Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: mxGKRDYhfw+b4uV28IgX4INZXCF1NayqUI8ZCSk9jTw=
Subject key identifier: A1:2B:1E:29:F8:1D:23:BB:B5:11:89:2D:73:6D:FE:04:3D:D9:7B:E3
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 01976A06254D59169CF7A2B2C8498BF36D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0B67
Signing time: Fri 13 Jun 2025 16:01:17 +0000
Manifest this update: Fri 13 Jun 2025 16:01:17 +0000
Manifest next update: Sat 14 Jun 2025 16:01:17 +0000
Files and hashes: 1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: sOYgbWoyPbJr2IF9mKE/Vwq+dvkdLH3Ejf6B85kOops=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:25:4d:59:16:9c:f7:a2:b2:c8:49:8b:f3:6d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: Jun 13 16:01:17 2025 GMT
Not After : Jun 14 16:01:17 2025 GMT
Subject: CN=a12b1e29f81d23bbb511892d736dfe043dd97be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:31:c3:40:2a:a6:2d:a8:ae:6f:cd:b2:4a:
37:2f:eb:9c:98:f9:19:0e:73:34:1e:98:23:fd:c5:
24:2d:74:a1:27:5d:6f:d3:42:10:9c:50:d1:99:44:
01:1d:7a:7a:20:14:5c:94:47:cc:1d:00:99:35:96:
ac:6e:40:03:17:ca:18:a1:e1:0a:3d:0e:64:14:2d:
78:69:58:1f:17:75:e8:84:70:59:67:6e:dc:08:66:
dc:0c:85:46:01:59:e7:cc:26:02:9b:4e:8d:ad:1e:
48:29:01:45:a3:b2:84:9d:12:f3:be:a4:0d:e8:3e:
d0:cf:57:9f:45:1a:91:59:fe:73:23:16:e1:37:2c:
6a:fa:74:dd:68:6f:bf:3c:f0:48:0a:a7:54:bd:8c:
8f:a6:f5:ca:ad:27:87:01:79:7f:19:42:db:cf:39:
65:cf:7f:b0:ef:5b:f1:50:62:92:53:09:a8:c5:cc:
d9:53:d7:49:e6:f2:a6:85:bc:97:72:46:b9:73:1a:
0f:4a:78:02:3a:a2:49:c7:e5:16:de:56:d5:41:db:
98:3c:71:51:5d:3f:8a:fe:05:6c:69:59:fd:33:a9:
19:91:26:64:54:7f:54:b6:57:13:c5:00:1d:50:74:
02:68:ab:7e:f7:29:79:c0:6b:14:8a:75:75:d5:b6:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:1E:29:F8:1D:23:BB:B5:11:89:2D:73:6D:FE:04:3D:D9:7B:E3
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a6:58:56:28:a5:bd:5c:47:66:42:f9:6c:1a:a5:82:5d:86:
aa:02:3d:7f:0c:90:d9:99:48:fb:a3:c3:2e:e1:54:dd:85:c0:
36:b4:58:5e:ef:d0:06:2a:4a:35:e6:75:c9:b3:b2:b9:01:6e:
f7:29:c1:f1:2a:97:db:83:57:43:3f:25:60:db:99:25:e5:0a:
e4:0b:b7:5d:a9:75:3f:11:63:e5:80:27:b8:10:de:c3:24:ea:
f0:4a:f2:b2:ad:09:8b:94:17:18:71:1a:28:a4:a2:03:bb:b5:
10:e6:d8:6c:3b:72:c0:4c:95:85:ce:bb:98:76:27:49:a5:04:
65:15:f9:0f:2a:6c:b2:2f:b6:1a:6a:d6:3e:75:16:ca:27:a3:
c4:47:7f:d6:be:e6:0d:db:a1:bc:2f:b4:e2:0d:28:c2:d8:7b:
26:a5:89:58:a3:79:99:80:3b:eb:50:eb:3d:4a:08:47:fe:57:
92:87:e3:01:aa:82:f7:09:b1:36:13:90:67:bc:13:64:fd:43:
32:25:e0:81:b6:f3:bf:dd:8e:39:1e:58:4d:3c:16:97:79:14:
07:03:da:e1:d6:b6:1d:40:03:e4:7c:1f:1f:df:d0:9d:ab:eb:
9a:af:8e:34:77:90:9b:8e:83:72:b8:45:0a:0c:7a:d8:3e:6f:
15:fe:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:17 2025 by rpki-client