Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: dBNlb08sdCq6o4AFFn2CU01OmgrEdnejpYtUz7Sj+R4=
Subject key identifier: FF:4A:BA:A1:C6:87:23:C4:94:5E:7D:78:88:A7:59:34:12:2D:4C:6C
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 0197B7B32EBD762D59CC86AEB524AAE32726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0DE4
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: fyA6ZkzmTRCzVd3Wqae3XVOBUVW5LoVRO1jIsPylPAw=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2e:bd:76:2d:59:cc:86:ae:b5:24:aa:e3:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=ff4abaa1c68723c4945e7d7888a75934122d4c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:77:73:75:44:09:e5:f1:ad:0f:21:a5:c4:
a7:9c:c8:70:b6:37:fc:c2:ad:7f:f4:3d:02:38:ef:
45:85:aa:74:b2:f1:fd:15:f2:67:ec:34:d8:0d:bd:
8d:44:fb:17:64:d2:08:76:50:ae:79:fa:26:d9:b3:
08:9d:4a:60:d1:72:4e:d9:7b:83:29:49:3d:fe:4f:
df:01:0c:6d:af:d0:dc:a0:5e:a7:d5:7e:7b:b1:5a:
35:54:e4:a8:38:98:c2:71:95:31:14:08:a1:f9:9d:
02:dd:de:01:98:8f:cc:d8:5e:9e:63:bc:48:a2:15:
f2:10:e5:23:90:e7:dc:cd:39:e1:e9:68:01:bc:ed:
25:42:61:50:c8:b3:d8:a4:b5:be:bd:a6:62:fb:52:
24:bb:df:4b:b8:f8:e1:39:76:d4:ff:30:9d:47:8d:
2b:9c:a0:73:0b:55:2a:3a:e4:50:c1:72:69:4a:81:
0f:e8:5c:01:b3:09:42:97:00:d2:5a:84:71:48:1d:
78:0b:12:03:8b:03:a4:17:a9:4a:02:72:90:3e:d0:
30:ad:aa:65:10:1a:e0:59:15:bf:8a:c2:16:ba:b8:
31:e2:d6:0f:b0:c9:ce:be:64:5a:dd:62:32:7c:9b:
77:fa:28:da:7d:b6:23:01:21:0a:06:ed:f6:60:c9:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:BA:A1:C6:87:23:C4:94:5E:7D:78:88:A7:59:34:12:2D:4C:6C
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:66:5f:d5:8c:cb:e7:b9:7a:87:d5:83:70:20:a5:c0:db:df:
9a:48:bd:be:af:6c:da:dc:30:4f:c2:bd:6c:94:c0:e9:f5:f7:
28:e5:17:35:af:15:c4:54:16:b6:59:76:02:b3:3f:be:5c:f7:
d6:98:22:23:f9:1e:c0:e4:0c:b5:9d:a6:86:25:11:f6:54:4d:
56:57:76:a0:4a:f7:9e:38:8a:ea:66:1e:e3:92:81:38:20:9d:
56:70:b7:f8:5d:d3:ad:19:27:36:ca:e4:31:0d:08:e2:14:2f:
d1:88:ad:42:17:14:1d:90:b9:1b:9f:d3:46:b2:bd:d4:23:1b:
e3:12:8b:a7:1a:04:57:0a:97:64:7c:64:f3:b6:1f:e0:d1:7f:
dd:24:1c:48:3e:d3:59:ad:37:96:05:4f:ca:f2:29:3e:55:3d:
03:a0:56:e6:65:41:d1:2b:45:43:fc:38:0c:ed:13:4d:ef:55:
29:e9:7e:29:e0:a8:62:40:b8:77:5a:59:cd:90:72:e1:8c:0d:
d4:e4:25:78:72:16:19:f5:f1:9a:41:22:00:8d:bd:bc:81:69:
1d:d3:75:a5:b9:13:3e:51:cb:20:60:9c:4e:ec:2e:52:dd:f4:
18:f3:db:11:fb:92:ac:aa:c0:d0:b5:f9:c2:52:49:27:0a:02:
b3:a2:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:32 2025 by rpki-client