Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: AfeomcBj7lnDEbSDPPxY4LN451QGS3q6I5eAC9arHRM=
Subject key identifier: 13:92:0D:06:CF:29:BA:ED:AF:50:F7:B0:5B:4B:70:24:45:6C:BD:7E
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01975EDD4FD5CEFD9A8AF47972C083CB62F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0DB6
Signing time: Wed 11 Jun 2025 12:00:51 +0000
Manifest this update: Wed 11 Jun 2025 12:00:51 +0000
Manifest next update: Thu 12 Jun 2025 12:00:51 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: 96Svcq6ztYjyhPywPrf49gCkF12yBvFMG3h1lfAxkUo=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:4f:d5:ce:fd:9a:8a:f4:79:72:c0:83:cb:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jun 11 12:00:51 2025 GMT
Not After : Jun 12 12:00:51 2025 GMT
Subject: CN=13920d06cf29baedaf50f7b05b4b7024456cbd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:69:63:3f:37:37:c5:4b:05:43:93:a9:e8:
30:e4:cc:ab:a8:0a:e3:7d:9f:9c:41:64:44:29:b0:
69:7d:07:fd:ac:5c:32:d8:e7:59:73:f0:5c:b0:cb:
86:27:c8:61:c7:b9:47:a7:3a:bd:b9:51:b2:d3:43:
6f:cc:94:b3:61:a5:a9:2d:f9:58:ab:cc:94:cb:0a:
de:d4:3c:29:04:1e:02:77:39:89:0c:7c:30:4d:4c:
4f:ff:ed:5e:0a:7c:3f:1d:df:2f:3a:7c:6c:04:a1:
22:a9:2c:c9:78:d3:d6:8e:5f:0e:ed:65:a9:b3:6a:
24:5c:14:1f:85:b0:47:60:52:51:0f:a1:ba:d2:80:
c9:40:4d:96:df:d9:f5:8d:6f:8a:a2:a8:93:4b:64:
88:35:31:f7:38:b5:9d:60:45:03:b3:ad:88:65:b0:
67:62:49:a8:12:c1:cc:65:b3:12:51:8e:c8:bc:46:
b2:99:92:04:de:be:a3:f7:28:92:e5:29:56:02:4b:
e7:d5:31:58:28:34:fc:01:f9:1a:6d:f4:16:1f:8d:
cf:0f:0e:2f:82:4d:96:5d:57:bc:4b:95:7c:f9:1a:
cb:2f:11:4d:31:bc:d6:29:f7:0d:aa:a4:20:24:95:
14:e5:52:00:22:be:18:4f:cf:5e:6c:73:f3:e9:02:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:0D:06:CF:29:BA:ED:AF:50:F7:B0:5B:4B:70:24:45:6C:BD:7E
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5c:a8:1d:37:66:90:ff:bf:5a:48:cb:bb:36:c0:c2:16:b0:
f4:fd:8b:f1:54:44:c2:e8:9a:d8:3e:d5:b5:1c:40:89:d8:c5:
5a:19:d1:37:7b:b3:75:68:c3:b8:58:79:69:66:70:c2:d6:d6:
a8:9c:be:6a:3a:42:02:2c:ba:3f:ea:a6:85:63:b7:6f:09:03:
a4:24:b7:ef:55:85:0c:33:51:01:ec:04:eb:80:ee:45:3d:bf:
dd:49:25:a6:46:63:41:a2:ac:11:93:21:af:52:1d:5a:36:08:
ff:7b:ca:30:6a:ec:7f:bd:48:b0:48:53:95:b2:14:9f:f0:4b:
34:a1:fd:31:4a:4b:b5:c3:22:65:ef:4e:45:f5:c8:ae:59:f9:
94:77:94:fa:b2:0e:fb:48:bb:88:d7:b9:49:47:04:0b:b6:37:
a5:ba:05:d7:07:e1:23:7e:70:9b:c3:b0:70:33:e3:b6:24:8d:
d8:f2:4c:43:45:df:43:03:79:ee:aa:d8:a5:a3:07:80:55:19:
8e:8e:ce:12:c9:0e:b3:79:9e:02:0b:cb:d8:f6:65:cb:b5:6d:
12:9d:b9:ef:b9:0c:62:34:7d:25:e5:93:63:46:5f:76:99:a8:
b2:95:3d:8e:c2:c8:c9:61:5c:99:3e:ea:dc:c3:a1:b0:b2:79:
82:3f:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:19 2025 by rpki-client