Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: w7aQ2a/xHyG8trWnjim9KT7L7gmZlvEs0wrNUD+pDMA=
Subject key identifier: 61:60:C1:CA:73:D8:34:B8:0B:B6:3F:9B:4B:40:B8:29:43:76:72:6C
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 0196BB241A2DA9946E897240FBF7AEA01528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0824
Signing time: Sat 10 May 2025 17:00:27 +0000
Manifest this update: Sat 10 May 2025 17:00:27 +0000
Manifest next update: Sun 11 May 2025 17:00:27 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: FD90UaGdF7kGs4gXXHkQtuO7i7BTQi+M0EBXUrv9Q80=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:1a:2d:a9:94:6e:89:72:40:fb:f7:ae:a0:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: May 10 17:00:27 2025 GMT
Not After : May 11 17:00:27 2025 GMT
Subject: CN=6160c1ca73d834b80bb63f9b4b40b8294376726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:57:7e:c0:04:af:6e:6a:a7:63:10:ec:ed:
d7:83:2d:c7:31:da:1a:d0:2f:a3:87:23:61:4a:60:
e3:6c:8e:a0:9e:a3:ae:11:1c:7e:32:0b:9b:0e:f4:
96:dc:25:27:a5:81:b8:79:05:98:f7:4f:fb:37:f2:
75:cc:ec:2f:39:02:a2:97:30:92:68:ea:91:ff:f8:
d5:9c:34:93:dd:72:8c:66:1b:d9:36:96:5d:e3:60:
fb:19:2d:f4:1d:c0:07:cf:ad:c0:f0:6c:0d:28:2f:
64:7c:80:12:e7:63:88:4b:ea:e9:a2:f0:5f:0f:fc:
7f:94:51:d9:42:35:24:10:ef:04:8c:af:56:13:d7:
e1:09:a8:1d:18:bc:b1:ba:93:36:22:61:62:b8:9c:
3c:65:69:a2:ce:6e:c7:60:4f:7b:b6:8a:0f:c9:1e:
a4:92:d6:eb:49:87:0c:ac:14:af:cd:43:b1:f8:24:
24:a7:3e:3d:a8:40:32:e4:b7:03:b3:b5:92:ba:96:
04:30:ec:ee:fc:f9:2a:a6:e4:6d:45:da:bf:0b:37:
06:3b:95:0e:0e:8d:38:c6:05:07:15:9a:94:b5:d4:
9b:f1:42:3a:2d:be:cf:f1:56:3d:e7:4b:02:f2:c6:
d7:1d:72:cb:b8:1a:15:70:15:ba:d5:ce:ee:68:d8:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:C1:CA:73:D8:34:B8:0B:B6:3F:9B:4B:40:B8:29:43:76:72:6C
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:71:be:e7:18:4a:10:ed:5b:a4:38:59:5b:94:b1:ac:a2:
e8:40:d6:38:46:88:f5:3b:04:0f:9b:32:76:7a:0f:79:02:aa:
29:88:e6:1f:9f:a8:01:b5:64:df:b5:e4:7c:38:3a:cc:f0:0e:
19:74:d2:1e:08:aa:e8:7f:a8:07:71:db:1f:20:6d:2b:77:e5:
8e:cb:3d:af:26:e5:8e:53:12:ce:ab:2b:e9:05:82:ed:02:d2:
6b:3f:bc:7b:8c:97:52:0b:e0:e0:f5:ec:e2:03:17:b9:ea:98:
13:b1:fd:95:2d:27:9c:9b:ef:67:b1:2a:e4:6b:56:aa:24:f8:
b3:25:04:a4:b0:5c:c7:3f:8e:ca:0f:7b:c5:9f:01:87:e5:25:
c4:2f:ae:6a:f3:f7:4d:90:43:af:77:9f:a0:56:32:73:61:aa:
40:22:ef:8d:1b:84:3a:54:d8:74:39:a8:ea:25:45:dc:17:be:
fd:9b:9b:f2:78:dc:4f:5a:f5:c9:93:f7:cc:1b:3a:46:12:b7:
ab:0c:f3:51:df:9d:0d:a0:dc:7d:3c:38:f3:5a:e0:e4:53:f7:
ee:63:96:c0:bb:8e:86:f3:d1:a2:3e:2e:71:cf:41:8c:cb:89:
c9:48:09:65:71:f7:e5:21:e8:e6:69:ef:bb:04:24:0e:89:d1:
ac:86:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:36:51 2025 by rpki-client