Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: m3MspisSQLmcrNNjH/V7KReGxKLgCUymWdDE08zIHRM=
Subject key identifier: CA:A4:DB:D3:76:B1:0D:5B:6D:07:09:59:D1:9A:B5:AB:01:F5:28:CE
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 01974930F2EA96B285721DE0EB171EEB8456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 014F
Signing time: Sat 07 Jun 2025 07:00:34 +0000
Manifest this update: Sat 07 Jun 2025 07:00:34 +0000
Manifest next update: Sun 08 Jun 2025 07:00:34 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: dVbmkCAIadtrxfc9bLMJuZ7hf7MJ3DIAldfXltBtl1Q=)
2: jt-iRSNGZBGhABnXoxTRm_rAskI.roa (hash: l7KIq5bWvwsgCT6cMEiSjjaqu0hDSyke8GcgCL2LIpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f2:ea:96:b2:85:72:1d:e0:eb:17:1e:eb:84:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Jun 7 07:00:34 2025 GMT
Not After : Jun 8 07:00:34 2025 GMT
Subject: CN=caa4dbd376b10d5b6d070959d19ab5ab01f528ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:ef:c2:cf:89:60:ca:c5:6e:49:ab:0d:2f:
5f:04:55:b8:ab:c4:d5:29:e5:ae:fd:f5:fa:55:1a:
7c:60:96:4c:67:4e:0b:ec:e2:2d:4d:55:2b:1c:81:
22:e3:d4:57:8d:6e:82:e3:61:4a:71:d9:c2:5c:fb:
15:16:c4:55:e5:50:e7:3f:94:c4:c1:30:1f:34:3e:
91:dc:42:1f:e9:be:0e:7c:b9:dc:a2:cf:15:5e:98:
da:5a:32:7b:56:20:13:20:fb:30:c8:20:52:da:e6:
40:85:af:2d:b0:26:90:84:59:25:d7:d8:fb:e3:d0:
2b:6e:00:e4:b3:14:56:8d:8b:26:68:d3:80:67:53:
80:fc:b3:3e:df:00:0e:bd:8c:cb:aa:38:80:7c:2f:
15:6b:21:36:54:3b:18:90:f0:c9:ba:c5:08:2b:b0:
12:f0:9e:39:14:08:d5:72:7d:9f:bf:0f:70:e7:a4:
dc:58:12:2e:c0:9f:4d:73:88:00:4e:79:1a:a2:7a:
85:9e:e4:e9:28:9f:f9:6e:dc:c5:ab:ad:9d:69:e8:
61:e9:40:36:1e:80:dd:c2:8c:d2:fa:dd:e4:c8:4d:
cb:0c:9f:f8:79:a0:dc:7d:58:47:6e:f0:75:1f:38:
5f:30:96:97:5e:ab:2a:1a:2e:7c:c3:22:9d:f6:d8:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:DB:D3:76:B1:0D:5B:6D:07:09:59:D1:9A:B5:AB:01:F5:28:CE
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:59:31:4e:98:5d:f4:40:72:1d:ba:78:e0:f5:08:c8:05:
76:91:42:40:c4:06:3f:92:11:7a:e6:c6:c1:d3:c0:72:cf:6f:
76:51:25:4f:30:4e:3a:12:4f:9b:bc:57:ba:cf:f9:9a:e5:28:
df:99:07:9e:ab:9d:7f:3d:bc:51:69:24:34:ce:3a:43:15:41:
2d:fe:a9:ac:4c:c4:4c:52:07:48:22:c0:27:20:8c:bd:2b:a5:
24:07:e3:be:4d:d8:c1:27:10:b2:bd:d1:04:ef:a4:55:01:1b:
6b:34:0b:a6:d9:6a:6a:fd:7c:0b:05:be:13:bd:15:24:1c:95:
0a:3f:0f:22:a3:d6:a3:a2:15:e2:3e:bd:18:78:d1:1e:a8:36:
bb:48:21:ff:88:c8:df:d0:34:c1:79:e7:2e:26:af:18:5c:e8:
51:4e:85:62:5e:56:94:db:37:02:a9:6b:41:e1:1a:f0:e8:06:
cc:25:c6:d0:9e:e3:70:81:e9:24:21:2f:a3:1c:0d:45:e0:52:
a7:56:9d:75:2e:61:32:fb:96:97:61:06:b5:7d:dd:ba:a3:04:
43:02:66:22:c4:30:ad:42:64:25:2a:3f:84:f1:54:09:16:47:
35:8e:a3:35:3b:7c:d9:13:85:98:4f:ad:d7:b4:01:10:34:7f:
07:ac:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:47 2025 by rpki-client