Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: Q7cRjrg3/fnlWYnC5993EsXJyTXBAVcKuEGstGmfKW0=
Subject key identifier: EE:C0:22:4A:08:59:1B:3F:90:89:BD:80:68:34:DE:AB:C8:0A:58:82
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 0197507CCF7A69B2B3D3EE1E153B6109B598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 0F9C
Signing time: Sun 08 Jun 2025 17:00:46 +0000
Manifest this update: Sun 08 Jun 2025 17:00:46 +0000
Manifest next update: Mon 09 Jun 2025 17:00:46 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: B20B8nlGopDloit1XocFIvwe7kNys9eda1NO7JbeRX4=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:cf:7a:69:b2:b3:d3:ee:1e:15:3b:61:09:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jun 8 17:00:46 2025 GMT
Not After : Jun 9 17:00:46 2025 GMT
Subject: CN=eec0224a08591b3f9089bd806834deabc80a5882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:4f:23:d4:7c:3b:ad:76:2a:d7:47:2b:ad:
69:89:ce:21:5b:a1:f4:a8:03:5a:02:7a:84:b1:e8:
36:a0:18:42:75:46:09:19:51:71:33:a4:22:50:fa:
6a:42:d3:d9:14:65:ea:ed:d7:eb:e1:bf:cc:19:8b:
ae:21:66:6b:4f:74:97:e3:4a:71:cd:68:2d:41:4e:
a7:91:3c:2a:a6:e2:26:13:70:ea:d1:ab:d0:af:c4:
76:7f:d2:36:65:fb:37:ef:2f:2b:a6:24:2e:71:51:
db:99:58:47:2f:bf:4b:ed:99:98:c9:32:09:4e:93:
f8:d3:2f:99:93:c6:2c:e0:17:d8:d6:86:ea:94:71:
ca:3c:4a:fc:0e:5e:0a:19:28:92:4c:2b:1b:db:00:
ad:47:ca:df:93:8e:09:e5:05:95:eb:54:a0:16:6c:
65:41:60:c1:83:bd:b7:db:82:28:47:af:3d:06:c5:
d4:d6:bd:ad:eb:54:7f:0e:e7:cb:a6:14:f4:1b:bf:
3a:7c:46:7a:a4:f5:d0:e6:cd:da:03:a2:ee:f4:e5:
16:70:76:50:27:36:63:59:3b:c6:c6:5a:39:e6:17:
3b:1a:1f:3b:f5:b2:f6:a6:f2:cc:4b:fe:dd:19:bb:
e6:79:37:f2:8f:bd:a3:66:7f:67:2c:e2:5a:f4:4b:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:22:4A:08:59:1B:3F:90:89:BD:80:68:34:DE:AB:C8:0A:58:82
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cf:3c:01:20:f9:7a:70:0b:1a:94:79:75:b9:ca:32:54:a3:
df:82:e5:22:61:b7:a1:05:3d:d0:80:54:ca:69:51:7c:76:50:
24:fa:aa:74:12:7a:c9:e5:5b:44:3e:31:43:bf:03:ea:62:37:
82:41:bc:74:9e:7e:cd:70:ee:31:b5:cb:c6:01:e3:de:f6:a3:
cf:58:2a:a4:b6:88:d5:c1:fd:65:8c:32:5a:75:0c:75:ee:81:
32:f5:69:73:e5:77:6a:60:a5:7e:6f:ee:c4:53:f8:0c:b7:12:
f8:a7:28:19:cd:3c:ce:5e:09:3c:bb:84:8d:2c:50:ed:bd:82:
12:bc:69:e7:53:d0:e6:9c:45:02:98:67:c0:5c:2a:bb:e5:42:
91:b8:3f:32:52:cb:4c:0e:4d:4b:d4:7f:81:33:80:c1:60:c7:
3b:11:18:18:6b:0a:92:d2:b3:9d:ad:40:90:1f:fb:b7:50:12:
a9:00:ea:ef:37:b1:ab:6a:12:8d:f1:10:6c:94:6a:12:a9:d4:
7b:b5:07:09:41:3f:50:b6:5e:0a:1f:f7:2b:c4:fc:48:44:2f:
3e:d8:53:3e:54:39:12:82:ea:c5:87:81:d9:f8:fc:ff:35:10:
0a:32:90:c8:41:cf:e2:a9:1f:d2:a6:b0:eb:8a:ce:4c:da:ba:
e1:23:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:59:31 2025 by rpki-client