Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: bTM44uIzl2N7eUiajTBDkR6LUTzpoKw7kkB8Tqzcl4k=
Subject key identifier: C6:74:59:0C:4A:FD:DD:C7:B9:64:75:57:9E:F8:9E:05:86:FF:4D:98
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 01976D065D8D8E73193C392C793E12BB33F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 128B
Signing time: Sat 14 Jun 2025 06:00:23 +0000
Manifest this update: Sat 14 Jun 2025 06:00:23 +0000
Manifest next update: Sun 15 Jun 2025 06:00:23 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: M69tWP4vqXAt5wy0aD2YaIPkkguSdFmTH+EvPC53cAs=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5d:8d:8e:73:19:3c:39:2c:79:3e:12:bb:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jun 14 06:00:23 2025 GMT
Not After : Jun 15 06:00:23 2025 GMT
Subject: CN=c674590c4afdddc7b96475579ef89e0586ff4d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:0c:f2:f9:ea:fc:05:7f:a6:a0:42:24:d5:
83:59:c3:6e:25:ae:58:8a:98:3a:d4:df:cd:72:b9:
d9:ba:47:26:e3:83:b8:f9:e7:de:c8:39:87:5c:f2:
26:9a:66:71:17:0b:61:cd:75:fd:fd:47:66:6e:57:
ea:4c:1c:82:fc:25:10:29:66:b8:d3:16:3f:85:69:
c8:ec:25:2a:9b:35:7b:3d:0b:f9:05:5e:50:f8:ea:
ff:3f:1b:c9:7a:38:50:bc:ac:93:27:1e:85:3e:a9:
c0:3f:8a:f8:06:0c:d8:80:d9:da:f5:42:9b:9f:44:
d3:57:70:ee:63:6b:d8:8b:c4:0b:27:c9:c3:bc:37:
3c:cf:34:20:b6:69:3f:67:a1:48:fd:51:74:55:cf:
55:ee:54:2b:29:bb:ef:4e:56:d5:24:01:19:5b:05:
75:78:cb:f0:f0:31:0b:ab:dc:56:75:a9:b1:64:91:
73:84:b7:04:63:2b:df:43:fb:c0:fd:2c:b3:ee:40:
eb:7a:63:b3:20:f7:34:e6:ec:e7:dd:37:66:b0:84:
27:2f:3e:81:1f:80:d4:29:53:0e:8e:3a:a7:03:21:
03:0a:b4:66:22:72:f9:06:28:6a:5b:54:64:ae:c2:
e6:73:1a:18:cd:eb:b0:5e:da:4c:c3:15:a5:51:08:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:59:0C:4A:FD:DD:C7:B9:64:75:57:9E:F8:9E:05:86:FF:4D:98
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6c:3b:4f:48:88:b3:87:fa:71:09:a3:74:8e:fb:bb:3f:69:
da:97:bf:ad:bd:a6:29:88:45:bc:fe:63:a6:83:8f:dc:b2:14:
ca:ba:e1:ce:9a:0b:2c:86:16:c9:0c:b2:6e:6e:ea:e6:02:c4:
c2:11:96:f0:6d:6b:96:96:6b:d6:fc:a5:38:84:51:34:57:2e:
f7:bf:10:72:ad:25:54:22:0b:ac:15:2b:da:d2:47:3e:4d:dd:
27:dd:b0:b8:48:f7:52:54:1e:c3:8d:d2:a5:ed:a3:fe:00:fe:
36:a5:aa:d7:67:dd:97:0d:ff:e8:e0:37:a1:5c:4c:1f:9c:4e:
9c:99:bc:0b:7a:11:53:7d:87:5f:8a:2f:ae:1f:45:b7:c8:95:
9e:d6:6a:ef:80:fa:c4:67:3b:d8:0a:2c:40:e1:ae:54:d0:65:
ce:52:04:c1:98:78:32:a2:c7:7a:99:54:eb:1b:20:19:2d:da:
20:cc:3f:31:43:2f:34:9e:70:f7:3a:32:93:97:d2:ca:16:f2:
95:f2:a7:e5:02:22:6f:27:c1:da:7e:b6:74:14:d9:b6:39:bb:
88:57:c6:45:ef:b7:e2:f5:9f:94:73:80:c7:83:69:43:9a:cb:
fd:38:f2:19:7c:df:14:52:8f:77:87:f8:5f:ff:83:e6:81:44:
59:eb:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:23 2025 by rpki-client