Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: yviVgPdk4E877iaI255zSjMh3vDxwXAh5u0T4YG6N30=
Subject key identifier: 1D:77:BA:6F:A5:3E:9F:2C:3A:83:70:2D:DA:77:BC:EC:C4:B5:78:82
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 01969ED14993A51DDA3D81A635230EC7883E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 020A
Signing time: Mon 05 May 2025 05:00:38 +0000
Manifest this update: Mon 05 May 2025 05:00:38 +0000
Manifest next update: Tue 06 May 2025 05:00:38 +0000
Files and hashes: 1: 1ENw1gcCvt1Pmax0p8zhB7SKAEg.roa (hash: 1qhYf9E0Pe4/V/O+LSKzrT8cldjvFnxKyFJ5/QtS500=)
2: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: AWi7MIj15/olWOZqK0C0a/QFXzGJfoTF+u6rK7fi3Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:49:93:a5:1d:da:3d:81:a6:35:23:0e:c7:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: May 5 05:00:38 2025 GMT
Not After : May 6 05:00:38 2025 GMT
Subject: CN=1d77ba6fa53e9f2c3a83702dda77bcecc4b57882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:06:49:ca:ba:30:de:66:2e:8b:a1:21:b3:
8b:e4:2b:91:62:83:9b:e8:65:cd:85:90:f9:1c:05:
97:16:a0:87:2d:10:91:02:77:58:59:e7:4b:39:b8:
39:f3:24:b1:26:bb:5e:ca:f7:e9:f7:af:16:42:db:
d1:fa:00:db:22:ed:03:33:44:03:3b:55:62:06:e0:
e7:b2:2b:98:c0:ce:15:ff:6e:3b:8c:18:e7:d4:0c:
56:cf:7a:43:c4:dd:27:a5:94:cf:0f:9b:f3:a2:44:
03:67:a4:cd:dc:11:12:b9:6d:62:76:4d:ec:53:ae:
fb:22:d5:0e:8d:58:94:d4:b8:8a:2f:ba:51:44:58:
b2:c5:a9:09:74:ef:00:c7:db:f3:ce:c8:cd:a2:1b:
99:a4:fe:b9:1d:8a:8a:59:be:d8:df:80:61:91:c6:
68:c2:a0:e7:d6:1d:74:1f:80:80:a2:ac:d6:b2:b0:
77:8d:8a:05:3a:b4:58:7f:25:90:13:ee:6b:4c:eb:
34:15:b8:f6:35:dc:10:41:0a:45:b3:5a:4b:dd:cd:
79:ba:38:ba:66:80:34:60:6e:77:fa:46:0f:82:88:
06:a6:62:af:67:54:a3:f5:b2:c8:27:05:94:0b:82:
cd:4e:0f:28:75:bc:fe:dd:9e:0e:08:67:bc:82:a6:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:77:BA:6F:A5:3E:9F:2C:3A:83:70:2D:DA:77:BC:EC:C4:B5:78:82
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e2:06:bb:06:df:1e:e4:49:72:a1:c4:9a:83:f0:46:9e:dd:
6f:7c:b0:2b:4d:cf:6d:7c:83:5b:8c:df:a6:cf:c7:cb:9e:58:
0e:d1:22:76:d2:e6:86:07:09:9c:f5:78:c3:5f:59:7b:03:85:
c3:72:67:42:b6:fd:61:21:b7:f8:46:a8:15:86:15:c9:da:9e:
30:58:1c:3c:88:bc:42:03:b3:68:bd:c8:71:38:01:04:8b:a1:
df:38:eb:ac:34:bc:2e:0b:74:4e:4c:fd:da:d1:fd:4f:f5:66:
93:03:39:5a:c4:3b:96:ce:22:e3:a5:cc:ef:0c:93:81:38:bf:
c3:4c:c9:87:42:29:63:c3:4c:b8:83:3e:a3:9e:11:17:3a:73:
04:f4:0a:df:04:f9:aa:b1:43:4b:d8:dc:d2:bd:54:e9:ee:00:
9d:22:10:67:a6:ed:22:8e:df:db:9f:cf:e8:1d:65:69:39:8d:
5a:0a:1c:bf:b3:0b:8a:e1:16:4e:9b:a5:5f:d9:a9:cc:f8:4c:
9a:70:00:32:fc:7f:a6:0f:02:4f:7c:08:82:fa:a4:2c:16:cf:
dd:04:86:c9:4c:e8:da:13:e3:7b:46:40:c2:cf:1d:b2:8d:3d:
3e:59:aa:90:35:04:a7:0e:0b:e7:51:28:57:f0:c8:7f:06:9e:
11:8d:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:19:57 2025 by rpki-client