Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: bndWrhVQp8Le1RriN+Rgq7ncuMO2Se4KnvTVyOr2AoE=
Subject key identifier: 94:34:B4:A5:F0:7E:A0:46:75:E8:E7:49:B6:E7:D0:AC:25:FE:20:FD
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019749D612F2B99621B6FC11DE1DDC3B11F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 145E
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: E8frjCOTdqIY6ruQaLUvVD0MBBQ73chqLzkOOcShif0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:12:f2:b9:96:21:b6:fc:11:de:1d:dc:3b:11:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=9434b4a5f07ea04675e8e749b6e7d0ac25fe20fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:7a:53:78:90:93:22:a1:63:b7:66:8e:3f:
6d:52:e0:8e:c0:ae:b2:f2:3e:ef:df:19:4a:a9:49:
f4:f0:ad:b4:7c:f4:a3:e8:ff:04:c5:e4:5b:9d:82:
4f:ec:3b:11:f2:dd:76:f8:ce:a2:9c:2e:c4:7f:54:
42:fa:ba:d7:b6:e4:d0:45:09:d1:77:3b:98:31:ed:
58:ff:f7:c6:dc:dd:fd:43:ac:93:32:5d:48:cf:c1:
19:62:0e:7a:af:3d:5c:28:cb:3b:23:ff:d9:7b:d5:
35:34:c3:1c:aa:7a:dd:43:bf:c1:4c:b8:1d:7c:b1:
4c:87:a7:72:32:06:f6:db:16:ed:22:e0:9c:92:63:
3c:c0:dd:66:bd:24:26:cf:11:0a:66:29:0c:62:0e:
47:a3:73:6e:71:90:aa:54:43:ff:76:cd:e6:ac:58:
f6:d8:77:5e:35:a3:57:a3:2f:82:6e:71:93:bb:0e:
c1:6a:94:a8:9d:07:0e:f8:ae:6c:3b:81:fc:37:ad:
9b:d9:15:58:5c:50:cf:79:bd:6e:25:e9:62:c1:55:
f5:8d:f3:7e:2b:6f:b1:26:61:00:f7:99:56:87:d3:
9e:89:b0:a6:45:37:67:84:d2:0c:f2:b0:68:9e:df:
3f:22:c9:e3:fe:45:88:8d:cb:f8:a3:ad:98:ca:96:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:B4:A5:F0:7E:A0:46:75:E8:E7:49:B6:E7:D0:AC:25:FE:20:FD
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:22:cf:65:9c:09:b0:62:36:19:1d:66:e4:e0:d5:59:05:
1d:0e:8f:39:3a:e4:ce:d8:8f:b8:40:ef:15:6f:ad:b1:1d:9c:
c7:73:ca:49:66:a4:29:a4:07:5e:dc:ba:d5:ae:37:3a:ac:e1:
d7:d2:9e:ab:9f:39:bd:18:cf:fd:0b:87:51:f6:de:3a:c8:6f:
0c:a6:57:5d:52:56:71:ed:cc:a8:87:a3:4d:5f:d1:89:ad:25:
a8:17:6a:3a:89:9d:e7:fb:8c:d8:69:0f:fa:14:a7:c7:f7:0a:
cf:14:45:1e:24:cf:32:8a:ba:a6:08:b2:70:a8:13:41:08:a6:
44:64:8e:b5:2f:db:b7:bd:23:6c:82:56:94:c0:8c:a6:78:59:
28:27:84:8a:ba:ae:fd:b9:4c:b5:25:a9:4c:9e:3d:69:dc:3f:
ee:64:b4:8d:4e:ab:0b:f5:08:ef:57:91:3c:7d:92:d1:d3:85:
43:78:e8:df:1f:43:2a:a1:d5:5c:07:77:b6:23:c0:51:e1:6d:
53:6b:79:ad:6e:3b:3a:82:dc:62:d0:cb:83:8b:3a:b6:33:3c:
71:42:24:fa:9b:66:76:90:fe:89:0f:ee:54:db:92:fa:94:27:
a5:5b:1a:44:37:f8:16:de:5e:c9:22:a4:49:72:f1:66:25:a9:
08:e4:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:11 2025 by rpki-client