Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: fFPw0/VmmdyvJeP5FuESa1y/+1erAj9qyRBnLbyO694=
Subject key identifier: 33:35:CF:33:DE:F5:83:C4:D4:A9:6D:CF:40:38:F9:51:50:04:CA:12
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 0196120EAF2D49965A88208C676A7F027182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 1147
Signing time: Mon 07 Apr 2025 21:01:14 +0000
Manifest this update: Mon 07 Apr 2025 21:01:14 +0000
Manifest next update: Tue 08 Apr 2025 21:01:14 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: OBKpSKiC8/eOr3bnSX7p/Ke8l95TNQuwLP/5hPMLot8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:af:2d:49:96:5a:88:20:8c:67:6a:7f:02:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Apr 7 21:01:14 2025 GMT
Not After : Apr 8 21:01:14 2025 GMT
Subject: CN=3335cf33def583c4d4a96dcf4038f9515004ca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:6d:ef:3c:ef:81:d1:3a:b1:a7:a3:eb:7f:
fd:12:b8:da:9b:01:44:16:d4:d7:1a:82:3f:67:45:
ee:01:b2:14:f0:60:52:68:ca:89:cf:57:ac:13:70:
bd:c2:8f:a5:7f:a1:4a:79:56:62:ee:ba:51:2b:95:
8e:f9:ec:f4:08:bb:e9:65:ea:46:81:ab:ec:e3:6e:
fc:f1:e7:f2:72:6b:74:ff:e9:6c:a9:11:94:b6:ce:
c7:1c:25:3e:43:a2:cb:63:16:6f:50:06:c6:48:7a:
76:ca:e8:5c:6d:47:90:6e:a8:aa:ef:b5:62:49:3d:
1b:81:e6:dc:d5:89:96:f1:be:9c:ca:0a:d4:7f:c4:
a2:fb:a7:60:b7:07:26:47:8a:74:76:45:03:e1:a6:
08:14:99:31:d0:fb:ef:da:0c:39:c8:60:d9:02:33:
67:1c:07:f1:96:98:7f:05:0a:26:34:57:c0:92:c1:
20:1f:38:a5:ce:75:19:05:1d:64:cd:1c:ba:58:09:
54:98:bc:66:87:71:0c:5b:b8:3d:77:50:d1:73:e0:
92:6d:08:86:39:59:a4:cd:9d:c1:03:7a:9d:03:bf:
4d:1b:09:ad:9c:94:29:2b:16:3e:e5:1e:05:0a:20:
23:98:1c:28:ef:5f:66:35:38:79:17:39:6d:a3:fb:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:CF:33:DE:F5:83:C4:D4:A9:6D:CF:40:38:F9:51:50:04:CA:12
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:52:f3:f0:0d:64:81:c5:55:80:ce:79:2b:9e:56:01:fe:7e:
93:b9:4c:40:a0:09:25:b7:de:3f:27:8b:6e:f6:20:38:3c:32:
0f:aa:b2:89:2e:64:02:45:d3:fa:c2:4a:e8:7f:88:ff:d6:57:
a6:29:11:f7:1a:f3:a4:40:0f:ee:1d:54:3c:77:d5:68:04:3f:
84:3d:10:9c:c4:0f:cd:6c:80:85:05:ac:ab:19:42:68:9f:b4:
a9:72:ab:fc:b5:fa:0d:5d:68:55:4e:b6:d6:e5:1f:0a:66:3d:
0a:3e:44:9e:7b:5c:b3:f6:b5:b3:d1:be:85:2d:52:21:d5:34:
bf:5e:1f:26:5a:1f:46:25:02:26:f1:3a:cc:77:88:15:de:ee:
c9:b5:66:f3:01:8a:5b:6e:a0:bb:0d:c8:43:c0:c0:8c:bd:35:
31:0c:8d:2b:d8:a9:56:d6:35:4d:05:a2:9e:31:6a:51:01:64:
72:85:c2:de:ce:e5:95:8a:67:d9:af:d7:8b:99:e0:58:83:95:
0e:52:7c:40:f5:1a:47:da:7a:23:5f:8d:3e:7d:b0:be:4f:3a:
74:37:de:2a:99:f4:84:71:d0:da:30:36:4c:03:79:ba:4f:02:
3f:68:9e:56:46:c5:93:fe:af:0c:25:1c:0f:1b:39:09:0f:55:
46:89:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:11 2025 by rpki-client