Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: b2DbB6jQQyYvvLUrdvDaAnKQR1u3aN+7FksHP2Ki4EM=
Subject key identifier: 3A:EE:18:71:19:4B:20:21:4B:60:23:7B:9C:B7:E1:6F:C0:65:EE:03
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019759126314FCB3EEDB49C46219DDC873F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0DB3
Signing time: Tue 10 Jun 2025 09:01:06 +0000
Manifest this update: Tue 10 Jun 2025 09:01:06 +0000
Manifest next update: Wed 11 Jun 2025 09:01:06 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: 4ZMseW03mEhr2++BZJQ6k7kz/VPM02odazhPNUKEsi8=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:63:14:fc:b3:ee:db:49:c4:62:19:dd:c8:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jun 10 09:01:06 2025 GMT
Not After : Jun 11 09:01:06 2025 GMT
Subject: CN=3aee1871194b20214b60237b9cb7e16fc065ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:2d:f1:84:70:b8:d1:a9:a3:e6:9c:38:a6:
e4:fa:fe:61:c0:a8:17:3c:9f:0b:f1:bd:45:f6:50:
f2:1a:fe:ce:d8:99:16:30:9b:05:1e:33:9f:9c:56:
a0:ae:d6:2d:7c:c8:42:23:7c:02:7b:a0:67:1b:b9:
29:9c:f7:bc:d4:33:e5:a1:60:44:e8:1d:64:07:84:
b5:3f:8f:c0:7f:da:93:d3:90:a4:0b:51:f5:15:a1:
92:77:7d:27:10:42:2b:78:c8:75:01:e3:ae:18:df:
8d:07:73:bc:00:be:8c:0b:3f:e0:d2:0c:07:7b:a2:
cc:52:9c:7b:bd:c9:1c:b6:07:db:0d:ea:4e:7c:4c:
60:e3:ae:ae:c1:2a:58:58:eb:64:f4:38:ca:8c:9e:
61:32:ac:6d:76:8e:64:be:aa:77:29:45:19:c0:35:
0b:c9:32:cb:99:72:8c:71:16:cc:1a:34:88:85:d1:
3f:d6:c9:43:0e:53:6a:51:7e:35:ca:4d:c0:b3:ad:
e6:87:07:4e:01:84:e4:fc:08:fd:f8:f7:ff:80:95:
82:13:5a:28:7d:03:a1:6e:22:78:5b:bb:06:77:ad:
09:d0:6e:80:29:79:74:94:48:1e:b2:5f:ba:66:93:
76:73:42:b4:e7:cf:a1:1b:2b:2c:a4:ab:d6:4c:f1:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:18:71:19:4B:20:21:4B:60:23:7B:9C:B7:E1:6F:C0:65:EE:03
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:7e:c9:a4:fe:f9:55:75:da:7c:9f:4a:16:8e:2a:56:51:
d3:ef:c5:be:53:97:3d:db:f2:f1:8e:31:db:b9:bc:aa:c1:48:
ba:8a:e6:0d:06:81:08:89:22:63:c2:2f:fd:22:f3:c2:b9:bd:
f4:de:01:60:8f:00:26:34:33:5c:bf:77:a1:a6:f3:27:c8:f2:
d6:a3:2a:ac:f3:49:9e:4e:7c:bf:ed:41:22:ed:ef:32:a6:46:
5c:b4:b5:af:c6:5a:ff:3e:05:d1:6b:ff:83:e1:3e:d4:5d:31:
2d:66:5e:9e:5d:42:d4:72:07:78:ab:e8:7f:ec:5f:b0:ee:80:
50:00:9d:db:f7:13:61:3b:93:ce:05:94:da:9c:ed:9e:1d:c0:
81:76:75:e1:de:c4:8b:e2:b3:dd:8f:9b:2e:40:c3:67:87:91:
e7:84:e1:e6:4b:49:03:ed:17:68:3c:ac:c5:11:25:92:9a:ef:
34:20:a3:51:dc:f3:50:02:e4:27:be:b8:7d:04:5d:4d:3c:7f:
40:ea:f2:9a:53:55:0b:58:0c:05:f0:97:ce:46:05:67:f2:29:
4d:35:1f:85:b0:41:35:af:f2:42:d9:f1:83:17:cf:3d:18:ad:
d1:a8:ce:24:0f:44:1a:2d:c8:99:b4:75:9b:01:96:20:81:7d:
02:3e:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:40 2025 by rpki-client