Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: z3IoXCAXpu7wNcLeW1GLmVXCQYapqt1EgVM/rLbcdaY=
Subject key identifier: 37:8E:B3:20:3B:AD:3F:9E:5B:09:87:52:7A:29:A4:D2:B8:7C:EA:1D
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 0196C382786D1A76F3A0A16D12E751EC6859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 0F53
Signing time: Mon 12 May 2025 08:00:29 +0000
Manifest this update: Mon 12 May 2025 08:00:29 +0000
Manifest next update: Tue 13 May 2025 08:00:29 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: VLZhU7l4pd7TRXx4VEhl6gNYHA+OjjpflSG14oN2F44=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:78:6d:1a:76:f3:a0:a1:6d:12:e7:51:ec:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: May 12 08:00:29 2025 GMT
Not After : May 13 08:00:29 2025 GMT
Subject: CN=378eb3203bad3f9e5b0987527a29a4d2b87cea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:e2:0e:85:f0:a0:40:fd:d6:4d:8a:62:0f:
40:cc:68:79:7d:13:3a:13:02:96:c0:f0:ea:29:22:
d7:44:ab:d4:bc:00:71:e1:76:a5:f7:5c:71:f7:d2:
a2:ad:2e:1a:32:96:1f:d5:e9:4b:b1:67:c3:4b:4f:
dc:52:d6:14:f9:12:f0:20:f0:fd:61:0d:04:85:95:
dc:c0:d9:a8:9f:46:38:9c:44:cc:3f:3c:f0:96:9c:
dc:88:6d:1b:6c:fd:01:dc:d6:27:d5:ce:2f:d7:a1:
9c:e7:45:c6:23:4b:cb:89:18:76:4a:12:b0:79:27:
42:e9:dc:92:58:7f:97:d1:d5:c2:b2:05:df:af:80:
4f:12:1a:ad:e9:3c:8a:b0:d9:d6:05:9b:fa:8e:80:
7d:46:1b:00:1a:c7:66:76:30:d4:46:fb:c2:d6:e0:
77:b8:7a:9f:3e:35:0b:36:c2:21:ab:04:4a:55:17:
09:d0:f2:02:f7:3a:ee:42:fc:bc:e7:45:28:3c:e0:
96:b1:9d:44:89:5a:3e:ff:df:dc:6b:89:00:20:bc:
78:27:d7:b5:d2:2d:74:76:08:93:ef:f9:a5:db:02:
19:08:ba:a6:fd:bd:1b:2a:42:25:21:5f:cc:9f:cc:
d3:76:55:cf:5a:5d:f4:ae:0f:d1:13:60:0a:46:76:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:B3:20:3B:AD:3F:9E:5B:09:87:52:7A:29:A4:D2:B8:7C:EA:1D
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:bd:78:32:5a:e6:20:a9:8c:e5:df:8e:05:b9:c7:6d:1d:
ab:30:2e:5f:49:db:26:36:e3:17:02:04:1b:f6:26:71:cd:3d:
37:34:8d:d1:95:33:f8:7f:92:f4:c4:be:f5:d0:66:04:1a:95:
bd:27:30:60:2e:48:21:d0:e5:9b:46:ff:99:37:43:81:29:0e:
e5:85:c5:af:ef:24:41:6a:ab:8a:02:9c:52:9f:4d:ec:0d:44:
9e:ff:50:f3:51:58:d1:53:48:c0:d8:dc:83:ef:b1:e0:28:db:
e1:91:ed:e4:3a:c8:99:d9:ad:b7:b2:d0:26:59:a2:41:37:00:
b6:82:47:49:79:38:b7:82:90:e4:ea:fb:bd:d0:c6:b0:fa:58:
19:41:4a:06:05:f3:7f:16:f7:4b:d4:58:48:5e:32:89:84:1f:
ce:d0:e3:8c:43:2e:40:e4:05:ce:0e:09:bd:e5:70:8d:17:ad:
ea:35:50:bc:0d:4b:fc:97:5d:f0:f2:33:d6:0f:00:2d:6a:93:
08:6f:4b:ce:74:39:38:ac:c6:e1:2d:f6:96:c6:81:c2:15:b9:
58:86:70:5e:ab:5c:08:0f:92:df:6d:78:40:d4:86:45:b3:63:
bb:75:10:83:62:ce:76:95:d6:17:45:82:f1:f0:19:8f:f0:50:
17:8c:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:16:30 2025 by rpki-client