Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: kKgFyDtpm0ERAEAULhwEewY41s2+5Q5caUgZGNKQ8eM=
Subject key identifier: B4:7A:31:5B:82:A8:C0:F4:E3:B6:A1:6F:32:8F:F4:68:06:B2:A4:C3
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 0196AE7BA294BB970FAE3D289A272841DA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0CE3
Signing time: Thu 08 May 2025 06:00:59 +0000
Manifest this update: Thu 08 May 2025 06:00:59 +0000
Manifest next update: Fri 09 May 2025 06:00:59 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: +b317dzOiBaXNBUQgnmSw3mePFYcDFhpRBJY+OE1gHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:a2:94:bb:97:0f:ae:3d:28:9a:27:28:41:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: May 8 06:00:59 2025 GMT
Not After : May 9 06:00:59 2025 GMT
Subject: CN=b47a315b82a8c0f4e3b6a16f328ff46806b2a4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:74:30:2f:5d:07:33:cc:bf:f7:a5:1d:6b:
49:22:92:dd:92:a7:5d:97:f8:76:68:a1:d7:e6:b1:
54:fe:52:e3:f2:4b:2b:9b:ec:b5:89:79:e4:29:ce:
43:cc:c2:c4:5a:88:6d:65:be:eb:27:e1:03:09:27:
3f:2e:56:cd:a6:dd:6d:d5:f8:87:94:fa:a3:eb:da:
24:f2:09:2b:72:a6:9b:57:1b:07:18:ca:20:e7:b7:
b6:be:7d:6c:e4:65:51:8b:cf:c2:f0:d7:a3:e7:01:
a1:5d:8c:82:ce:a0:3b:bc:10:d3:15:a9:7b:da:5a:
3b:47:00:fc:8e:15:7e:02:20:8c:5a:f5:1e:39:59:
50:4f:0f:11:4f:e9:52:4d:c5:9f:05:58:19:37:12:
83:81:f4:90:26:71:a0:2d:58:de:6f:32:84:c3:53:
a0:f4:81:58:fb:ea:a9:08:37:39:7b:0b:75:c1:20:
35:55:80:c4:1a:8a:a8:47:96:50:ca:c4:ef:1e:1c:
04:96:ae:39:1a:1b:3a:ad:e7:58:ff:f3:05:dd:ee:
50:c0:b5:8f:7a:09:c0:cd:08:17:cd:5c:79:87:c1:
d9:fa:49:b4:cd:01:fd:50:ab:0d:c3:f1:9c:d9:c5:
c3:f7:bf:fc:53:75:65:9f:0d:76:4d:58:a7:5d:d2:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:31:5B:82:A8:C0:F4:E3:B6:A1:6F:32:8F:F4:68:06:B2:A4:C3
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:7a:c4:cf:3c:ce:a0:66:49:7a:a7:64:f8:30:ee:75:6e:
90:c3:5a:b7:82:61:2b:e2:ea:d2:01:66:ec:a0:45:f9:08:31:
66:67:4a:9d:f7:9e:fc:52:90:c0:37:ad:25:4d:a8:2c:89:54:
60:75:ab:b2:0d:5c:f2:47:aa:28:86:6e:43:68:91:8f:78:66:
a4:e4:bb:45:f0:c7:10:c9:61:05:9d:a6:56:ce:36:15:b4:a2:
b9:f8:95:ca:77:a5:59:6f:dc:fe:88:39:ad:b5:bb:49:f4:b2:
79:7b:70:6d:32:cb:a3:84:ab:3c:40:04:b7:e9:1b:c7:f9:65:
56:35:dd:bb:b9:bf:c8:c2:12:4c:c9:ea:c4:c1:f2:30:58:65:
bc:d9:da:dc:ef:2c:a1:cc:46:da:21:f3:6d:1f:e4:36:6c:54:
0f:e9:2d:b0:b1:e1:f3:79:41:0c:c0:cd:0d:06:f6:57:f3:46:
ce:6b:8c:83:9b:9f:0b:e7:65:fd:b8:f7:3a:0e:2f:81:15:91:
73:39:30:db:71:0b:ed:93:37:03:09:6e:6d:ca:2e:df:c5:0b:
7a:15:1d:62:a7:f8:00:9b:1f:4d:92:0c:fc:53:22:75:b5:02:
ea:3c:c8:b8:02:91:9d:dc:a3:3f:95:0d:90:a2:e1:8a:f1:95:
f2:dd:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:17:38 2025 by rpki-client