Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: GH9aBt8IfRpB6D/gsgTcnpkmxnlrUHTFSWbDCbao1OI=
Subject key identifier: 00:4B:5C:C6:76:11:51:EC:A4:52:B9:C6:B4:F9:A0:60:EF:91:C5:54
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01976F99A4E3940BF0E464AB1C65693C4AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:00:29 +0000
Manifest this update: Sat 14 Jun 2025 18:00:29 +0000
Manifest next update: Sun 15 Jun 2025 18:00:29 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: mO5qox+nBS4nNl+d2J3cDd2bK9avnP0zZxe6KF/P6+A=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a4:e3:94:0b:f0:e4:64:ab:1c:65:69:3c:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jun 14 18:00:29 2025 GMT
Not After : Jun 15 18:00:29 2025 GMT
Subject: CN=004b5cc6761151eca452b9c6b4f9a060ef91c554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:45:aa:d8:74:80:5a:ef:23:65:c0:99:88:
36:d2:fe:d1:4f:86:3f:ce:13:7c:a0:57:27:3a:c7:
0c:b7:be:dc:89:c5:5b:36:d7:59:20:6d:3a:0e:95:
c5:df:12:33:50:bc:35:00:ec:69:df:09:b0:c0:c1:
2f:d3:03:cd:08:b6:5d:79:95:7a:de:af:5c:6e:8e:
63:d7:eb:c8:08:4f:9e:46:dd:46:19:26:6d:5b:d9:
16:2d:fa:b1:49:c3:af:cd:d9:ed:33:cd:2b:2a:57:
9c:71:16:0b:b2:3b:94:05:ee:19:01:32:1e:8a:e2:
97:3a:ec:1a:86:5c:04:f4:be:53:23:0e:3a:d2:5a:
f9:cf:91:c0:3d:3c:bc:41:c5:6c:4a:84:6e:f7:e6:
0d:63:12:5b:ff:40:c4:db:a1:60:52:d9:70:6a:ad:
84:15:32:92:83:e1:09:00:7c:bb:f0:42:06:a2:b9:
85:c2:c4:49:3f:81:bf:bd:ec:80:20:20:04:8c:ca:
a1:e4:ca:0a:ce:21:e8:db:ff:a4:60:53:01:b2:31:
9c:de:e8:ab:30:42:f9:43:83:9d:c1:2b:16:82:45:
09:cd:f0:d3:9c:05:73:d4:02:e0:1a:7c:23:3a:5c:
fe:63:4c:48:3c:c3:95:ff:73:da:83:99:d3:0f:f9:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:5C:C6:76:11:51:EC:A4:52:B9:C6:B4:F9:A0:60:EF:91:C5:54
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:46:d3:dc:d9:6f:0b:f5:ea:30:89:d4:36:dc:45:ac:ae:3e:
1e:0c:6d:d9:23:b8:71:dd:53:27:50:74:b9:bd:fa:d0:36:3d:
27:23:c5:2e:27:c1:af:d8:81:82:5a:c1:cf:82:03:1a:15:88:
20:30:84:ad:91:64:0d:4c:53:11:45:bd:90:25:1d:87:8e:4a:
89:f4:15:dc:25:44:b5:ef:cd:1a:76:56:2c:d5:f0:8f:45:e0:
2b:2b:7b:34:13:c9:09:c8:fe:1a:94:91:c8:62:bc:27:3d:b6:
fe:2c:0d:ae:31:93:34:99:00:09:af:7c:04:b6:9e:98:1c:4f:
95:e5:85:fe:19:f8:88:04:1a:b5:2e:48:1b:ba:65:9e:b0:4b:
52:e0:22:09:60:e7:da:a5:b3:29:4a:a9:39:f2:f8:3c:e1:5a:
67:1b:d6:a4:87:f0:e3:72:68:dc:b2:03:4d:8f:4e:ad:17:c7:
92:cd:3d:a1:c1:53:14:42:11:82:40:33:65:f9:60:e7:71:cd:
bc:f7:be:3a:a4:18:b9:6e:bf:92:c0:a7:4b:a2:ea:d6:49:c1:
19:10:6e:57:d4:c4:39:7f:c9:a2:8a:69:35:6d:3f:da:f4:bf:
fb:61:1a:88:80:d1:ce:56:c4:41:79:cf:9e:42:92:91:fa:62:
07:e5:22:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmaTjlAvw5GSrHGVpPErUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjUwNjE0MTgwMDI5WhcNMjUwNjE1MTgwMDI5WjAzMTEwLwYDVQQD
EygwMDRiNWNjNjc2MTE1MWVjYTQ1MmI5YzZiNGY5YTA2MGVmOTFjNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FBFqth0gFrvI2XAmYg20v7RT4Y/
zhN8oFcnOscMt77cicVbNtdZIG06DpXF3xIzULw1AOxp3wmwwMEv0wPNCLZdeZV6
3q9cbo5j1+vICE+eRt1GGSZtW9kWLfqxScOvzdntM80rKleccRYLsjuUBe4ZATIe
iuKXOuwahlwE9L5TIw460lr5z5HAPTy8QcVsSoRu9+YNYxJb/0DE26FgUtlwaq2E
FTKSg+EJAHy78EIGormFwsRJP4G/veyAICAEjMqh5MoKziHo2/+kYFMBsjGc3uir
MEL5Q4OdwSsWgkUJzfDTnAVz1ALgGnwjOlz+Y0xIPMOV/3Pag5nTD/lx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABLXMZ2EVHspFK5xrT5oGDvkcVUMB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkbT3Nlv
C/XqMInUNtxFrK4+Hgxt2SO4cd1TJ1B0ub360DY9JyPFLifBr9iBglrBz4IDGhWI
IDCErZFkDUxTEUW9kCUdh45KifQV3CVEte/NGnZWLNXwj0XgKyt7NBPJCcj+GpSR
yGK8Jz22/iwNrjGTNJkACa98BLaemBxPleWF/hn4iAQatS5IG7plnrBLUuAiCWDn
2qWzKUqpOfL4POFaZxvWpIfw43Jo3LIDTY9OrRfHks09ocFTFEIRgkAzZflg53HN
vPe+OqQYuW6/ksCnS6Lq1knBGRBuV9TEOX/JooppNW0/2vS/+2EaiIDRzlbEQXnP
nkKSkfpiB+UitQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:14:25 2025 by rpki-client