Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: jb2X0gGNW+hxl/b1WZgZKZiWicHs81YBaU5TjnBEVTE=
Subject key identifier: E6:00:09:B9:77:D5:1A:14:D8:A3:F9:D6:1C:7A:21:39:AB:2B:B2:61
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 0196D51B5626420DB4F803915CF7A984D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0CB3
Signing time: Thu 15 May 2025 18:01:00 +0000
Manifest this update: Thu 15 May 2025 18:01:00 +0000
Manifest next update: Fri 16 May 2025 18:01:00 +0000
Files and hashes: 1: K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa (hash: mZAxldt+IlCpLOehWxq3yA+3IoToCcsVOjUlUqrfi0s=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: yt9LD4xiyMNplql2bavcXKv7N367Fwjr2vA0f/4FJKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1b:56:26:42:0d:b4:f8:03:91:5c:f7:a9:84:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: May 15 18:01:00 2025 GMT
Not After : May 16 18:01:00 2025 GMT
Subject: CN=e60009b977d51a14d8a3f9d61c7a2139ab2bb261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:ba:12:b4:03:e7:b5:1d:b8:bf:57:3b:9b:
08:be:f7:4e:0c:f3:92:48:00:f9:f2:a8:ad:e2:8a:
27:6b:ed:ef:18:28:83:93:c4:e9:12:73:2d:3d:ec:
05:63:4e:f1:f7:5c:2c:fb:bb:14:48:75:4d:af:29:
73:3b:ec:7d:bf:3d:3f:2f:32:4b:11:00:92:a9:de:
9d:f1:0d:f6:32:39:8e:62:11:5d:c9:9f:45:25:86:
98:0c:0a:15:cd:08:21:e2:ef:58:1f:4b:26:18:12:
e0:14:17:68:6f:06:1d:12:d0:97:bd:2f:19:9a:22:
9d:af:e0:7a:db:b5:39:ed:b6:b1:5d:66:60:e6:85:
c8:9c:fb:5e:f8:4f:85:96:9d:71:fb:82:4e:92:7b:
80:fe:07:54:f9:5c:a1:7a:9f:69:59:81:2d:f7:f5:
01:b5:14:5b:71:71:54:78:cd:5f:54:32:d8:48:45:
0b:60:76:5e:74:5f:8d:0e:cc:22:30:48:fd:cd:eb:
cb:fb:fd:35:53:4a:e2:6e:cb:13:64:38:98:1d:bc:
a6:a7:fc:d0:80:ec:e5:b8:af:12:65:0f:86:45:de:
e0:44:f9:ed:4b:67:30:48:20:4f:56:c2:41:9c:27:
a6:c1:4f:9a:01:0b:2b:5e:c1:98:94:dc:2b:ce:40:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:09:B9:77:D5:1A:14:D8:A3:F9:D6:1C:7A:21:39:AB:2B:B2:61
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:76:60:41:4e:13:b6:24:fe:17:cb:d3:75:97:07:04:0e:85:
39:b9:aa:db:25:00:ff:28:8a:4f:03:c4:2a:e4:48:25:51:09:
97:ec:66:cc:f3:9c:87:4e:4d:da:9f:af:b3:d8:a2:29:27:6e:
1c:c1:79:33:a4:32:80:c1:2b:e7:dc:b5:e6:d5:80:70:8e:d1:
ba:c7:52:68:a5:25:28:23:ca:fa:43:59:1a:ce:fa:04:66:df:
af:d0:5c:35:e4:5b:37:5c:7f:a7:4c:65:23:e4:a6:d4:81:6f:
51:47:5a:b0:ee:a5:ea:68:53:45:9f:5b:d5:39:4d:49:03:30:
d9:b2:ee:7d:3c:4e:36:5d:6b:86:f5:05:46:21:ed:47:6a:37:
75:2c:cc:c8:08:26:1a:62:54:28:f8:0e:bb:14:36:62:d5:d3:
d2:9a:6d:ef:a2:88:87:09:d9:da:41:c7:3e:00:74:d0:b7:b5:
bb:da:ab:74:4a:0f:c1:a2:d0:5f:e0:03:50:e2:65:dc:cb:a2:
32:30:a2:8b:4a:07:ea:15:dd:d2:f9:70:b8:48:07:31:a3:9a:
56:f0:1f:20:8e:f4:4b:34:98:84:b7:3d:6c:89:7f:31:c4:02:
02:eb:92:68:8b:6e:8e:cf:2e:c7:de:38:9f:2d:d6:7d:3d:7e:
05:29:d0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:46:39 2025 by rpki-client