Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: rblQh/9NEWjud7GtwaA5xopelRnFXFzONyUFetrULYY=
Subject key identifier: E3:B8:A7:71:60:81:4A:EC:39:DF:13:4F:5D:86:52:83:A7:99:19:90
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 019676B0FB63F2F1D6C3887A98CEA42B2719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0AE9
Signing time: Sun 27 Apr 2025 10:00:32 +0000
Manifest this update: Sun 27 Apr 2025 10:00:32 +0000
Manifest next update: Mon 28 Apr 2025 10:00:32 +0000
Files and hashes: 1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: +qcAKqJGbAWy25Gn0WzePWzgrA5zpWa788Fk7G5MZHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:fb:63:f2:f1:d6:c3:88:7a:98:ce:a4:2b:27:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: Apr 27 10:00:32 2025 GMT
Not After : Apr 28 10:00:32 2025 GMT
Subject: CN=e3b8a77160814aec39df134f5d865283a7991990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:97:87:40:a7:91:5c:a3:c4:5c:be:8b:0d:
fe:3a:bb:f1:4b:f1:2f:9b:a8:23:c8:d6:0c:55:4b:
7e:ff:1e:02:9c:19:ef:b1:df:71:f1:47:7c:71:ca:
5b:a1:db:43:45:c9:4a:2b:d5:f3:2c:11:a0:e9:e1:
7c:20:2c:38:04:9c:0a:65:af:58:43:40:3e:0e:82:
0a:43:60:7e:56:15:db:55:80:bf:fe:88:a4:1b:0e:
67:04:3b:23:9c:65:1c:7c:e6:42:b4:df:4e:d7:8c:
47:7d:01:54:82:1b:f0:66:c5:85:df:f8:14:b7:dd:
f2:ad:d6:64:21:32:14:83:be:95:dd:78:df:15:0f:
b8:cd:c8:46:fe:c2:c0:be:3e:67:24:5e:1c:bb:ac:
d8:82:c7:f1:3c:8f:c7:c9:9f:98:f7:6a:48:08:ee:
3c:65:f3:b7:1c:ea:2a:1c:61:fd:61:18:9f:a9:8a:
fc:01:a8:3b:96:52:98:d5:25:ee:f6:f3:d8:ca:d3:
e3:18:60:f6:db:6b:3f:b2:27:9a:9d:ab:ad:7c:44:
b4:fb:91:c0:bd:3e:18:73:83:ff:f3:f6:9b:2b:83:
8e:8d:e9:1e:26:84:29:09:00:75:7a:a6:41:2c:3b:
56:aa:1e:6e:32:fc:f1:cc:8a:a5:25:94:38:86:64:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:A7:71:60:81:4A:EC:39:DF:13:4F:5D:86:52:83:A7:99:19:90
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:3c:7d:25:76:f0:9e:a6:53:cf:98:e3:e0:11:bd:34:cf:
c5:1e:0b:b4:dc:3a:66:6e:9b:d0:c6:86:fa:9f:61:d6:a8:86:
a6:c5:8e:19:e3:79:88:ea:e5:e2:12:50:c7:e7:8e:fa:67:d9:
e6:bb:7b:c7:57:d1:17:5a:7c:e3:96:8c:10:0a:21:86:83:32:
14:f2:93:fd:9c:07:84:73:05:61:ec:05:f4:76:0d:a9:a5:7f:
40:d9:3b:53:3b:23:73:d1:8c:02:17:5e:1e:b9:bc:05:9b:8d:
88:e2:4a:29:b0:be:bc:c9:c9:d1:3d:52:3d:b9:b5:0e:29:15:
b5:e9:22:02:bb:a6:5e:8a:ae:48:95:60:7b:68:5c:fc:12:11:
07:cd:27:d4:40:1b:f9:ee:ce:bd:cc:c3:a1:3b:00:2b:36:91:
75:c1:f4:c8:9d:47:20:a8:a0:e4:30:de:74:30:7d:f1:04:ef:
38:18:97:7f:a6:32:c0:4c:07:28:88:4d:1b:fe:ff:52:60:dd:
62:cc:4c:7d:7a:58:f3:88:f2:22:e8:29:6f:35:4c:52:8f:81:
eb:9e:d5:8d:d4:cf:7d:21:97:4b:bb:61:90:1f:f8:35:c0:01:
d3:e3:c8:17:27:f0:69:1d:b1:35:cd:6e:46:0a:68:1b:18:68:
bf:4d:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:46 2025 by rpki-client