Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: YYGzNMrm61+n/WnH+QMvsorFwu8RzYn6w5aS63mg+Nc=
Subject key identifier: 36:09:2C:9B:03:C6:88:89:1F:29:B6:72:0A:6D:60:FE:FA:EA:12:E2
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 01967944366BE093C9F92FDDD2F718ABC6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0A7C
Signing time: Sun 27 Apr 2025 22:00:35 +0000
Manifest this update: Sun 27 Apr 2025 22:00:35 +0000
Manifest next update: Mon 28 Apr 2025 22:00:35 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: qfPMmgBSebEXrQlz5aAY8UWZ1kx0Q2NxDCzkwsi7Sc4=)
2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:36:6b:e0:93:c9:f9:2f:dd:d2:f7:18:ab:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Apr 27 22:00:35 2025 GMT
Not After : Apr 28 22:00:35 2025 GMT
Subject: CN=36092c9b03c688891f29b6720a6d60fefaea12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:66:5a:15:41:4b:b4:41:65:7b:32:cf:d4:
ac:e6:bf:b4:66:0e:57:a0:54:60:fe:66:c1:a9:fe:
33:48:99:e9:6c:c3:b6:30:81:3b:64:3d:25:c6:b0:
c3:54:48:c5:e7:3a:09:88:6e:29:90:e1:ca:a8:60:
eb:01:4c:ff:bc:13:76:60:81:6f:fb:b9:2a:37:4e:
1a:c3:58:1c:c6:7e:99:4b:9c:75:86:c4:b8:e1:93:
6e:23:d8:e5:57:c4:19:81:f5:55:0b:21:93:b1:09:
bf:40:10:f5:36:1b:7d:a3:ff:9a:41:a6:da:ed:8d:
38:1e:9c:9f:dd:a7:73:12:c3:52:fb:03:42:b6:05:
c0:7a:5e:c6:ac:80:06:c9:a4:a5:ce:bb:38:06:c4:
ec:ed:05:52:e0:1f:fa:fe:36:a4:97:7e:96:cd:31:
14:a8:7f:49:dc:38:c1:0f:7c:a5:aa:38:38:41:ea:
e4:f0:e3:8d:a9:4b:28:0e:99:2d:ac:89:2f:a1:f2:
8d:ab:e1:47:38:69:25:03:eb:6d:a0:8e:b1:f4:f4:
af:f8:37:8e:59:bc:7f:a2:1a:97:9e:51:a0:92:0e:
f0:84:ad:6f:ad:70:8b:b2:36:36:0d:b2:03:0b:79:
85:71:0d:82:1e:c3:1b:94:5a:16:a0:9a:af:f9:ef:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:2C:9B:03:C6:88:89:1F:29:B6:72:0A:6D:60:FE:FA:EA:12:E2
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:21:ca:26:5e:f7:b5:8e:86:4e:72:cb:2a:53:f7:da:3a:19:
10:9d:78:de:96:ca:2e:a5:d7:ba:98:fe:91:02:42:42:68:0c:
b5:63:28:37:00:3f:4b:6c:fd:09:15:48:4e:1e:72:b8:6d:14:
e2:0c:f0:e3:20:b6:94:f7:1b:d1:e7:09:90:74:1e:fb:38:98:
7b:d1:e3:62:16:a1:3b:99:2e:b2:a1:16:72:ef:39:3a:86:01:
c3:3a:7b:8f:d3:e1:16:e4:59:f0:e1:c0:ef:a5:7c:b0:98:6b:
0c:de:8a:08:26:e0:ba:95:bb:d1:e7:6f:1d:c6:69:03:21:83:
d1:7d:74:18:ab:0f:d8:4b:8a:f5:08:8c:a4:b5:47:79:21:75:
b8:a2:96:22:61:3d:ad:f3:09:2c:e7:f5:56:4b:4e:34:4b:8b:
65:b8:60:39:5a:ee:49:16:d8:14:8c:5b:87:ba:86:36:c0:cc:
30:51:03:d2:93:eb:67:a9:35:af:39:7c:0f:e3:51:49:8d:7b:
59:87:1e:3b:90:da:28:52:af:23:c0:46:ee:6f:53:1d:c2:08:
e6:0a:e2:09:b0:1f:66:6d:72:35:c4:14:9b:30:fc:22:ad:c0:
06:17:70:8b:db:73:69:0e:a0:88:a0:a6:30:db:48:df:92:84:
7f:36:4a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RDZr4JPJ+S/d0vcYq8bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw
Mjc2YjUwHhcNMjUwNDI3MjIwMDM1WhcNMjUwNDI4MjIwMDM1WjAzMTEwLwYDVQQD
EygzNjA5MmM5YjAzYzY4ODg5MWYyOWI2NzIwYTZkNjBmZWZhZWExMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyghmWhVBS7RBZXsyz9Ss5r+0Zg5X
oFRg/mbBqf4zSJnpbMO2MIE7ZD0lxrDDVEjF5zoJiG4pkOHKqGDrAUz/vBN2YIFv
+7kqN04aw1gcxn6ZS5x1hsS44ZNuI9jlV8QZgfVVCyGTsQm/QBD1Nht9o/+aQaba
7Y04Hpyf3adzEsNS+wNCtgXAel7GrIAGyaSlzrs4BsTs7QVS4B/6/jakl36WzTEU
qH9J3DjBD3ylqjg4Qerk8OONqUsoDpktrIkvofKNq+FHOGklA+ttoI6x9PSv+DeO
Wbx/ohqXnlGgkg7whK1vrXCLsjY2DbIDC3mFcQ2CHsMblFoWoJqv+e9CuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYJLJsDxoiJHym2cgptYP766hLiMB8GA1UdIwQY
MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt
MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3
LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyHKJl73
tY6GTnLLKlP32joZEJ143pbKLqXXupj+kQJCQmgMtWMoNwA/S2z9CRVITh5yuG0U
4gzw4yC2lPcb0ecJkHQe+ziYe9HjYhahO5kusqEWcu85OoYBwzp7j9PhFuRZ8OHA
76V8sJhrDN6KCCbgupW70edvHcZpAyGD0X10GKsP2EuK9QiMpLVHeSF1uKKWImE9
rfMJLOf1VktONEuLZbhgOVruSRbYFIxbh7qGNsDMMFED0pPrZ6k1rzl8D+NRSY17
WYceO5DaKFKvI8BG7m9THcII5griCbAfZm1yNcQUmzD8Iq3ABhdwi9tzaQ6giKCm
MNtI35KEfzZKlA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:09 2025 by rpki-client