Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: lh14kEFcML8+Zu3XnzKvQ6857hWAqtjEoCfk0LLdBsI=
Subject key identifier: A9:16:A5:83:EA:2E:AE:86:96:79:6E:73:59:1A:A2:CF:60:2E:06:DD
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 01969E9A368A9D5251B7081B27D5FB029885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 019C
Signing time: Mon 05 May 2025 04:00:28 +0000
Manifest this update: Mon 05 May 2025 04:00:28 +0000
Manifest next update: Tue 06 May 2025 04:00:28 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: FYJSLaIZMMULmm9N5sP0fDVuI6UWfCtyiH42aE6Su3c=)
2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:36:8a:9d:52:51:b7:08:1b:27:d5:fb:02:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: May 5 04:00:28 2025 GMT
Not After : May 6 04:00:28 2025 GMT
Subject: CN=a916a583ea2eae8696796e73591aa2cf602e06dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:e4:7e:42:75:fe:a0:93:ea:72:da:95:68:
42:35:3f:0a:51:0a:8c:f4:4c:47:b7:13:d3:5e:b3:
91:84:50:01:72:b1:f8:1c:5e:a7:be:f6:77:0c:09:
ee:7f:26:49:b1:03:3d:73:ff:e5:ac:59:03:5a:67:
81:31:44:ae:a5:ec:bf:e6:2b:8b:ec:cd:38:cb:c0:
ed:25:dc:2b:6d:42:7f:63:15:c0:89:72:b5:f7:27:
df:69:98:e5:fd:73:55:da:45:cb:15:99:4a:ef:82:
61:a2:db:a3:a2:36:87:90:01:ed:3c:01:20:b5:5c:
92:3e:d4:97:5d:23:27:73:66:e4:8e:75:77:2e:36:
66:3f:2a:b7:2f:6d:df:06:55:1d:10:4d:53:f8:4b:
02:11:f7:26:09:78:cd:aa:66:4c:61:27:a4:3a:d8:
8d:87:6c:0d:e1:fd:24:eb:d5:55:34:fe:5d:cd:4a:
63:02:27:d9:63:2f:8b:56:c7:8a:05:73:c2:3c:4a:
93:6d:ff:05:dd:ba:2f:6f:e0:73:25:3e:59:67:15:
e5:b6:72:55:b5:a6:7d:fe:fc:ba:3f:fe:63:70:7d:
75:4d:26:5b:5b:45:0a:04:fe:2b:7f:43:35:ce:9f:
34:41:8c:d0:cc:14:2e:c7:50:fe:56:a8:50:b0:7f:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:A5:83:EA:2E:AE:86:96:79:6E:73:59:1A:A2:CF:60:2E:06:DD
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:04:f1:f5:a9:50:48:f9:ba:37:2c:a6:17:cb:96:f1:86:f9:
47:17:24:87:29:0a:db:72:f1:bc:b6:c6:2f:d2:5c:e2:6f:6e:
42:b4:ca:e1:18:26:85:7f:c0:b7:f9:8a:9e:33:d8:9a:84:d9:
ce:4a:61:f9:f0:b1:a9:4c:8c:c1:ec:7e:09:95:81:08:36:f2:
7c:ed:0a:0a:d7:6d:4d:44:41:9c:7c:79:20:6c:b4:08:4c:3f:
b0:98:aa:0e:17:63:3e:38:ab:b0:57:c9:03:48:03:c3:9a:53:
98:85:00:d2:a8:a6:12:a6:d1:7c:7a:4e:53:6f:98:e0:59:a1:
b2:c6:19:51:45:72:c9:88:07:05:20:56:c8:ef:5a:b5:84:b8:
9a:81:3d:60:f6:ef:30:a1:f1:67:d9:d2:5c:73:f2:de:fe:50:
ad:f4:6c:fb:ad:b5:e9:53:d6:b9:e9:1b:15:ca:ee:c8:e5:4b:
85:ba:cc:5f:cf:ef:1b:f4:f8:24:f0:f4:98:3f:a2:14:c5:54:
39:3d:95:a4:cc:54:bc:40:31:3a:94:8b:c9:58:c5:9b:3f:e3:
8a:61:23:8b:c7:f8:e9:02:7c:0e:5b:ef:bf:83:da:2c:76:b1:
9e:db:99:7f:19:77:80:c8:ea:0a:63:27:d5:4d:b2:ea:a7:05:
cd:2f:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:38:59 2025 by rpki-client