Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: TxdwJAJX0a4TXAdcJgqvruRlFZLSfhzXJJ98wxk2kRA=
Subject key identifier: 0E:5F:CE:98:A0:9D:D0:F1:AB:E9:2D:D1:28:DB:11:B8:4E:C2:4B:AF
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 0197B6D770852327BF15E0A4342FF610D210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 0FD1
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 4FCvKLap1q+KQc0xcy97myKD8lzMvCu8r8PUBq7MrRs=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:70:85:23:27:bf:15:e0:a4:34:2f:f6:10:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=0e5fce98a09dd0f1abe92dd128db11b84ec24baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:78:93:fc:52:94:15:0c:62:af:d5:63:62:
48:09:80:73:88:03:5d:2e:66:12:a7:23:40:7c:bf:
20:a1:c1:82:ba:8d:a7:14:e0:a0:8d:5e:35:f4:df:
00:a2:cf:59:ab:2f:e1:05:6d:e3:a4:0e:5e:68:30:
d2:4e:7f:51:ba:e3:2f:b2:a4:c1:b8:85:df:32:fe:
3e:6f:11:cb:a7:37:fc:62:d3:bc:0a:92:1c:20:e5:
b4:a2:a4:68:fe:e9:e3:2b:0b:9d:a2:80:08:f4:fb:
a6:dd:aa:8c:ad:f5:d5:f1:f2:14:b2:cd:1b:84:fd:
e4:47:35:ca:34:1d:bb:cc:58:62:53:17:b6:4b:69:
37:b9:8b:72:8b:0d:59:fc:99:f6:d7:c5:38:fb:9d:
2f:24:cd:77:a4:fd:4d:30:d8:0e:c6:89:e8:54:da:
ae:ed:60:50:a7:50:02:28:48:06:d9:45:b2:84:92:
e4:84:4a:77:cb:41:3b:74:0b:89:17:e2:43:af:c6:
6d:c2:35:84:98:64:c7:2f:c4:ac:ad:92:60:75:04:
68:1e:1a:e1:a8:67:40:d4:c9:94:34:13:0b:d7:2d:
8a:a5:bc:53:5e:ea:5d:7b:d8:8a:35:7d:5b:53:bc:
8a:84:2b:5e:df:bd:fe:d6:aa:a3:86:8a:8b:45:a2:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:CE:98:A0:9D:D0:F1:AB:E9:2D:D1:28:DB:11:B8:4E:C2:4B:AF
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:65:0e:2f:b0:6b:77:15:94:16:20:67:ba:bc:b0:18:ff:85:
4c:db:01:5f:b0:07:8f:e3:55:7f:d5:68:69:a2:d2:f7:1e:08:
90:89:5b:93:4b:4c:9d:c0:54:8a:47:7a:39:da:a8:c2:ba:d5:
ca:52:f3:06:db:b4:e5:57:df:68:13:32:50:b1:3c:fb:49:4e:
dc:c2:20:3a:9a:ed:8f:65:a5:08:df:b4:c6:66:3c:d9:39:e5:
2f:9f:16:5e:25:dc:71:bf:27:15:d1:22:7e:4f:b9:52:10:5b:
0e:4b:ea:71:a8:e2:92:b3:e8:b7:f1:ac:34:9f:3a:c2:8e:16:
3f:51:3a:50:e6:2c:86:aa:40:8f:0a:66:79:35:84:1f:e2:d9:
80:88:1e:04:d7:bb:e9:38:fc:e5:66:46:0f:70:c3:02:a9:b1:
30:87:f8:af:ab:d6:cf:08:61:92:a3:bc:a3:79:e9:ad:75:ed:
76:c5:e7:58:94:ec:aa:26:18:6e:20:00:c2:a0:6a:7c:cd:5e:
08:f8:72:57:bc:4f:08:80:dd:5a:0b:3f:5b:62:ec:0a:3f:50:
ec:06:3e:22:67:5d:4b:19:fe:af:c8:bf:75:2b:36:2e:d7:61:
0c:b1:51:88:eb:1e:22:a0:8c:76:f4:08:8e:60:9e:67:08:7d:
5c:e0:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:44 2025 by rpki-client