Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: g1q2NUC5gQ2fV/WvUyB0oLpoEPxakYwgmoDkUl9NgBc=
Subject key identifier: 62:AF:1C:48:18:F8:34:E9:13:54:A8:E0:EF:C2:CC:EF:92:98:0B:E5
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01964BFD46B248324FC0A7F0DB0DC8515009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 03:00:11 +0000
Manifest this update: Sat 19 Apr 2025 03:00:11 +0000
Manifest next update: Sun 20 Apr 2025 03:00:11 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: rqTCirP9O0GA+CCLvoElT0ZwJ3/01N9DhVTBwqKj0oY=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:46:b2:48:32:4f:c0:a7:f0:db:0d:c8:51:50:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Apr 19 03:00:11 2025 GMT
Not After : Apr 20 03:00:11 2025 GMT
Subject: CN=62af1c4818f834e91354a8e0efc2ccef92980be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:78:22:ff:8b:1b:aa:df:48:1f:0f:f0:05:
16:d7:d0:dc:86:a6:fa:ea:e3:58:1d:b7:c0:e9:f8:
db:9a:0b:26:fe:06:38:b2:4b:c5:70:a3:3e:60:5a:
01:6d:35:01:13:50:55:e7:52:43:12:b7:fb:71:f8:
83:4d:fb:19:3d:34:c2:9f:61:8f:1f:db:e2:09:35:
dc:46:47:20:c6:a8:7a:19:00:f1:9a:64:48:84:8d:
b1:8c:e6:59:28:91:e4:30:84:d0:15:82:e3:07:33:
3c:b7:c7:e8:91:e2:35:c1:8b:23:f9:31:d3:26:4b:
b0:1c:d8:d9:b3:19:be:ef:56:0f:2a:92:68:e4:df:
33:86:8c:63:6c:2b:c1:c8:2b:f8:9c:d9:ac:ae:6d:
fb:20:bb:9b:40:1e:fe:32:fe:2b:eb:69:90:90:bd:
c6:8a:f2:05:f8:4f:54:00:39:10:9c:75:b1:96:f9:
5d:9b:65:ee:e5:36:a4:b7:34:ef:78:8d:98:ee:9a:
0f:8d:d3:8f:62:0b:95:4d:60:39:1a:5a:9b:31:a5:
b6:e3:49:d2:a9:97:67:7d:52:45:fc:21:61:f4:d0:
73:f5:3b:a5:10:b5:a2:68:dd:42:47:b1:c3:01:6c:
4a:08:3b:b4:90:a4:02:a9:c9:47:7e:97:23:c4:82:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:1C:48:18:F8:34:E9:13:54:A8:E0:EF:C2:CC:EF:92:98:0B:E5
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:9a:a2:c9:f5:cd:1b:8a:67:9f:1a:25:6c:07:72:1b:f0:
f5:e9:12:49:3e:64:76:7c:30:ad:c3:a1:78:e6:35:38:42:7d:
19:3d:a8:8f:cf:03:12:af:47:d2:dd:42:7e:34:4b:32:a4:7a:
1a:b8:d1:11:29:11:d7:a0:ca:65:68:ba:76:b3:99:f1:83:ea:
20:e4:22:4d:c5:b4:c8:df:ab:ed:11:41:e4:c5:1b:4b:6d:80:
d1:4e:59:06:02:3f:cf:b0:19:40:61:81:11:43:15:f9:46:82:
82:c8:a6:ca:ee:cf:39:00:8a:97:4e:06:03:d8:b1:df:d5:c9:
c6:76:42:b2:31:43:de:26:81:88:31:65:d7:c8:0c:49:26:3e:
48:6b:28:9f:c8:8e:ac:56:06:20:8f:de:82:7f:6c:4b:37:25:
a2:3f:1e:f4:35:0a:1d:a1:50:c8:e5:ad:17:04:b5:c4:f5:7b:
57:91:d1:6f:35:25:83:19:7a:c2:01:ae:00:59:13:8c:af:63:
f5:27:b2:ac:5a:7e:1b:d2:24:03:0a:ef:48:52:41:84:4f:f8:
36:83:89:d5:f7:45:4a:05:b3:41:d2:19:33:09:d4:bc:88:1c:
81:88:1b:13:a5:a2:bd:b1:d5:c6:7a:b5:95:c3:60:70:f3:75:
b0:c8:73:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/UaySDJPwKfw2w3IUVAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjUwNDE5MDMwMDExWhcNMjUwNDIwMDMwMDExWjAzMTEwLwYDVQQD
Eyg2MmFmMWM0ODE4ZjgzNGU5MTM1NGE4ZTBlZmMyY2NlZjkyOTgwYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq14Iv+LG6rfSB8P8AUW19Dchqb6
6uNYHbfA6fjbmgsm/gY4skvFcKM+YFoBbTUBE1BV51JDErf7cfiDTfsZPTTCn2GP
H9viCTXcRkcgxqh6GQDxmmRIhI2xjOZZKJHkMITQFYLjBzM8t8fokeI1wYsj+THT
JkuwHNjZsxm+71YPKpJo5N8zhoxjbCvByCv4nNmsrm37ILubQB7+Mv4r62mQkL3G
ivIF+E9UADkQnHWxlvldm2Xu5TaktzTveI2Y7poPjdOPYguVTWA5GlqbMaW240nS
qZdnfVJF/CFh9NBz9TulELWiaN1CR7HDAWxKCDu0kKQCqclHfpcjxILkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKvHEgY+DTpE1So4O/CzO+SmAvlMB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcCaosn1
zRuKZ58aJWwHchvw9ekSST5kdnwwrcOheOY1OEJ9GT2oj88DEq9H0t1CfjRLMqR6
GrjRESkR16DKZWi6drOZ8YPqIOQiTcW0yN+r7RFB5MUbS22A0U5ZBgI/z7AZQGGB
EUMV+UaCgsimyu7POQCKl04GA9ix39XJxnZCsjFD3iaBiDFl18gMSSY+SGson8iO
rFYGII/egn9sSzcloj8e9DUKHaFQyOWtFwS1xPV7V5HRbzUlgxl6wgGuAFkTjK9j
9SeyrFp+G9IkAwrvSFJBhE/4NoOJ1fdFSgWzQdIZMwnUvIgcgYgbE6WivbHVxnq1
lcNgcPN1sMhzVA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:38:05 2025 by rpki-client