c1:94:4c:de:da:44:0e:01:18:2a:
f4:c8:ec:df:bd:6e:ea:31:ef:f8:f6:22:bc:36:86:
02:00:64:52:5b:61:1a:8e:63:e0:b5:60:cf:89:76:
e3:b3:64:4e:54:86:8a:26:00:f3:9e:85:84:e1:ef:
85:9e:50:62:ad:3a:91:e8:fa:05:58:4d:6d:30:2d:
c0:9e:1b:87:e2:7b:bc:95:e6:0f:9d:f5:3d:74:dc:
5a:79:e5:47:da:fd:7a:2b:49:3f:87:f8:52:ac:f7:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:0B:BA:68:5A:0C:4E:EF:DA:8F:B5:EB:58:1B:B4:4C:29:7C:D5
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:0c:46:ef:f0:c9:93:fb:26:c5:8f:f5:c6:48:ee:5a:1d:
f0:c1:bb:e1:df:32:89:81:ab:75:42:3e:4a:58:b8:85:4c:30:
6c:44:f8:3c:c1:04:ae:5a:56:c6:a1:04:da:0e:29:eb:2f:0b:
51:d6:67:d8:bd:1a:a7:68:46:32:af:8f:ea:d1:cf:85:70:52:
97:58:09:e4:90:03:23:c6:79:d8:50:12:af:56:11:72:81:f2:
6b:05:07:b0:4c:bc:08:37:94:f7:c9:ec:f1:a9:b0:3b:8d:0e:
71:d4:15:b0:c3:03:98:f5:a3:db:e4:45:69:68:4c:b3:de:c4:
e8:d9:a8:2f:7e:23:dd:99:4a:95:f6:2a:6f:3f:6c:63:37:62:
8c:89:1b:13:f1:4c:77:e3:4a:95:21:3e:f0:6a:b7:6a:97:81:
2b:fc:b9:df:39:a1:f6:1d:9a:3b:1d:83:a0:57:1f:f4:5f:d2:
05:05:35:fc:27:a7:bd:34:57:95:76:21:cd:bf:26:90:31:45:
da:bc:ac:fb:43:2d:9e:88:ea:d0:d5:5e:5d:ee:bf:d7:99:19:
41:ad:af:ec:47:e8:25:7e:34:5d:02:71:12:84:c3:02:03:23:
d0:74:ba:bf:f9:d9:b5:8e:b3:0b:74:96:ce:52:f8:f7:26:8a:
e2:70:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:31:39 2025 by rpki-client