Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: Z/XE3p12k+gxKMIKPEK6x4tprkYKORBmOo9UWuzIzfI=
Subject key identifier: 84:A9:C7:0D:9B:94:25:5A:EC:B9:5A:D2:DC:8D:0F:49:66:52:C1:1D
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01963E0B8E6CB3B46DCBBB5034E3ED3FA81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 10:01:06 +0000
Manifest this update: Wed 16 Apr 2025 10:01:06 +0000
Manifest next update: Thu 17 Apr 2025 10:01:06 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: vpUaxVUu/8xhjLxEHfsD3mlL9V0wk+oSSo/43mcXD/c=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:8e:6c:b3:b4:6d:cb:bb:50:34:e3:ed:3f:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Apr 16 10:01:06 2025 GMT
Not After : Apr 17 10:01:06 2025 GMT
Subject: CN=84a9c70d9b94255aecb95ad2dc8d0f496652c11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:d1:d3:d6:59:e7:07:a1:ae:be:e5:ae:c3:
c6:09:08:74:33:80:5f:43:f3:ad:c1:15:4e:75:69:
7b:af:91:37:aa:fe:31:84:48:25:43:cd:cb:ef:00:
ce:7b:54:4d:8b:01:22:0b:34:d5:12:2b:9b:80:70:
75:6c:e0:41:52:6c:de:f5:af:d2:fd:13:df:28:42:
02:4e:8b:ba:d2:ec:de:77:4c:40:e3:f4:0c:31:c2:
65:c6:a0:0c:ad:da:a5:4c:72:d8:ea:0e:1d:de:3e:
82:a4:fa:ed:7e:e0:7b:5c:40:eb:41:0b:6b:70:81:
05:c2:32:69:5b:6f:be:e0:0d:90:62:7d:60:49:ae:
3f:56:ac:0c:9e:f5:a0:07:7c:27:f5:70:e6:d8:d6:
5f:09:17:5a:1b:d1:74:b2:4b:a3:bf:fd:f3:c7:b8:
79:6f:10:97:7e:7b:48:05:3c:50:8c:ea:1f:12:ee:
c3:6c:da:26:20:a2:7d:39:ed:88:16:8c:bb:a6:bf:
5e:a8:ce:7e:91:2f:b6:a7:c1:87:ce:18:58:53:9e:
ae:18:79:43:3b:0b:6d:88:b6:6f:b4:6b:a4:db:9e:
d5:59:bf:39:e7:de:fb:77:71:97:67:32:ca:ba:7a:
4a:b6:1b:ac:aa:42:06:82:22:c9:38:14:94:0d:ee:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:C7:0D:9B:94:25:5A:EC:B9:5A:D2:DC:8D:0F:49:66:52:C1:1D
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:32:e2:0a:47:e5:b1:c4:56:20:53:3c:b8:fc:c5:74:9d:8b:
1e:0a:6e:38:76:b0:1c:77:3f:90:56:28:d7:82:ba:fc:ab:91:
33:a0:df:31:d2:3a:97:87:0d:6c:b1:51:e0:25:12:c3:cd:07:
49:f3:d7:f0:8b:28:45:3a:56:51:a0:c3:fe:5c:40:b2:0d:0c:
b0:5b:94:83:f4:86:a5:92:bf:6f:9c:5d:7a:bd:6a:b5:9d:7a:
7a:f6:16:5e:37:0c:1c:73:34:d3:42:c8:66:de:0d:73:00:3d:
56:0b:c6:7c:60:6e:51:8a:4d:36:54:ee:06:d1:8c:af:94:d2:
75:be:7d:82:c3:16:20:fd:07:4b:b5:3f:d3:62:98:72:f8:fa:
7b:da:fb:11:06:3e:87:b9:d6:db:b3:85:53:bd:41:1a:c7:67:
d9:dc:11:b0:a0:d2:ef:af:78:e8:73:34:bb:d3:a8:3e:7d:98:
fb:d8:77:cd:2e:67:da:b3:8d:ff:dc:f9:ea:a0:a2:50:0b:34:
46:98:16:50:92:b7:fb:2c:c1:62:76:5c:54:1b:b4:7b:60:a4:
f2:8a:bc:17:5e:4d:a1:cb:fe:f2:c1:75:01:61:e8:4e:a3:d8:
d3:92:e4:91:39:49:de:84:71:ce:c6:b6:c1:3c:01:b9:52:da:
2c:97:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:27 2025 by rpki-client