Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: 1h5jzkBGYb5Spgr901KEJmayyl5JeeZQduBxUe802HU=
Subject key identifier: E0:0C:C4:96:B9:58:78:55:A6:32:65:E1:41:4B:90:3B:64:F8:42:F0
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0197808E6B76F6CBAA183416BFE4AA30FBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1597
Signing time: Wed 18 Jun 2025 01:01:46 +0000
Manifest this update: Wed 18 Jun 2025 01:01:46 +0000
Manifest next update: Thu 19 Jun 2025 01:01:46 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: hMW4nG5E1X/KcYTpf9+lKYBo7rWUpLP7zmEqXWXPYkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:6b:76:f6:cb:aa:18:34:16:bf:e4:aa:30:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jun 18 01:01:46 2025 GMT
Not After : Jun 19 01:01:46 2025 GMT
Subject: CN=e00cc496b9587855a63265e1414b903b64f842f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:bc:32:1a:7e:a5:ea:d8:cc:2f:c8:ee:b3:
05:1a:c0:06:8e:df:57:7f:37:de:32:a8:ef:03:c5:
37:41:87:bd:ae:d0:48:a8:30:ab:ce:c2:6c:d9:9c:
77:ed:ea:03:ca:d8:19:5d:24:6d:6c:b8:2d:20:45:
fd:59:d3:14:51:c5:de:15:71:62:6d:4a:c0:72:31:
4d:27:79:40:04:01:3c:64:dc:e4:30:d2:12:90:1f:
a3:0e:45:d6:a2:e9:d8:1a:1a:5a:6f:22:98:da:eb:
f1:51:a5:b6:bd:5c:0b:90:fc:ca:e3:4c:1e:62:69:
58:0a:f5:1d:d9:2d:ef:41:43:82:0b:1e:ae:fc:b7:
bd:8a:24:e7:75:7e:e4:93:d6:ad:b3:52:1c:1c:31:
33:8f:05:3c:c8:f9:a5:04:da:3d:aa:b9:2f:1b:48:
57:f3:81:30:f8:11:be:13:d0:1d:25:aa:d6:87:a7:
d0:34:c2:5b:44:81:1e:90:e4:40:2c:64:a7:43:c6:
20:bc:cb:4d:f4:8c:4b:79:7f:aa:5a:57:dd:ad:7d:
71:a4:c5:b1:f2:b4:99:2b:6f:5f:34:9c:79:7d:c3:
23:7b:75:02:97:6d:1e:25:e2:c9:52:bd:79:03:96:
86:41:f3:f6:c8:6b:b5:0d:e3:f3:b3:d3:58:7f:1b:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:C4:96:B9:58:78:55:A6:32:65:E1:41:4B:90:3B:64:F8:42:F0
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c7:93:0d:59:dd:b8:7e:f4:bc:b3:e4:fd:d5:86:b4:60:79:
7b:c3:c6:d3:80:9e:6e:5a:85:b8:5b:92:6b:32:21:b0:92:c8:
7d:bc:68:a5:7d:11:13:5a:e3:fb:57:f3:a6:be:e0:f5:3c:19:
02:72:30:30:5f:29:a4:0f:e5:db:7c:50:0e:a5:be:47:35:e1:
dd:bf:a3:c8:de:70:3a:33:c5:2b:fd:bf:64:e2:31:f0:b9:0f:
65:90:76:2f:d5:e8:05:f4:f7:44:b3:a9:07:11:2e:b2:96:b6:
82:c2:72:dd:49:3c:2a:a6:36:99:96:77:79:b4:9c:42:41:0e:
b9:dc:81:92:6b:db:b2:3d:22:a6:f4:5e:4b:f6:52:bf:89:5d:
74:a2:92:1c:7c:06:c4:99:f9:1d:f9:ea:13:75:d8:a0:e6:3b:
85:7f:a4:88:1d:ef:12:ea:66:68:8f:68:8e:4d:ab:77:1c:87:
d5:d8:3a:82:81:4c:72:b4:5f:a8:cf:e2:94:ff:1b:00:a7:a9:
01:06:b7:d5:b7:05:fa:35:d8:c1:5e:a9:47:5d:8b:e4:f2:47:
66:9b:7c:f7:77:d7:c6:2f:00:60:fc:a4:96:80:9f:ce:ca:f9:
8d:81:06:7b:1b:a2:22:a5:af:dc:b7:4d:0b:be:44:b3:c0:64:
6e:0c:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:58 2025 by rpki-client