Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: Wzn73WLKRvcIheHVhmcjrJfTwm+9dQ/F0XNmF9BJd9E=
Subject key identifier: D0:0F:38:24:93:0D:B5:DD:C4:28:7F:6C:DE:52:71:43:BA:8E:69:67
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019777F867BC13CB2CB7A75512D97B9E0472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 11C9
Signing time: Mon 16 Jun 2025 09:00:57 +0000
Manifest this update: Mon 16 Jun 2025 09:00:57 +0000
Manifest next update: Tue 17 Jun 2025 09:00:57 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: G5nJpKSpcWwfLcozMhG81uoSuSGagfmTeM3PvI1IDP0=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:67:bc:13:cb:2c:b7:a7:55:12:d9:7b:9e:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jun 16 09:00:57 2025 GMT
Not After : Jun 17 09:00:57 2025 GMT
Subject: CN=d00f3824930db5ddc4287f6cde527143ba8e6967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:7d:9f:44:11:57:bf:74:77:0d:30:e9:7a:
d7:9c:e5:14:11:fd:fb:94:d1:39:3a:e0:6f:f9:34:
dd:1d:ff:ed:c2:f8:2a:f8:e0:24:98:4a:6d:2b:11:
de:7f:dc:e1:8c:31:d8:6a:ca:16:d3:ec:77:cf:12:
ce:6a:60:2e:ad:1c:71:03:df:4a:45:e7:ed:fe:fa:
55:0f:19:65:bd:fb:67:36:2a:3d:aa:c2:48:c7:78:
ef:97:06:e7:85:26:92:7f:13:e0:76:13:36:26:9d:
b0:76:c8:a6:58:66:7f:bd:d0:cf:c6:94:85:c2:7d:
5e:73:4b:8c:b7:66:c5:b8:c9:ad:ec:55:27:d4:18:
84:c9:39:4a:e6:c0:fe:9e:00:87:15:4b:bb:7f:93:
87:4a:eb:79:f2:96:e0:c4:c3:7a:6b:7b:84:cf:dc:
a8:a7:89:8a:99:da:24:7d:42:46:56:5e:74:86:72:
1f:47:ac:d1:8e:43:99:ae:d0:07:35:de:0a:99:e1:
9d:4b:0e:c7:e7:72:19:b4:25:d1:7c:82:21:8c:8a:
f2:b7:a7:47:8e:71:dd:17:f7:80:97:75:d7:37:04:
6d:0c:42:98:83:ce:96:97:21:90:8c:b7:b1:30:35:
06:2d:c0:9b:f0:51:1d:b7:61:1f:6b:e6:cb:b7:89:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:38:24:93:0D:B5:DD:C4:28:7F:6C:DE:52:71:43:BA:8E:69:67
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:79:7c:4f:f2:25:77:a4:3a:2e:75:e7:99:fe:23:26:f1:a6:
c4:02:56:ac:0f:14:2b:17:11:99:72:05:fd:97:b4:07:6c:76:
f9:0e:aa:28:31:d5:3d:6a:5c:eb:d8:5a:a4:df:9c:7f:69:7b:
42:cc:97:73:5b:36:30:db:f6:48:b4:e6:c7:36:cc:0d:8a:03:
61:20:d9:a8:dd:aa:a5:93:6b:8e:ee:76:8f:a6:7a:3a:51:7b:
65:c9:96:18:2b:8a:16:27:4c:5f:02:12:a9:05:c4:93:3e:7c:
94:5e:98:1a:af:b2:43:0b:8b:c8:6c:01:94:7d:6d:76:16:89:
e3:0c:aa:f6:ff:47:3c:b5:93:16:2b:62:f2:ea:f8:cb:e4:e4:
2f:8e:dc:c4:85:e3:5b:3c:64:5f:58:2d:7d:c0:1a:36:c3:cd:
45:19:f4:29:88:b1:c3:17:00:49:86:aa:9e:b8:c9:e7:65:d8:
9d:d1:d0:ba:d5:5b:df:89:bd:6b:b0:7b:09:ea:dd:31:f7:90:
26:37:48:9a:70:12:96:dd:86:28:5f:fc:68:71:e6:4e:79:54:
70:c5:2c:c6:fd:6a:45:61:84:2a:0e:ca:d6:b5:cb:a3:c2:d3:
a8:7a:bd:4b:8d:79:7c:05:7d:c7:b3:07:84:07:d9:02:9c:da:
8a:34:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:45 2025 by rpki-client