Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier: ca4p1kPjY4dIHPSzjrcfAMo4Tw349fF81CxwV7WqiQ4=
Subject key identifier: F9:F6:C1:EB:DD:BB:40:AA:0C:CF:C2:B3:CC:75:0D:F3:5A:07:27:E8
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer: /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial: 0196BB92A6719CBBA94BDA00E953360979E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:01:12 +0000
Manifest this update: Sat 10 May 2025 19:01:12 +0000
Manifest next update: Sun 11 May 2025 19:01:12 +0000
Files and hashes: 1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: YPC7YxPNRQR0O+hE1PzNNytsm0MkbyUjlUzfLJCvtN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:a6:71:9c:bb:a9:4b:da:00:e9:53:36:09:79:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Validity
Not Before: May 10 19:01:12 2025 GMT
Not After : May 11 19:01:12 2025 GMT
Subject: CN=f9f6c1ebddbb40aa0ccfc2b3cc750df35a0727e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:61:42:58:ac:a5:c0:9a:c0:d1:72:b4:29:
b3:70:74:7a:29:12:a8:8a:dd:2b:0e:b6:fa:b3:c0:
f5:54:5a:83:4c:8b:0d:7d:5b:49:aa:0b:88:36:8c:
11:5a:cf:0d:fb:9c:85:aa:55:b8:e7:1b:6e:95:d8:
73:79:6f:97:2d:0f:8e:44:74:20:09:77:28:25:d1:
ee:05:5b:98:0c:bb:2c:32:94:e9:e9:73:d2:1b:3a:
68:b2:cb:56:66:cf:80:f0:04:bb:05:69:d4:1c:89:
b8:da:97:69:db:66:23:58:25:7b:fa:5b:c0:cc:26:
0e:26:c3:e3:58:3f:8c:d7:3a:ad:0d:77:9a:ed:b5:
98:12:e1:34:06:83:92:a0:20:94:0b:f2:0e:b4:cf:
24:6e:06:28:17:58:3e:98:af:8e:97:d6:ad:61:c4:
fe:0a:28:e9:13:09:4b:f0:8c:c5:81:4f:19:da:4a:
54:64:1c:3b:1d:28:a6:a1:25:67:1f:64:31:6b:6d:
32:5a:39:f7:c4:5e:ee:d9:ca:2e:12:19:b0:a9:c3:
45:8c:b1:c8:c5:89:75:fc:aa:a2:6e:1d:3f:43:7b:
42:73:07:60:6f:2c:b5:70:42:7a:97:73:1f:21:42:
e7:d8:aa:87:50:59:4b:c4:8a:57:b4:8c:6a:7a:9b:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:C1:EB:DD:BB:40:AA:0C:CF:C2:B3:CC:75:0D:F3:5A:07:27:E8
X509v3 Authority Key Identifier:
keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:e7:72:47:e1:8f:cb:5c:fd:ae:20:0d:85:a2:5b:b8:f6:
02:54:5a:13:bc:ba:f9:e3:ce:9c:2e:ad:1c:94:e3:6e:14:18:
d1:15:7b:fc:6a:b4:09:16:1f:8f:6c:c1:a6:80:e8:1d:19:66:
74:c9:ca:0e:b8:f9:23:24:1c:60:d3:8d:13:c9:f7:08:95:a8:
9c:4e:d9:8e:49:82:b1:04:10:44:9b:9e:e3:1a:a1:94:e5:cf:
4d:d1:eb:c7:fa:19:59:de:23:af:86:79:40:fb:62:8b:e0:41:
0e:1f:fd:df:d6:3d:0a:2d:28:73:46:70:ef:b5:ce:a6:00:ae:
d1:b3:32:aa:d5:59:e2:17:b2:95:3c:2d:da:f3:3b:7d:41:68:
f7:e0:c6:54:81:a7:32:6c:da:82:f2:de:92:ea:ee:7b:86:71:
a4:8a:8d:d2:a9:78:47:95:0d:c0:c6:6f:4f:6b:50:96:78:07:
45:15:69:6f:19:3e:aa:9e:e9:19:87:81:b8:b3:4b:db:42:d4:
36:06:50:b2:a4:6f:d7:9d:1f:1f:64:dd:1a:57:34:a5:88:52:
45:84:e2:ef:a0:9e:52:00:80:e6:17:42:97:1e:96:51:73:8e:
62:37:14:41:17:9c:63:65:79:d7:1b:8f:d9:68:51:c5:4f:a5:
1e:a1:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:21 2025 by rpki-client