Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: TmXiCE17ERMQtqwJExWJ1jJIvuTMyc+UhuVMTeU40bM=
Subject key identifier: B4:71:EC:23:22:68:CB:FC:24:FC:83:0E:16:C6:65:18:19:D8:32:3F
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 01964BC69305303044278418B1FBD8D83B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 0F15
Signing time: Sat 19 Apr 2025 02:00:27 +0000
Manifest this update: Sat 19 Apr 2025 02:00:27 +0000
Manifest next update: Sun 20 Apr 2025 02:00:27 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: EXgvSWc1QiSL/XClwGms6jLHc0zZFuvb6/dquRIn/yU=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:93:05:30:30:44:27:84:18:b1:fb:d8:d8:3b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Apr 19 02:00:27 2025 GMT
Not After : Apr 20 02:00:27 2025 GMT
Subject: CN=b471ec232268cbfc24fc830e16c6651819d8323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:32:91:90:b5:f2:e2:3b:b1:1c:a3:c3:42:
e9:cc:3c:3c:82:10:b6:ce:66:75:32:7e:5f:0e:94:
f1:e5:68:60:c5:d4:a8:6f:df:1f:86:b0:a9:e6:26:
1a:f6:bd:04:5a:5f:5d:e3:02:61:fe:98:9e:b1:b2:
0a:07:38:1a:0d:ef:bf:74:61:82:54:12:80:e9:bf:
7f:ef:bf:1f:5d:1e:08:82:22:95:2b:c7:a1:cf:ce:
b4:b4:30:3f:c9:b0:c2:48:74:36:09:40:a9:7a:3e:
b6:5b:d2:f5:8f:e5:8d:c3:81:be:84:ed:1e:96:b7:
15:a0:cc:b5:0c:97:b9:0d:2f:06:cc:fc:6f:90:20:
dc:f3:2c:99:be:f7:c5:94:e9:44:4c:4e:2e:1a:67:
bf:e4:2f:b0:f8:11:d3:94:58:ec:3f:95:66:58:b2:
6c:35:84:80:7f:9f:2d:cb:06:81:2b:69:7e:34:55:
5e:92:22:3c:c8:6d:96:7f:31:65:b0:9f:39:7e:3c:
3f:d9:2f:02:ba:d8:08:35:6a:eb:e4:ba:b0:be:30:
bb:b9:ab:ef:14:8d:27:02:af:37:e6:ef:d6:e7:d0:
f5:64:54:94:85:95:43:90:d6:c3:e8:33:98:48:84:
99:47:bb:ea:c6:2b:9e:b5:f0:a6:fd:5d:34:f0:fa:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:EC:23:22:68:CB:FC:24:FC:83:0E:16:C6:65:18:19:D8:32:3F
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:ac:2d:ea:7d:c2:13:f4:f1:ef:46:f0:e2:dd:ac:95:07:
d6:77:4e:d1:ed:53:8e:b7:82:9b:77:a7:c2:ca:7d:67:44:38:
05:9f:73:61:8e:97:35:18:c3:2b:13:81:95:73:32:84:c5:81:
03:8c:de:d9:aa:1a:e0:b9:5c:c2:43:c5:85:cf:52:15:5c:b7:
aa:e5:4b:29:54:66:44:b4:44:ef:25:14:f6:4a:5d:e5:5a:32:
28:2e:43:30:07:38:04:1b:53:58:0c:11:0c:b0:65:df:82:2a:
9d:97:28:16:ab:59:e0:c6:bd:db:87:fe:dd:36:57:f1:1f:23:
4b:46:d7:fd:6e:e9:ce:7e:a8:a3:66:a1:2c:ef:bc:44:77:ff:
91:aa:b9:6b:33:b0:b7:b8:a3:e0:41:cc:ba:a7:d5:59:03:5a:
5b:ef:7d:e4:d3:9d:57:2c:53:26:6e:7d:1f:66:b4:82:3a:10:
61:c1:83:d4:d0:0b:8b:37:d3:5a:9a:43:d3:88:ab:72:19:f2:
29:2f:53:be:55:3d:4e:d6:61:9e:59:d6:f0:38:44:54:d2:82:
41:8b:65:54:8e:3f:45:c7:94:6f:1e:b2:0f:09:05:bc:4b:f6:
81:9c:ca:12:bb:20:e9:2e:05:c4:34:1d:0d:33:8f:af:16:e2:
c1:92:80:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:10 2025 by rpki-client