Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: Ovfd9N2jgaXZNKzQHfTVZkclz8kMg2tEkdqfyqgYoCk=
Subject key identifier: A4:BE:78:A2:90:BA:36:89:69:0B:73:41:2E:D4:C3:69:91:F2:EB:63
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01968E4BBA4384D478C12A3850A3734E4770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0D4A
Signing time: Fri 02 May 2025 00:00:49 +0000
Manifest this update: Fri 02 May 2025 00:00:49 +0000
Manifest next update: Sat 03 May 2025 00:00:49 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: QA4SHyyELMDkzvWWLJqsoz+ppqVcnjJMgE2I6B0Qpb8=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:ba:43:84:d4:78:c1:2a:38:50:a3:73:4e:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: May 2 00:00:49 2025 GMT
Not After : May 3 00:00:49 2025 GMT
Subject: CN=a4be78a290ba3689690b73412ed4c36991f2eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f5:4e:68:3f:15:f2:41:ad:22:0f:9a:cb:23:
af:12:44:de:e9:81:8d:44:23:80:e7:32:e2:cc:14:
3d:c2:02:e7:14:e7:4a:6f:5c:96:f8:ae:12:04:cf:
53:15:47:88:a4:6e:d4:c6:b2:81:17:e4:b8:64:54:
f1:dd:47:74:52:88:38:66:a7:50:13:50:d2:01:f4:
0f:29:06:28:d1:3f:26:42:64:4b:54:27:11:f2:9f:
0b:3a:b5:61:47:98:51:0f:35:d6:73:97:ec:6e:7c:
f1:99:11:0e:2a:c1:d9:d9:ef:49:9d:0a:7c:8a:de:
f9:86:28:08:6e:09:b7:c7:5d:c2:d3:32:fe:ba:1f:
b7:9c:0c:1b:25:3c:c2:f4:36:31:33:1e:36:1d:6e:
ae:c0:61:8a:ac:25:a1:08:3d:61:1f:54:1f:7c:7e:
91:22:84:77:bd:27:ee:73:0b:5c:1d:93:2d:5b:d9:
2a:4f:c8:24:bd:9b:c9:25:52:33:1b:c3:82:49:c0:
53:cc:48:e7:2b:d0:59:3d:80:aa:77:1f:c4:8b:7b:
47:1f:ae:ef:e3:d7:23:24:75:dc:f3:05:f7:47:08:
ea:71:7a:a3:8d:aa:8b:b8:4c:76:ea:88:9d:bc:d9:
da:a7:b4:14:a2:e9:d4:fb:9a:0b:64:70:02:6c:06:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:78:A2:90:BA:36:89:69:0B:73:41:2E:D4:C3:69:91:F2:EB:63
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ee:5e:64:82:4d:dd:7e:4c:78:ff:ff:d9:b0:f4:59:d7:5c:
88:b1:82:08:01:e6:a2:46:cd:ab:80:4b:a3:b8:72:58:18:8b:
84:81:9d:39:e5:59:9f:95:e3:4c:2e:ac:6f:44:86:b1:ee:b7:
5f:a4:5a:0b:7d:d4:14:df:0a:87:2a:ea:4a:c1:df:bc:06:52:
de:a7:00:4e:69:df:25:b5:a6:29:03:d0:79:e1:d1:f3:53:5a:
5f:f6:c3:50:20:78:6b:24:36:0f:3d:64:1c:66:61:9a:7d:26:
d2:01:ba:cd:9d:f0:cf:3d:b9:a9:7a:a4:e3:da:55:85:1a:4d:
1f:ac:9d:64:ed:41:39:7d:8b:7d:d4:05:3f:b2:82:f1:99:2c:
b0:be:98:65:7d:db:c8:50:f8:51:40:fe:ed:d1:dd:61:2a:59:
24:c9:77:fb:60:c7:84:b9:59:5b:f9:84:aa:58:a8:ea:2e:f0:
62:40:5a:3b:f2:cd:d5:37:90:e1:2d:80:36:e0:da:1e:8f:58:
a0:e4:2a:93:fe:04:46:96:f0:06:e7:17:21:9f:df:17:25:84:
5f:08:88:71:0f:6f:76:15:15:c8:08:cf:db:d0:e2:05:9b:79:
4c:2f:19:32:69:88:d6:f8:58:66:e6:36:e2:99:45:d0:40:11:
e5:82:c2:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOS7pDhNR4wSo4UKNzTkdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy
YTg1YWYwHhcNMjUwNTAyMDAwMDQ5WhcNMjUwNTAzMDAwMDQ5WjAzMTEwLwYDVQQD
EyhhNGJlNzhhMjkwYmEzNjg5NjkwYjczNDEyZWQ0YzM2OTkxZjJlYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PVOaD8V8kGtIg+ayyOvEkTe6YGN
RCOA5zLizBQ9wgLnFOdKb1yW+K4SBM9TFUeIpG7UxrKBF+S4ZFTx3Ud0Uog4ZqdQ
E1DSAfQPKQYo0T8mQmRLVCcR8p8LOrVhR5hRDzXWc5fsbnzxmREOKsHZ2e9JnQp8
it75higIbgm3x13C0zL+uh+3nAwbJTzC9DYxMx42HW6uwGGKrCWhCD1hH1QffH6R
IoR3vSfucwtcHZMtW9kqT8gkvZvJJVIzG8OCScBTzEjnK9BZPYCqdx/Ei3tHH67v
49cjJHXc8wX3RwjqcXqjjaqLuEx26oidvNnap7QUounU+5oLZHACbAZawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS+eKKQujaJaQtzQS7Uw2mR8utjMB8GA1UdIwQY
MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt
NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx
LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae5eZIJN
3X5MeP//2bD0WddciLGCCAHmokbNq4BLo7hyWBiLhIGdOeVZn5XjTC6sb0SGse63
X6RaC33UFN8KhyrqSsHfvAZS3qcATmnfJbWmKQPQeeHR81NaX/bDUCB4ayQ2Dz1k
HGZhmn0m0gG6zZ3wzz25qXqk49pVhRpNH6ydZO1BOX2LfdQFP7KC8ZkssL6YZX3b
yFD4UUD+7dHdYSpZJMl3+2DHhLlZW/mEqlio6i7wYkBaO/LN1TeQ4S2ANuDaHo9Y
oOQqk/4ERpbwBucXIZ/fFyWEXwiIcQ9vdhUVyAjP29DiBZt5TC8ZMmmI1vhYZuY2
4plF0EAR5YLC9w==
-----END CERTIFICATE-----
Generated at Fri May 2 05:03:18 2025 by rpki-client