Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier: XxQfzxva5zFKDgLgLmd0Shkj1xBloHJQmdYVI8ihg4w=
Subject key identifier: ED:84:BB:33:F1:1A:5D:A7:03:63:8E:7B:62:94:29:A2:E5:23:1A:B1
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer: /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial: 0197711B57A32D8E519A9B928294CBA7441B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:01:46 +0000
Manifest this update: Sun 15 Jun 2025 01:01:46 +0000
Manifest next update: Mon 16 Jun 2025 01:01:46 +0000
Files and hashes: 1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: bYypaTtMYlU1FZWJAzixdHzd3DaOJvEm+Y+DSTzc66c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:57:a3:2d:8e:51:9a:9b:92:82:94:cb:a7:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Validity
Not Before: Jun 15 01:01:46 2025 GMT
Not After : Jun 16 01:01:46 2025 GMT
Subject: CN=ed84bb33f11a5da703638e7b629429a2e5231ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:72:90:fd:f2:be:e9:b8:02:1a:d1:7d:a8:
b0:95:36:fb:b1:fb:60:ca:1f:f3:7b:18:56:17:e7:
8f:44:a9:de:45:91:4b:f1:a6:0b:13:14:d2:90:56:
83:bb:be:1d:34:f2:90:93:23:df:00:03:d6:dd:54:
bc:67:56:39:c2:96:96:e3:3a:31:e2:28:29:c4:aa:
e0:03:42:1c:e9:5f:25:06:0b:e0:d9:4c:e1:97:df:
4e:ed:4e:cb:09:d0:b8:3e:53:bf:a9:78:b8:01:4d:
be:84:27:ee:c5:69:c3:73:c4:7a:ac:0b:4f:ac:c1:
1e:26:60:18:5e:9a:7d:3f:46:35:df:cb:19:e4:5e:
78:d5:fe:dc:c5:a8:fd:2b:cd:90:32:7f:35:d7:48:
bf:8e:b9:13:40:52:80:6c:50:be:6d:fc:8f:1a:4d:
f2:ff:4a:4c:7f:bd:4b:27:29:0e:84:37:99:89:c7:
99:6f:52:27:b4:83:43:c7:73:8b:7d:52:37:26:75:
00:25:7e:c2:72:8c:44:65:f9:ed:91:55:8b:c6:37:
de:c9:e3:59:5f:ae:c0:1b:fd:f0:a0:10:af:c0:45:
87:65:d8:16:8c:01:3d:a3:fa:38:0d:ab:c2:7d:01:
77:7c:35:3b:27:7f:47:d0:e0:a8:7a:9e:d0:ee:fd:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:BB:33:F1:1A:5D:A7:03:63:8E:7B:62:94:29:A2:E5:23:1A:B1
X509v3 Authority Key Identifier:
keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:9e:08:ba:9c:30:aa:2c:1e:58:7f:46:26:2f:2b:51:4a:
9f:47:fe:b3:c9:c7:68:ae:61:65:6d:71:2f:de:dd:1b:81:86:
dd:85:8e:48:a2:c4:75:81:90:e4:a0:43:65:a5:5c:7b:0d:8f:
91:22:73:84:5f:23:22:ba:d9:59:17:b9:91:0b:81:c2:b7:59:
ba:43:8e:67:2d:3c:01:be:9c:b0:99:dc:50:9f:40:07:b5:8e:
ce:02:e6:d5:01:99:f8:75:91:74:29:50:8c:9a:b4:34:9f:9f:
d2:82:2d:4c:60:2c:cb:4a:db:ab:f7:98:72:bb:ad:e7:49:90:
23:0d:ad:a3:2e:07:bc:c7:9d:dc:ad:25:2e:79:ec:7f:c3:6f:
ee:0f:c5:c9:a9:8f:9e:b3:d6:66:f5:f9:09:11:1d:02:23:d6:
cd:80:4f:d2:2f:90:70:c8:3f:e9:24:eb:40:c9:8a:3c:4f:e6:
fe:53:dc:56:32:a4:ca:b7:fb:3e:ab:a6:7a:fb:40:ac:b3:2b:
92:fa:e1:92:74:46:50:6a:4c:3f:97:c0:7c:87:38:e2:8c:7b:
10:58:c5:08:0e:7c:b9:86:27:af:80:6e:ed:97:6d:53:08:5d:
b0:b0:73:5a:7f:e3:38:4d:b7:15:eb:60:f2:02:fb:06:f2:b0:
f5:3d:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:23 2025 by rpki-client