Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: cG4KqLz3DeJO92VT7cQAasYU3iYsu4kQ+41s98OtZxU=
Subject key identifier: 4C:E0:B6:05:9E:45:7A:0F:3A:43:39:36:32:53:0E:CB:6B:57:6A:57
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 0197469E49913D024B8AE398968C4C7CC7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0C62
Signing time: Fri 06 Jun 2025 19:01:08 +0000
Manifest this update: Fri 06 Jun 2025 19:01:08 +0000
Manifest next update: Sat 07 Jun 2025 19:01:08 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: HNA/WLZkeIWG2tmdyTs3H2kSBsrQpEYjmMLr1XnBe0w=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:49:91:3d:02:4b:8a:e3:98:96:8c:4c:7c:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jun 6 19:01:08 2025 GMT
Not After : Jun 7 19:01:08 2025 GMT
Subject: CN=4ce0b6059e457a0f3a43393632530ecb6b576a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:ed:63:11:cb:ff:dc:bb:9b:93:38:9a:ec:
c5:29:50:0e:fa:15:27:3a:e7:dc:cc:c9:15:9f:a8:
0d:70:3e:3b:0c:17:90:02:a0:d1:9e:11:d9:b8:0b:
92:61:17:d8:cb:49:8c:ef:d2:71:88:bc:55:73:95:
dd:ad:f1:0c:72:b8:06:2b:6d:76:d8:3c:15:0c:fc:
05:81:a1:07:58:3c:75:48:1a:ae:38:37:d1:20:21:
ea:5d:f1:b0:08:d1:07:08:dc:c9:d6:96:d3:9e:de:
ca:30:22:a2:45:b2:b0:66:b5:30:5e:ab:15:78:d0:
34:41:c1:8c:f5:68:96:ae:24:20:0e:2d:1c:49:8a:
58:a6:7a:87:75:d2:73:56:e7:8a:41:d8:17:39:3c:
88:2d:84:2d:90:7f:24:06:44:e0:8b:fd:d1:26:e4:
44:11:b5:bd:eb:db:40:97:b5:35:f7:ef:0d:13:15:
b4:ed:88:1d:25:07:88:b5:87:bc:11:30:7b:3c:3c:
7c:80:8e:a0:90:d3:92:1a:be:d7:b2:98:34:c5:f5:
81:ed:45:60:6c:65:71:3d:7f:44:39:da:4c:4d:60:
df:b6:bc:f6:f8:7c:a3:0f:cf:7e:6d:3b:ac:56:21:
3a:e8:f0:6f:80:11:a2:4d:73:e9:f9:96:a1:24:bd:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:B6:05:9E:45:7A:0F:3A:43:39:36:32:53:0E:CB:6B:57:6A:57
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a9:49:cc:7c:69:ec:dc:f3:d2:42:92:c2:08:9d:03:d0:0f:
3e:f2:3d:bf:6b:5a:c9:2d:21:49:78:76:5c:87:13:29:8d:4b:
00:41:5f:57:79:71:13:61:59:16:87:4e:00:26:49:0b:4d:00:
60:9f:cc:fd:6e:80:c8:b5:8c:63:b3:a2:73:62:98:f8:50:01:
ae:bf:69:14:01:95:94:67:ec:4a:04:ed:cf:6f:4a:ba:d9:57:
ec:00:6a:f8:1a:51:53:7d:66:d2:1f:82:df:19:ac:9c:0d:72:
29:7c:a2:1e:13:11:3c:0a:f9:b9:d9:0c:85:bb:f6:e2:8a:51:
f1:06:e2:ca:da:50:8b:52:7f:10:d2:29:14:da:bb:4c:bc:28:
69:f4:bb:11:68:6a:3e:42:0e:e1:13:4c:3e:75:a2:21:8b:d8:
38:81:47:29:8d:da:e4:a9:e3:0e:b3:08:a7:c2:76:ad:e2:d1:
e1:a8:f3:ba:54:12:1b:f8:16:f6:02:81:8e:b0:3f:bc:be:04:
55:17:1a:05:42:bc:4a:2e:7f:52:33:99:15:a6:f1:18:44:51:
a4:8e:2c:53:d5:56:9d:37:38:6e:37:4a:c7:df:76:fb:95:91:
80:d3:ad:d9:47:81:c4:2b:c2:0b:9e:db:85:3a:69:a5:45:48:
17:64:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:27 2025 by rpki-client