Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: B13jQAsT3zP32gm5N9s2GGPE7mENr0IL471JSnwKh80=
Subject key identifier: 61:64:B3:A3:36:CD:BE:CB:E9:10:D9:A7:F1:C9:2F:30:10:AD:3E:31
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 01969E2C4289283A0ED776E8B483F650C8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 02:00:22 +0000
Manifest this update: Mon 05 May 2025 02:00:22 +0000
Manifest next update: Tue 06 May 2025 02:00:22 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: jXwAyYDpLVP2hiBb6z/bi3JbtZWe5jBy/rS81NA8/Pc=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:42:89:28:3a:0e:d7:76:e8:b4:83:f6:50:c8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: May 5 02:00:22 2025 GMT
Not After : May 6 02:00:22 2025 GMT
Subject: CN=6164b3a336cdbecbe910d9a7f1c92f3010ad3e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:1b:c5:fc:00:ca:ab:b1:c5:0a:72:8f:51:
3c:3d:16:a8:d9:5f:54:eb:51:cf:0c:14:cc:e9:3e:
57:49:4c:bf:b2:df:0a:64:b7:d4:29:9f:06:64:fb:
1d:37:67:a3:0e:90:3d:bf:bb:72:67:c8:6b:55:23:
f3:0a:a3:07:b7:0c:2a:5d:4d:a6:9f:ee:83:4b:83:
a5:a3:16:b9:77:71:24:8e:dc:6d:e8:7b:0c:71:17:
11:6a:aa:c2:2d:51:d4:5a:8c:71:cf:98:92:96:e5:
01:87:50:a2:e5:39:e8:71:40:00:1e:47:9d:37:64:
49:97:22:c6:08:e6:3f:c5:6d:de:6b:57:21:9d:65:
07:8a:ea:f1:e8:cd:28:27:aa:dc:15:56:89:b2:70:
5d:b9:7c:4b:f5:d0:f2:8b:5c:4d:99:4d:d0:33:de:
99:eb:a8:42:07:7f:5a:e5:0f:03:ef:25:4e:7d:0a:
41:d0:cb:10:76:a7:39:29:eb:2a:02:38:f5:b2:34:
eb:1c:59:42:42:2c:dd:70:e5:90:c8:be:e8:33:d9:
c5:20:2f:07:17:8d:a9:c8:2e:84:5b:ad:da:35:0a:
f7:54:1f:e3:c7:8b:01:08:3e:4b:c9:ca:17:f4:bd:
8d:5a:b9:1c:e2:97:e6:ac:b3:8a:2b:37:ec:95:1d:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:B3:A3:36:CD:BE:CB:E9:10:D9:A7:F1:C9:2F:30:10:AD:3E:31
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5e:33:ea:ce:fd:0e:92:5a:4f:b9:5e:23:bf:26:63:26:59:
0e:4d:57:b4:5d:c4:71:57:71:5a:f2:ec:69:e9:09:02:c8:ee:
0b:f6:29:05:89:9e:2b:f0:20:e5:59:3c:db:82:3a:0a:9f:ed:
04:9c:f1:57:bf:a1:87:84:1f:be:d9:fb:c9:c7:17:22:54:5a:
bb:e5:7a:96:aa:9d:b3:55:14:ec:5f:81:8a:8a:92:9e:fd:7f:
34:05:98:95:c3:44:e6:d8:6b:bb:68:35:35:8e:ca:24:a8:51:
0f:2a:d2:a5:cd:c9:a5:00:45:d7:e5:8f:54:f1:e5:9d:e6:44:
fb:e3:82:cc:e8:60:11:0c:08:28:52:69:a1:7a:87:33:c3:36:
df:ab:8c:0e:2b:0d:8b:e2:42:ac:06:67:4b:00:8d:de:38:cc:
e1:e8:c8:b8:7c:de:7a:0b:e1:2c:c5:76:8d:cd:da:e1:cc:53:
8d:b5:fe:62:f6:8b:51:34:95:43:f6:ab:28:80:bc:13:a2:6b:
ce:31:7c:e6:b6:16:4f:3a:72:91:a9:26:12:e8:f1:b4:fb:02:
b1:79:d0:7b:b4:32:82:92:a8:31:98:64:f5:56:04:45:fd:9e:
e0:a7:0a:db:26:95:fa:f6:35:69:cc:4f:54:86:71:26:6e:74:
f3:b1:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:22:45 2025 by rpki-client