Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: 0eYozn6pABU+GlulXUihUSLT9K6zeii3A9D48TYDQfQ=
Subject key identifier: 2B:CA:B5:B1:FE:22:A8:8A:F3:E7:C6:D4:DB:27:44:56:9D:8D:63:73
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 0196C3B94C437BE5B17A612DDB34CF751D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 067E
Signing time: Mon 12 May 2025 09:00:22 +0000
Manifest this update: Mon 12 May 2025 09:00:22 +0000
Manifest next update: Tue 13 May 2025 09:00:22 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: Z3wlxcBYEsixENApvY4fkAzNrZUGUIx/yTys8v4sxVQ=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:4c:43:7b:e5:b1:7a:61:2d:db:34:cf:75:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: May 12 09:00:22 2025 GMT
Not After : May 13 09:00:22 2025 GMT
Subject: CN=2bcab5b1fe22a88af3e7c6d4db2744569d8d6373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:42:f8:0f:c3:b4:a4:8c:b2:4f:c3:62:23:
61:4d:a5:c5:51:ff:60:20:71:c1:ed:21:9a:16:ca:
14:7d:88:61:dd:15:9e:14:0a:98:c9:cf:58:88:36:
d5:29:a4:4f:44:46:b0:5a:f4:1e:28:d2:14:43:83:
0e:0d:19:2b:a7:5b:92:78:19:81:d3:dc:99:87:09:
db:51:33:b8:37:00:98:30:5d:a0:a1:61:79:f0:0b:
09:ce:99:ec:14:91:47:3c:34:a0:35:ab:da:61:10:
fa:c2:6d:0d:a8:7d:b3:21:fa:e1:c9:b8:3a:ab:70:
ed:8f:3c:61:24:18:ce:32:d8:f5:2b:6c:e4:26:fc:
c5:93:01:8c:6d:14:60:e4:9c:03:db:b1:c1:44:3a:
17:45:d3:aa:47:43:2c:72:36:d9:46:64:d7:d0:61:
bb:a1:35:68:34:62:74:b5:31:8f:1c:24:9e:5d:00:
52:dc:50:7c:96:a9:b7:bf:4a:90:13:50:32:4a:3b:
a7:1c:b4:dd:47:e7:4c:6b:1a:74:4a:4f:dc:7a:c7:
1b:14:1e:da:ec:32:74:ec:e7:2c:df:2b:8f:43:06:
44:f0:86:dc:9c:43:0f:98:27:0d:3e:ff:1d:ab:aa:
8b:7c:9e:61:8a:44:67:e0:5a:f7:ec:da:0e:86:13:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:B5:B1:FE:22:A8:8A:F3:E7:C6:D4:DB:27:44:56:9D:8D:63:73
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:0b:f5:b9:19:ea:cd:a5:71:55:2a:f3:2e:2b:7d:63:d9:
01:0e:6d:95:fa:51:4e:dd:b9:b6:ce:57:24:11:02:30:ce:91:
45:60:a4:0a:2b:a1:1b:57:85:91:76:5b:94:a4:80:c6:71:26:
bc:a8:55:a9:5b:ba:fe:14:af:5c:a2:c5:9c:94:44:6a:1e:aa:
ad:2e:9a:87:74:20:95:66:dd:d2:32:45:93:ec:32:da:7b:00:
aa:7d:21:52:49:e3:31:21:bb:26:4d:d6:c9:d1:c8:1b:f9:bc:
58:b1:de:d8:c7:49:10:d7:62:86:dc:b9:e9:14:14:42:83:2f:
f3:67:b9:c7:54:b7:d8:ce:5b:7c:d9:d8:8a:6b:ab:8a:97:3e:
ca:27:94:8d:ef:d5:cd:27:03:b4:e0:e0:72:dc:6a:5e:0e:8b:
85:22:3e:b5:9d:7f:44:05:03:af:35:d3:b7:0f:1f:ea:82:da:
d7:ad:e6:ca:dd:2a:79:09:2b:5e:96:38:3d:41:28:0d:5c:1e:
42:d2:50:b8:33:64:9a:b8:d5:4a:2b:c0:81:fd:e2:a7:2a:43:
5e:c3:31:45:c9:cc:03:9c:6e:89:31:2e:9b:7b:72:b2:17:ba:
57:22:3c:b7:43:79:52:51:6d:d3:28:43:1c:78:9e:59:da:de:
9f:38:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:54:20 2025 by rpki-client