
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: j62Bv2jjsMypL6Y+NHx6GdjIob2rRLZDLvb5LZRCygE=
Subject key identifier: 2B:58:56:61:FB:C4:40:51:EC:C9:88:9A:9C:E4:CB:03:12:AC:D2:10
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 01976EF53BCD94001AE69DF4F14F165E6E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:54 +0000
Manifest this update: Sat 14 Jun 2025 15:00:54 +0000
Manifest next update: Sun 15 Jun 2025 15:00:54 +0000
Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: gC74qH9Ah3muR7qp4ip9fTuJAU6LD8MapSk4j2dcCD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:3b:cd:94:00:1a:e6:9d:f4:f1:4f:16:5e:6e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Jun 14 15:00:54 2025 GMT
Not After : Jun 15 15:00:54 2025 GMT
Subject: CN=2b585661fbc44051ecc9889a9ce4cb0312acd210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:71:f0:af:64:f7:28:56:ba:25:54:90:2e:
17:2e:3a:0a:98:8b:fd:bf:f1:4d:93:a1:17:55:d4:
b4:d2:2f:ee:b3:20:5d:ac:dd:21:c4:a8:32:9f:15:
74:62:47:e5:84:a4:8e:2d:53:32:57:b0:ff:2e:ea:
dc:b7:ab:7b:8b:d5:ac:fc:d1:3d:6e:f2:c9:37:2a:
ad:54:b5:15:ae:21:97:80:20:ff:8f:3c:b7:16:e3:
4e:21:6f:c5:3f:cc:b4:39:98:44:bd:0b:04:1c:44:
ff:00:f6:b6:2a:bb:9a:be:11:55:11:ad:8a:8a:8e:
f6:c3:6b:fb:db:e8:71:3d:cf:72:6f:1f:35:a3:2e:
a6:b2:f8:6f:bb:ea:e4:a2:06:b9:a7:e8:6f:5a:72:
f8:a8:70:ab:ef:40:00:ea:6e:dd:11:26:9b:f2:35:
53:1c:35:7f:23:7f:34:48:5f:63:12:2b:80:a4:c0:
80:82:db:57:e2:00:c8:3b:1e:dd:4e:4c:c6:76:42:
6a:bd:31:5d:71:a9:46:96:c3:eb:45:c1:61:0d:0c:
00:1b:5a:ec:b6:d9:bd:05:ff:25:63:4b:fc:67:7f:
7c:4a:8b:b7:42:a6:7e:08:c8:3c:b9:2b:1e:ed:28:
ac:c0:80:cb:88:18:5e:2f:12:d0:a2:b2:9d:e2:86:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:56:61:FB:C4:40:51:EC:C9:88:9A:9C:E4:CB:03:12:AC:D2:10
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ae:a8:1a:1c:9b:45:86:17:61:db:e9:ee:6f:f5:af:49:52:
09:f3:b6:af:a1:23:32:65:66:b2:49:cb:c5:35:43:6e:9e:79:
ce:29:ce:85:a0:4f:3d:b1:47:c4:1d:c1:04:59:c5:c8:62:70:
77:f4:bf:58:91:ff:ff:ea:ce:78:a4:2e:38:8f:cc:bb:47:fb:
ab:7a:49:0c:b5:3d:90:fc:0e:11:3c:1b:fa:74:8a:77:8b:db:
e4:16:85:0c:fe:f4:72:24:3b:ae:b2:fc:e2:07:0e:37:56:68:
53:d9:63:ca:bb:3c:4f:3c:ae:61:74:36:5c:7f:a2:80:be:7f:
61:c8:26:ac:54:1a:c4:cd:78:99:bd:0d:cf:12:5f:70:ad:66:
14:e5:88:70:ab:47:7a:f7:34:6e:4e:0e:a0:f8:70:46:08:19:
86:47:2a:0a:6e:04:18:59:50:f6:25:86:d3:5d:6e:9c:2e:c5:
f3:9b:3e:65:e8:98:cb:ac:62:53:65:b9:d8:01:ee:02:9d:e7:
4a:6d:05:f9:a6:72:87:9a:b3:c3:8b:a5:2d:8e:44:fa:1d:5c:
1b:c6:f0:3b:5d:10:1f:6a:19:65:c8:58:4b:e3:31:b3:55:b0:
0d:fb:0f:51:04:71:b8:c9:16:a8:08:ab:ea:65:12:82:d6:a9:
b6:50:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:59 2025 by rpki-client