Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: CrtxvUNy37vYycR0D6OwW3X5wdkbcVZAipgosbsA0bI=
Subject key identifier: EF:DA:71:B5:C5:C4:13:D0:45:D9:96:9B:B7:E0:35:3B:10:DF:9F:12
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 0196B82363A899EE7038C832C8CA73785C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 03:00:49 +0000
Manifest this update: Sat 10 May 2025 03:00:49 +0000
Manifest next update: Sun 11 May 2025 03:00:49 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: Rc5C88nGGJ8BfYNYABrNt1vjDkDMaeVtxjvoN5Euf8c=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:63:a8:99:ee:70:38:c8:32:c8:ca:73:78:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: May 10 03:00:49 2025 GMT
Not After : May 11 03:00:49 2025 GMT
Subject: CN=efda71b5c5c413d045d9969bb7e0353b10df9f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:b9:28:f6:0f:be:e9:bb:14:3e:1b:b3:59:
67:71:8b:3c:dd:61:32:a9:a9:89:37:a9:e1:d4:15:
b8:17:aa:2b:4e:a4:41:5f:fa:70:a0:4f:8d:8b:7f:
b8:30:4e:cd:27:23:9f:27:5c:ed:c4:8f:cc:4a:56:
45:6a:e8:de:de:b2:a5:44:0f:f4:b5:97:db:3f:bf:
fc:c4:17:5d:ae:23:bf:c1:e4:b3:7c:86:99:a4:cc:
20:c5:8f:3e:99:3a:cd:0f:c6:02:b2:2f:e7:52:29:
e7:94:2f:89:dc:39:62:e1:7e:fe:23:3d:71:9c:2b:
85:2c:8b:d7:e8:a8:a1:f0:c3:9e:84:7f:5b:13:dd:
b1:a0:5b:d0:33:55:46:7e:a3:0e:fe:6e:06:97:41:
f8:f0:87:2f:27:22:67:d0:56:cf:cc:c7:94:b9:fc:
bf:97:e4:6e:b2:b0:09:33:32:b1:92:0e:ed:1f:0f:
55:27:67:ff:c3:4f:72:a5:f6:a1:4c:4f:e8:2d:9d:
96:98:38:dc:ea:a0:26:af:59:0e:9f:a7:f8:b0:2f:
fc:7f:77:7b:bf:8d:1e:9a:58:fa:e0:b0:7b:d4:0e:
a7:92:cd:39:b0:31:0f:80:a5:c6:be:78:11:79:18:
94:2b:16:16:db:fe:61:29:58:0e:91:8f:a0:38:1e:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:71:B5:C5:C4:13:D0:45:D9:96:9B:B7:E0:35:3B:10:DF:9F:12
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f7:3e:b7:8d:fc:3e:d0:77:86:54:0c:f4:96:7b:02:64:14:
b7:60:f7:bb:10:31:58:1a:1c:cf:95:3f:19:cc:ca:4e:40:cd:
b3:a5:6a:c0:c6:a0:6c:7e:bc:58:9c:25:65:ff:f9:17:d6:ca:
f9:19:0c:a8:8e:58:b1:c8:bc:1b:be:66:60:aa:ec:8f:f8:b5:
23:0a:17:3d:15:87:29:b4:c8:4c:d2:a0:3e:29:38:3e:e6:7f:
9c:1d:28:6c:bf:a6:53:59:cb:51:5c:a0:a1:82:7c:5e:69:4b:
ee:63:1b:41:e3:51:b4:cc:38:5c:40:9a:0a:31:33:8d:11:50:
f6:bb:f4:33:05:37:d6:47:cb:8c:38:55:a2:e7:8e:82:0b:f9:
da:74:96:df:50:7b:36:71:d2:b0:42:0a:42:59:b3:73:aa:33:
85:5a:67:d7:fa:da:16:87:42:3a:1f:a0:de:18:60:35:1d:bf:
b6:4a:95:b2:67:df:d0:ef:4c:93:46:58:11:d9:4e:54:f7:22:
67:a3:87:32:ea:36:b4:f8:42:e3:3b:93:b3:51:4e:1c:df:4d:
c2:ec:b3:d2:87:b8:75:11:db:8a:d6:62:35:be:50:6e:d6:28:
b2:2d:e6:71:36:98:5b:b7:ae:cf:bb:7e:90:d9:51:e4:6a:7f:
5b:92:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:39 2025 by rpki-client