Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: wiNFW1d43I40PtkjE9BlQoMLBjrmfLTCFhIh8S+1/oo=
Subject key identifier: 82:64:39:EE:B3:34:D7:00:90:E0:39:1D:B4:FB:8A:BF:F9:C7:13:D7
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019656EF5073963B93D9474972DDDBAFA85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 030A
Signing time: Mon 21 Apr 2025 06:00:46 +0000
Manifest this update: Mon 21 Apr 2025 06:00:46 +0000
Manifest next update: Tue 22 Apr 2025 06:00:46 +0000
Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: FLv1hDbj1TUtPwUfXlMdjaTHBzQA6KtytdbjlIM61vE=)
2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:50:73:96:3b:93:d9:47:49:72:dd:db:af:a8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Apr 21 06:00:46 2025 GMT
Not After : Apr 22 06:00:46 2025 GMT
Subject: CN=826439eeb334d70090e0391db4fb8abff9c713d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:14:70:c0:b4:8f:d1:e2:b7:b2:f5:90:76:
9a:6d:83:05:fc:7a:fa:17:6f:9f:1e:c0:c0:24:ca:
0a:a9:0c:87:da:ed:a4:15:92:80:1a:f5:49:19:b2:
68:b4:32:f9:53:2c:48:ef:9a:82:4e:4f:cf:1e:93:
3e:b4:0c:d4:17:01:24:6d:2d:25:70:63:38:5a:01:
b6:61:d2:55:67:c2:30:ce:54:09:8e:bc:b8:d8:7c:
60:95:83:20:7c:b3:1a:c7:11:90:f7:e2:b8:ce:e4:
dc:86:2f:82:a5:7a:91:c8:9d:b9:9e:37:69:bd:b4:
c0:4a:72:8d:d7:64:4b:79:75:d2:94:39:25:73:96:
82:81:0d:4f:6a:5f:bf:2b:9a:6f:13:8a:3e:2f:1a:
64:45:da:22:cf:b5:a8:3d:cf:0d:7a:16:61:56:cd:
dc:76:03:2f:25:f4:dc:6b:1a:77:ec:dc:9e:2d:08:
5b:78:79:16:ee:73:d8:cc:94:34:ee:c8:cc:b4:85:
35:82:85:87:fb:3a:3d:ec:c3:9c:fe:1b:b0:8f:cd:
92:2d:70:12:6e:ea:d7:7e:8a:0f:b0:98:0a:98:73:
de:60:bf:62:5f:55:c8:3a:81:21:d4:3f:2b:d8:a2:
3f:99:09:dc:51:b0:e4:53:aa:1c:23:80:c7:cb:22:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:39:EE:B3:34:D7:00:90:E0:39:1D:B4:FB:8A:BF:F9:C7:13:D7
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9c:e6:db:c1:01:4a:a0:c7:c5:a5:a7:f8:21:82:7e:e8:5d:
e4:e2:ba:c4:a0:e8:41:0f:94:4a:d5:6a:ad:6f:f5:4a:6b:ef:
98:77:4b:61:fa:ca:d2:31:0e:54:d3:4f:a6:a4:5e:b9:02:a0:
47:f6:54:5c:02:4a:7a:7a:6e:d8:8b:16:60:24:4a:e1:0f:93:
f0:35:6e:45:9d:2e:10:f0:2c:19:69:0b:38:af:30:ca:4b:08:
69:be:a7:31:f0:5a:83:e3:1a:f9:6a:5b:4a:12:83:0b:15:1a:
2a:21:06:01:b2:74:ab:46:48:1e:0b:1f:86:dc:7b:6c:a2:25:
c6:3a:6e:26:4f:e3:6e:cc:78:ac:5d:05:3a:91:27:6f:1e:e7:
e0:cc:a3:63:20:c6:bc:db:b6:f7:29:07:8f:ee:f4:d9:b3:b1:
8a:0b:d7:ea:88:bb:2c:13:36:79:12:c7:66:f1:b6:f9:96:bb:
80:e0:9e:52:47:1c:76:37:5d:bd:95:7b:4d:8e:10:6f:53:3c:
ab:63:d1:3d:ba:4f:97:26:50:43:a3:e8:6b:65:e0:1e:66:9e:
d3:5d:d3:35:22:e7:35:ea:17:3c:c8:a6:b9:bc:9b:9e:e3:90:
b3:72:3a:57:41:26:fd:29:63:ac:0e:d6:76:2e:fd:fe:6d:ea:
dc:23:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:58 2025 by rpki-client