Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: eqa+MN7XecUHhPkKwBO/GTMlAfhQkSq7epf9Hy1/zSg=
Subject key identifier: C5:F8:3A:2F:1F:D9:8F:66:8D:97:0D:49:5D:99:93:28:1A:2F:34:78
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019679B1FF2BE4F3D8524CBEF08069919A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 00:00:30 +0000
Manifest this update: Mon 28 Apr 2025 00:00:30 +0000
Manifest next update: Tue 29 Apr 2025 00:00:30 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: AJCo7FLGy7qn8mHNIZVlNbmq69yp0l/a9avvz0JKXJs=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:ff:2b:e4:f3:d8:52:4c:be:f0:80:69:91:9a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Apr 28 00:00:30 2025 GMT
Not After : Apr 29 00:00:30 2025 GMT
Subject: CN=c5f83a2f1fd98f668d970d495d9993281a2f3478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:ad:d7:d3:ef:ed:24:ad:3c:63:47:c2:87:
f3:12:6a:b0:a9:00:15:06:2a:2a:74:59:16:b3:b1:
e3:e2:c7:a8:d5:f9:3d:d9:73:c8:8f:3b:cf:6b:a8:
15:59:e0:c9:a8:03:ba:d7:1d:47:86:e3:c7:d6:f3:
cc:5a:c3:cb:9f:9e:67:fe:40:7d:54:32:da:ad:70:
33:da:de:10:c9:17:59:64:eb:3b:db:ea:1b:e0:88:
3f:a8:ed:2b:8e:d1:e2:80:9b:44:08:d0:c0:a2:65:
09:46:e9:91:58:26:be:fc:2d:0a:f9:43:62:bb:59:
e6:12:f4:c9:d4:c4:34:09:76:d9:41:cd:b3:96:f0:
8a:04:f1:61:aa:47:2f:2d:e2:94:79:ce:23:64:ff:
93:1a:ed:c3:aa:6c:90:dd:5b:fd:04:bb:54:a9:a8:
15:ae:29:71:96:6e:64:61:86:b9:8c:c0:c7:92:5f:
e1:4a:cf:d8:3c:20:ed:38:e7:f6:3e:7f:80:7e:b2:
c1:04:c3:2b:98:a9:03:c3:e6:83:23:85:84:dc:3c:
be:8e:c9:17:c4:59:88:de:9e:10:f8:58:c5:57:a7:
63:2d:03:82:02:3f:42:33:b4:3d:cc:c2:eb:56:61:
09:fd:57:e7:17:61:9a:ae:b0:d7:59:2e:25:22:88:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:3A:2F:1F:D9:8F:66:8D:97:0D:49:5D:99:93:28:1A:2F:34:78
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:8e:c5:47:85:6c:fb:3e:14:a2:97:58:79:7e:ba:b7:ee:
09:70:d7:74:1c:3c:d1:fa:32:ec:42:fa:b7:7f:06:56:6d:55:
d3:ee:88:13:e3:b6:88:6c:02:75:c5:82:9e:6b:12:31:74:c7:
a9:7b:b6:47:d3:81:39:63:2e:91:5f:b7:a3:a3:11:6b:5a:de:
40:b2:e3:82:19:7e:1e:67:d4:19:d7:58:c6:98:35:b4:bb:2c:
e3:c6:36:52:26:dc:2a:b6:d4:ac:6f:67:55:fd:81:b5:60:ab:
66:79:fc:e4:5e:c7:1a:11:61:6f:e3:96:be:66:73:36:0a:fe:
1b:27:83:3e:bc:74:16:0d:dc:12:7d:29:88:8e:1a:d8:2d:b3:
bd:68:e4:86:f0:ee:aa:49:68:cb:b1:31:3b:71:39:76:5b:fe:
29:d6:59:08:7c:10:e9:16:73:c3:78:b1:7a:07:99:19:ec:28:
ce:a5:ff:f7:dd:61:5f:d3:91:1f:0b:78:cb:04:4f:7f:75:61:
ec:74:25:d6:6a:03:c0:7e:8e:05:1e:91:7d:31:96:55:31:51:
48:1a:9e:06:b7:9e:61:bb:eb:d9:a1:62:cd:76:8c:52:39:52:
6c:e5:c6:f6:51:8f:21:de:00:52:4e:c0:91:40:ae:d3:68:e5:
07:4b:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:09 2025 by rpki-client