Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: Szio1Et4Bp647/f6yA4/vRBfscb5AQiffshmOx37lKg=
Subject key identifier: 10:E0:03:7B:C6:5C:58:A3:F5:A9:55:C7:AE:70:9E:6D:C0:2A:27:DA
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 0196A31BAFC52D08F4521E3D347B335082C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0B00
Signing time: Tue 06 May 2025 01:00:22 +0000
Manifest this update: Tue 06 May 2025 01:00:22 +0000
Manifest next update: Wed 07 May 2025 01:00:22 +0000
Files and hashes: 1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: nQuU9FZS1MJHAIEcjPXLC/F9MJS2Hnz7+5Lt3pZczms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:af:c5:2d:08:f4:52:1e:3d:34:7b:33:50:82:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: May 6 01:00:22 2025 GMT
Not After : May 7 01:00:22 2025 GMT
Subject: CN=10e0037bc65c58a3f5a955c7ae709e6dc02a27da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:44:bd:7b:0e:18:41:d4:8e:3a:60:63:92:
e2:b4:ea:bd:70:cf:34:d3:bb:8d:01:bd:4d:11:0f:
d2:af:f9:07:fe:ec:de:06:9b:a7:3c:f1:89:59:ab:
99:46:c6:2c:b9:15:08:98:1c:d1:02:7d:aa:60:8e:
25:a9:d9:54:f6:3e:14:11:b7:1b:0d:94:e0:ca:36:
94:1f:eb:75:95:d0:c0:37:80:8a:cf:17:bb:9d:9d:
c4:3a:33:71:43:e0:7d:f1:03:66:49:3a:5d:9f:50:
19:7f:c0:15:0a:03:9a:66:b7:57:4b:30:57:1b:4a:
46:82:b7:d2:2d:27:d3:bf:89:65:5a:23:18:06:30:
15:c1:7e:57:8d:20:e0:32:b7:3a:84:2e:96:91:56:
69:c2:2a:21:9b:25:40:88:bc:75:fd:26:44:53:44:
4c:ce:c9:22:12:58:f8:c0:34:63:e5:aa:9a:41:f7:
88:a1:0b:7c:a4:c0:9b:e6:17:73:a0:d9:1d:16:a2:
43:16:3f:dc:47:dc:ec:61:c4:3a:69:aa:95:b3:6a:
81:64:94:18:b7:41:16:1f:b9:84:68:52:70:bd:5a:
d8:5b:7d:2d:9f:75:33:fc:ae:ef:50:fd:b4:df:63:
57:13:70:65:b0:db:ea:fa:d0:b2:08:04:b1:a3:8c:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:03:7B:C6:5C:58:A3:F5:A9:55:C7:AE:70:9E:6D:C0:2A:27:DA
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:44:32:87:ff:0d:62:2c:68:8d:d1:9c:7c:df:58:31:33:4d:
5c:1d:ff:96:9c:01:f4:68:46:81:72:0d:97:85:61:e6:cd:11:
de:5f:31:12:ee:0c:88:9b:bf:12:24:69:7c:d8:73:b7:4a:9f:
73:21:b0:5a:c2:7c:51:0a:8c:bf:80:d6:8a:a5:15:a3:28:3c:
ed:94:d6:dc:8d:d9:86:4a:cc:71:7f:aa:ee:f4:6a:e8:30:b4:
09:22:07:4d:d0:b9:64:7c:98:10:e3:4e:35:c3:d4:d1:4c:87:
9e:fa:79:0c:d9:a1:a2:c5:e9:fe:1a:85:f5:04:81:c3:8b:02:
10:f0:8a:42:25:31:bb:da:d9:3c:b3:19:a6:ba:93:2e:3f:f7:
c9:2d:fd:e5:cb:d0:8f:32:73:b9:61:1b:50:d9:c0:37:89:c0:
48:a6:41:48:01:29:18:ae:e6:0b:e8:75:cf:72:8b:3a:85:2d:
96:50:48:0f:6e:0c:7a:78:b2:19:73:17:79:b0:35:72:a8:46:
fc:30:29:58:1d:fd:bd:4d:b7:32:b6:c2:4c:aa:26:0b:12:92:
dd:5a:10:86:a2:e6:71:02:ec:73:37:2a:cc:b6:27:6a:f8:4d:
13:11:d4:ce:66:79:3c:75:4e:9b:24:e0:2b:f9:3c:14:1e:2b:
d4:72:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:44 2025 by rpki-client