Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: BKujQRqdy8vXBVXMi4OS52oHu7loylDW6sjaPZxAVcc=
Subject key identifier: 34:0D:2E:CF:1E:D0:33:0E:0E:E6:A9:B5:39:3D:D3:0F:F9:C5:2F:5B
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 0196C1CBA31159278D42055B4DD7239673E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 11A2
Signing time: Mon 12 May 2025 00:01:10 +0000
Manifest this update: Mon 12 May 2025 00:01:10 +0000
Manifest next update: Tue 13 May 2025 00:01:10 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: yucxcmkoV7uS0ncdZJTP8VL2RM9jRdEF505hyMR1qaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:a3:11:59:27:8d:42:05:5b:4d:d7:23:96:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: May 12 00:01:10 2025 GMT
Not After : May 13 00:01:10 2025 GMT
Subject: CN=340d2ecf1ed0330e0ee6a9b5393dd30ff9c52f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:92:fe:35:af:73:9d:8d:d3:b1:96:04:df:
12:9c:16:f2:4a:02:da:03:75:6b:5a:69:93:09:77:
ce:fc:40:1f:d1:77:b0:22:ba:0f:07:82:11:b6:1d:
dd:dc:70:29:1c:a8:e8:97:1b:d2:d0:53:b7:90:85:
89:b1:44:18:e0:47:9e:01:a0:05:42:04:e8:10:0e:
22:ba:95:fb:de:5d:23:b3:51:c2:4d:4d:95:f7:b9:
b9:9b:54:35:e7:f9:71:03:8b:ce:5d:64:82:10:cc:
23:e7:7f:66:89:26:83:c6:ce:ab:d0:4f:22:8f:7c:
47:ac:00:24:28:c8:50:87:1b:84:3d:c3:30:54:56:
cd:2c:9b:2c:d8:96:8b:a9:ff:3d:13:6b:1e:41:f4:
d0:30:d7:60:e5:94:32:53:23:1e:ac:51:66:98:7b:
4b:aa:15:c8:44:16:ac:44:27:33:08:b7:bc:da:f8:
5a:84:60:66:9e:7b:b8:17:16:a5:4b:35:5f:f0:6e:
04:ee:bd:6a:76:8b:5b:7f:84:40:b4:03:87:3b:9c:
39:29:c2:c2:27:83:3f:73:82:57:45:60:30:08:84:
68:6f:e9:74:c5:24:96:36:44:bb:6f:6d:a8:7d:f9:
59:46:7c:54:03:2d:f4:42:e8:17:93:94:91:ce:ae:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:2E:CF:1E:D0:33:0E:0E:E6:A9:B5:39:3D:D3:0F:F9:C5:2F:5B
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:98:ff:5c:ff:90:e7:57:d2:8c:c4:8c:f1:27:de:4f:98:
d4:3d:df:98:96:8e:56:f5:57:45:c1:c9:7b:41:7e:93:3e:01:
54:5f:ed:39:03:a4:5a:c4:ee:ef:9f:9a:33:4b:60:72:0b:f1:
7d:58:42:7e:f3:0b:22:37:c0:e1:ee:39:14:6a:50:3f:70:46:
d3:db:10:0b:87:dc:af:1f:91:cd:b8:72:87:25:4c:cb:a6:8d:
a9:14:63:ec:f6:aa:97:95:1e:d6:43:03:1c:26:b1:58:a2:a2:
7f:1f:1c:d7:aa:b0:48:7e:ae:59:99:f4:ba:10:de:2e:ab:e5:
8b:25:d4:6c:3e:4b:f6:a3:b1:bb:2b:d6:1d:04:1a:5c:30:8a:
19:ae:74:97:62:57:83:b4:08:4e:fe:f3:c5:42:f5:48:eb:ea:
c1:63:2b:fe:81:18:50:39:27:5a:f7:e2:de:25:58:18:ed:e3:
ac:2a:d3:d6:9b:c3:44:e7:87:1a:68:40:68:57:2d:7a:c5:44:
6f:d6:38:4d:0a:1f:66:fd:85:04:ac:5a:9b:ee:7d:92:11:01:
d6:fa:a1:f6:75:5b:95:df:cd:ea:87:73:51:7d:0f:6e:18:cf:
aa:2b:d3:39:5f:72:8a:31:0a:49:58:11:1d:62:9e:58:72:1c:
45:6b:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:58:00 2025 by rpki-client