Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: QAAS0R0kOAs/hHXFYoYOJYvQQVpSS0l+zkxCkMAZZvE=
Subject key identifier: 9B:1D:10:3C:37:5A:F3:B1:C7:F8:1E:36:0F:99:5D:1D:E6:9E:16:7E
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 01964BFDDE666D174EDFD18A596A103959FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 03:00:50 +0000
Manifest this update: Sat 19 Apr 2025 03:00:50 +0000
Manifest next update: Sun 20 Apr 2025 03:00:50 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: zK4tDZ/suNTs5HhbiloPGbCIxkeMnL5b+RdpV3tefII=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:de:66:6d:17:4e:df:d1:8a:59:6a:10:39:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Apr 19 03:00:50 2025 GMT
Not After : Apr 20 03:00:50 2025 GMT
Subject: CN=9b1d103c375af3b1c7f81e360f995d1de69e167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:9b:27:9e:1e:54:c4:4f:8e:d0:48:7d:b3:
33:22:b4:89:73:fe:30:e7:8b:71:21:22:d1:6b:b7:
a4:bd:3d:79:23:d5:e1:23:9e:ce:f5:99:f6:58:70:
43:59:37:06:0c:6b:5b:a1:8f:04:ab:76:8a:bd:88:
6a:24:3a:d5:0d:3d:18:7f:ff:13:e8:06:c6:99:2b:
1f:7f:1a:d5:aa:25:be:2c:a5:1e:dd:45:d7:a6:30:
ba:82:d0:db:eb:58:3f:54:2c:cb:ad:76:0c:5a:26:
fb:33:04:d4:b1:6d:a9:fe:d4:c8:bd:a4:a0:3f:7a:
3c:ed:00:9d:13:2d:f7:1a:6f:82:dd:3c:b2:a9:2d:
ee:88:0f:be:33:e4:39:d4:d7:46:2a:4e:f4:fb:0b:
ee:8b:35:78:60:c4:da:e2:52:89:f7:5b:9d:a2:e0:
5d:e2:2c:5a:f8:96:01:88:17:ed:b8:24:e8:cf:6c:
68:15:0e:d7:36:be:d9:38:8c:96:98:e9:9d:c9:a8:
8d:24:2f:24:49:1d:55:a5:fc:60:54:09:0f:a2:a8:
d3:2e:37:8d:d4:55:f9:f1:7c:8b:dd:75:b7:8b:7e:
83:3c:fb:73:95:5e:cb:9f:b1:01:e0:79:01:01:ab:
df:03:05:51:97:a9:46:a5:39:1a:43:84:90:24:cf:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1D:10:3C:37:5A:F3:B1:C7:F8:1E:36:0F:99:5D:1D:E6:9E:16:7E
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:92:52:5f:1a:44:2d:90:22:eb:f9:20:49:c4:33:4d:04:
05:2a:a3:64:d2:91:b2:3a:34:ba:c8:ae:fd:79:55:84:1c:77:
16:50:02:36:46:a2:04:61:89:50:8a:c9:fc:ba:f3:55:77:a8:
0d:ed:11:ae:95:84:b0:eb:9e:94:aa:de:5d:8f:33:d4:1c:6f:
8e:4d:c3:4c:b3:89:e5:f8:18:62:ff:ba:a5:1e:08:28:94:3a:
c6:bc:dd:f6:99:c0:c0:6f:e4:61:0b:3d:ad:c7:d9:c6:1a:94:
99:62:81:c6:7d:e7:e2:6c:aa:1f:87:4b:39:3a:c0:58:a4:f4:
0b:1e:56:a0:99:78:4e:d3:d7:52:84:09:51:bb:34:24:6a:d1:
27:be:15:38:17:84:20:66:1a:80:42:39:7b:ab:3b:ee:a3:2e:
0a:cf:79:41:1d:a4:c1:f6:8d:eb:d2:07:77:f8:75:f8:e9:79:
78:41:fd:ad:f1:eb:08:bb:f8:ff:ce:53:df:d8:6e:95:a2:bf:
47:15:6b:30:c4:43:06:ef:4a:82:99:06:d7:81:68:8a:e3:1e:
61:d5:bf:4f:53:38:2c:ca:a3:2d:2e:db:e6:bd:3b:6b:0d:91:
1a:88:7d:28:54:94:ff:cf:0c:c9:57:5e:a5:bd:99:ff:b0:a9:
94:b7:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:14 2025 by rpki-client