Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: xSrdGZI/TuzKbxPVduOW9batw2je/5SqnD+Lzm+lv/w=
Subject key identifier: 2C:8F:2C:6A:A1:5B:5F:81:62:C7:A1:89:1B:7F:A7:3A:CB:6C:80:1F
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 0196BC3754C150F8F954715DC481B70337DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 0106
Signing time: Sat 10 May 2025 22:01:04 +0000
Manifest this update: Sat 10 May 2025 22:01:04 +0000
Manifest next update: Sun 11 May 2025 22:01:04 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: GdgQtXN7/t8TLbVRg2Ks5IM1axZpKa5fIRrGoFWR14Y=)
2: jt-iRSNGZBGhABnXoxTRm_rAskI.roa (hash: l7KIq5bWvwsgCT6cMEiSjjaqu0hDSyke8GcgCL2LIpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:54:c1:50:f8:f9:54:71:5d:c4:81:b7:03:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: May 10 22:01:04 2025 GMT
Not After : May 11 22:01:04 2025 GMT
Subject: CN=2c8f2c6aa15b5f8162c7a1891b7fa73acb6c801f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:43:b2:5a:3e:64:a7:99:9d:4d:a6:02:a8:
3e:58:48:87:f1:9c:42:fd:3b:78:23:d3:94:d9:4a:
78:3f:89:11:8a:ae:25:9b:e1:17:94:40:1d:b6:6e:
9c:a8:c9:22:43:65:41:e8:0b:b7:59:bc:ef:05:a3:
e5:8f:5e:cf:a7:f7:92:48:ae:ba:b2:12:23:ff:e2:
54:39:fc:f3:25:53:fe:4a:0d:28:e9:ea:31:99:df:
a8:c9:fe:c5:f7:3a:03:28:dd:3a:6e:22:ca:63:87:
5f:3a:88:82:e8:02:d5:a1:6b:a0:a7:22:61:e5:c3:
f5:36:76:aa:b8:a8:3d:37:09:ee:2b:09:9c:49:f2:
59:fc:5b:c1:ef:01:8f:04:06:6c:e6:9a:44:bd:d3:
8b:48:2a:92:fe:4f:1d:d1:00:5f:63:18:8b:6d:da:
c5:8c:d3:29:1a:b3:dc:5e:00:15:9a:46:32:c9:63:
ab:f8:f1:37:00:4c:d4:97:59:bb:68:6f:b7:b9:32:
ce:07:a4:6c:77:92:6e:fd:dc:85:de:c8:c9:ba:d3:
c9:b8:d8:8b:c3:00:98:48:4c:2f:83:3d:0c:f8:3e:
9d:76:51:59:ca:f6:8e:c9:61:4f:54:26:0f:68:ad:
46:5e:09:fd:db:da:33:fc:5a:99:0c:de:bf:6e:af:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8F:2C:6A:A1:5B:5F:81:62:C7:A1:89:1B:7F:A7:3A:CB:6C:80:1F
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:74:ba:7d:ee:6b:60:0c:f0:43:63:7a:d8:b8:43:32:57:66:
c0:51:da:1d:66:00:98:50:7a:ba:2b:39:16:77:45:bc:30:5f:
0b:5b:9f:16:3b:dd:93:cf:04:75:e9:c0:b3:54:01:18:57:8d:
85:08:32:10:a1:01:84:c6:0d:8c:95:19:d5:c6:ee:85:60:5b:
b8:d8:ae:53:13:24:9f:4c:16:96:69:73:8f:88:f7:56:41:4a:
4b:5b:cc:2e:c6:34:e2:67:0a:8d:99:c8:8e:d3:71:61:31:4f:
f3:ac:27:f9:a5:89:5e:ff:45:70:fe:d5:e8:d5:6b:75:79:3e:
6b:e1:d9:ed:c2:dc:c1:26:98:1a:d9:81:e0:87:a4:7b:ec:ec:
32:a7:4c:ae:49:fd:eb:f9:54:82:da:08:fd:ef:b8:b1:0d:78:
ae:a4:aa:9d:1c:1a:27:f4:d0:03:c0:47:32:24:15:13:5f:5a:
e0:3d:69:30:6a:35:d8:9f:94:66:bb:fd:f7:65:09:ac:8f:60:
b9:4a:fd:80:ab:7f:6a:b7:87:94:e7:3f:f1:63:36:77:95:4f:
43:8a:e6:21:7a:d3:10:5a:75:87:7d:b0:44:08:ba:17:33:1d:
58:c2:07:e7:95:59:b5:c4:7e:70:95:0b:7c:ac:41:3b:52:51:
cd:11:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:21:33 2025 by rpki-client