Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: 91Rtv9lJX2dfEl40/WH9/fwN++Ye/yQtzr35rhKxWyg=
Subject key identifier: 71:81:22:BB:3A:9C:03:AC:DF:1F:EE:11:D6:6E:62:1A:FE:BF:E5:95
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01964D7EF825A934845AF95D54DEB6D5A0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 10:01:28 +0000
Manifest this update: Sat 19 Apr 2025 10:01:28 +0000
Manifest next update: Sun 20 Apr 2025 10:01:28 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: rYusq1qGww2TuXVvPlfAMtzSI/YIQx+WrAkjksFFuiw=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f8:25:a9:34:84:5a:f9:5d:54:de:b6:d5:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Apr 19 10:01:28 2025 GMT
Not After : Apr 20 10:01:28 2025 GMT
Subject: CN=718122bb3a9c03acdf1fee11d66e621afebfe595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:6c:a1:f3:14:4d:93:b7:1c:bb:62:92:f2:
d4:74:13:c2:4e:34:e6:f1:6c:c3:63:67:65:27:20:
6e:68:47:48:d3:14:e5:56:1c:95:8e:cf:b1:7d:36:
01:fd:e7:a2:29:74:32:fd:64:04:f0:c9:79:00:51:
8a:f8:72:c7:b5:05:1b:14:8c:7d:55:33:e7:18:a4:
e7:76:d5:76:ab:be:fb:c9:83:d0:49:6a:ed:f0:87:
98:93:e1:48:e6:2e:f2:95:81:2c:06:b8:b0:59:eb:
f1:8b:e5:75:89:b6:c7:d8:56:02:c5:03:ad:dc:31:
34:2f:1b:db:e5:68:79:00:e4:81:2c:c3:a9:11:86:
6a:67:03:4f:48:22:b1:cc:6d:1c:ff:03:63:59:5f:
ac:87:50:f3:08:c0:fb:90:f5:92:0b:cb:f8:da:72:
45:4a:3a:e1:ef:d7:35:47:d7:03:c4:19:f7:d9:03:
f2:37:29:f9:38:71:0d:06:96:7c:8d:cc:49:af:1a:
5f:a4:70:7b:95:2c:bb:a9:af:16:b8:a2:c4:a5:08:
e5:fc:81:0c:2d:aa:23:ea:4c:02:de:48:2a:45:34:
e6:8c:92:7e:5c:b4:83:e7:39:43:2e:47:39:ab:00:
c4:65:fe:9c:a9:69:30:c4:b4:8a:54:95:be:97:af:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:22:BB:3A:9C:03:AC:DF:1F:EE:11:D6:6E:62:1A:FE:BF:E5:95
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:37:30:a0:21:e3:56:af:2b:c3:2c:36:0e:68:eb:88:a0:
51:35:61:1e:ad:73:f5:97:d3:cc:3f:1a:f8:67:ad:f9:1e:3a:
c4:79:c6:13:ac:c6:41:9f:3f:98:a3:d1:34:04:3f:33:75:b6:
7a:f3:4c:7b:87:57:63:6e:cc:68:b1:e1:0f:47:2e:49:a1:82:
c2:8a:4b:f0:8b:fb:9b:dc:48:85:d1:7b:4d:46:19:13:31:9f:
e8:d7:89:12:e3:b7:5d:25:ac:73:21:5f:90:2e:dd:ca:8c:22:
06:1a:e0:57:62:bd:ff:a9:72:ab:75:dc:3b:79:ff:7e:e5:2a:
06:ea:97:d6:9e:84:82:d8:df:c6:11:fc:54:8c:c1:cd:cd:35:
e0:b1:54:f1:09:3d:5b:a4:54:03:ab:a4:b5:ad:06:3e:31:95:
c2:c3:5e:fc:5b:72:b6:02:0d:18:9b:b1:08:76:5b:37:a4:51:
35:3c:a6:d6:27:f7:e6:78:ff:0a:6d:27:5b:16:fd:90:b7:1b:
3e:b5:bf:44:63:10:b5:40:ee:58:01:21:83:34:7c:a3:6d:ac:
12:3b:d2:9d:8e:fc:72:99:64:1d:24:67:cf:9f:1d:5f:9b:2a:
47:13:d8:f2:47:09:9e:11:c4:2f:5f:e6:02:25:bd:29:b9:ce:
b6:8e:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:54 2025 by rpki-client