Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json)
Hash identifier: 89ldQ6O2Z1UV//MnUABxZfOOFiZhIfaGwT7VMdiN4yY=
Subject key identifier: 0F:23:BC:E5:3A:80:06:2C:E5:6B:7E:E3:1D:AE:8D:58:35:C0:21:75
Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Certificate serial: 0196C6833C41AA2D7E9518ADA6ADB0B421B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
Manifest number: 1499
Signing time: Mon 12 May 2025 22:00:11 +0000
Manifest this update: Mon 12 May 2025 22:00:11 +0000
Manifest next update: Tue 13 May 2025 22:00:11 +0000
Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: N+THbkZzWzLs+PYuASDz9gun9/kgnXrnD/fS3lt0wN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:3c:41:aa:2d:7e:95:18:ad:a6:ad:b0:b4:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Validity
Not Before: May 12 22:00:11 2025 GMT
Not After : May 13 22:00:11 2025 GMT
Subject: CN=0f23bce53a80062ce56b7ee31dae8d5835c02175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:38:48:9a:74:0d:34:a4:6d:5c:20:78:2d:
2e:05:e1:0b:91:a1:2d:a8:53:89:da:dc:95:a2:10:
81:3f:57:ed:95:8c:fb:7b:e4:6f:d4:6a:f0:10:39:
71:82:dc:c1:c8:db:56:4b:8d:88:22:02:96:06:45:
55:e9:d0:8e:b7:e5:6a:f7:6e:44:05:57:19:d2:e0:
84:d4:83:ba:0c:be:b0:d6:62:69:57:50:86:0e:0d:
db:be:6b:48:7e:84:06:ad:51:f0:b2:0f:c1:ac:92:
36:31:81:a5:06:f4:b6:f8:b5:36:36:cc:ca:6b:06:
3a:21:b3:c3:df:25:ca:0c:71:18:cf:6f:52:1f:2b:
4f:61:b5:be:c5:94:31:d3:5a:23:e6:5c:0c:47:20:
2c:58:71:18:c7:dc:23:21:ea:16:9f:d1:94:17:51:
c5:7d:7a:3f:0d:a1:22:91:3f:e7:4d:4a:31:50:cc:
74:95:f3:61:c8:0b:ff:12:2c:d7:3b:bd:2e:00:2e:
77:3b:b0:1d:3b:36:3b:5c:a1:42:52:e6:e9:59:aa:
56:d6:31:cd:6a:ad:2f:6c:b9:e4:2f:69:f6:ad:f5:
92:6b:51:7e:0c:21:0e:c1:0b:93:08:fc:78:09:59:
ed:bd:4c:4f:89:b0:6c:34:33:b6:4c:11:72:64:76:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:BC:E5:3A:80:06:2C:E5:6B:7E:E3:1D:AE:8D:58:35:C0:21:75
X509v3 Authority Key Identifier:
keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:f5:76:d2:c8:b3:0f:5b:8e:9b:93:4e:c1:a8:1b:7e:8b:
71:df:d3:1d:a6:58:63:3d:e8:ba:23:4d:cf:b1:99:2f:af:be:
25:cd:8f:b4:f0:b1:ce:2d:f6:1c:0b:0b:56:03:23:40:2e:41:
19:6e:35:8f:10:69:dd:b5:c3:a0:9e:ad:9d:74:35:0b:4b:84:
e6:fd:88:03:5d:ee:de:14:e5:2f:a6:78:6a:35:b7:8a:ba:c9:
ab:e0:b1:6a:36:85:56:d6:8c:e6:c4:a3:61:2c:fa:76:87:46:
bf:aa:75:1d:52:61:11:5d:9d:7c:8a:e5:86:ee:b1:d5:bd:ac:
35:b7:65:66:d2:46:cb:fb:00:82:31:0a:09:47:c5:67:0e:d5:
c1:e2:de:4d:ab:02:33:09:d3:ef:9a:62:df:24:9e:02:76:0f:
95:6f:4b:85:60:c5:2c:7e:04:d8:b6:e0:ed:23:34:6d:e3:1e:
1a:cc:c6:ed:ba:4e:e4:cd:87:eb:ac:47:6e:ab:83:0d:83:88:
7c:73:54:f4:11:ab:e6:76:9c:63:fb:de:ca:7a:17:52:ca:7f:
e5:49:e1:ef:f0:83:4c:27:62:50:5d:98:e3:b1:31:64:0c:f1:
65:1b:f8:27:fa:88:af:e5:b8:94:7b:be:df:d1:c4:55:88:d7:
10:53:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:05:27 2025 by rpki-client