Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: w1Y6A+y6wTw2X3IUu96m7aaj634QP8kXjxL43dXI7Oo=
Subject key identifier: 5E:9A:83:BF:4C:37:63:58:5E:C1:95:4E:70:66:C3:BF:91:EE:03:57
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019768BBF497B407B714A0C843ADD0A13400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0AF8
Signing time: Fri 13 Jun 2025 10:00:37 +0000
Manifest this update: Fri 13 Jun 2025 10:00:37 +0000
Manifest next update: Sat 14 Jun 2025 10:00:37 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: r0ifnPKux2AIr89MJCUJ4ikcW3Sl6by5Aw92X7Ryhg0=)
2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:f4:97:b4:07:b7:14:a0:c8:43:ad:d0:a1:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Jun 13 10:00:37 2025 GMT
Not After : Jun 14 10:00:37 2025 GMT
Subject: CN=5e9a83bf4c3763585ec1954e7066c3bf91ee0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:20:68:20:80:4a:3d:68:0c:1a:e1:60:99:
5b:ba:4d:dc:0d:b7:5b:5f:62:41:90:da:fa:ac:ff:
b1:50:71:b9:cd:65:43:46:32:c9:2c:a4:4a:2b:e3:
ca:b9:87:10:65:c4:2f:54:51:e7:0d:ea:55:70:bb:
8b:3c:c8:e3:35:c7:28:76:9a:23:f2:41:a9:59:36:
c9:99:fe:e1:c4:7f:6e:63:e0:f1:68:bb:92:41:23:
b5:26:35:a6:07:bc:40:a8:e6:93:2e:7c:43:45:5c:
2f:08:5f:88:8c:ef:87:0f:89:91:ca:3f:81:74:e8:
1c:b6:86:45:29:af:97:2a:5c:2c:87:f4:3c:40:16:
61:05:b6:1b:03:39:a1:69:7b:e3:e3:0b:08:82:94:
3b:f5:73:39:3d:18:f1:ec:0c:6b:2f:60:22:08:41:
28:91:ad:47:a9:ed:a9:94:46:31:7a:4c:22:d0:88:
cc:9f:40:0c:05:34:ff:ae:80:2f:c1:e8:3f:ed:e6:
b9:24:eb:e7:0a:dc:70:12:79:c3:26:a7:0f:82:a0:
87:c5:e8:2f:e7:87:ba:9a:50:4c:32:a0:1c:9d:e8:
bc:94:29:9d:6d:7b:45:4d:fb:6c:4e:66:7a:ff:fa:
e3:a6:4f:21:40:d0:74:70:dc:b6:3b:4c:d0:0a:77:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:83:BF:4C:37:63:58:5E:C1:95:4E:70:66:C3:BF:91:EE:03:57
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:94:e8:27:00:45:eb:74:b1:63:49:fc:88:08:13:11:54:
ef:81:8f:bf:74:12:13:25:2c:c0:88:3f:b3:f1:90:6b:af:a4:
5f:21:a9:2c:a7:1e:ed:50:9b:64:e6:aa:3e:3d:85:d5:41:1b:
70:10:a3:7d:fc:76:fd:4d:a8:7a:f0:20:6b:3a:74:d6:7e:6c:
51:96:49:fb:20:fc:ff:56:bc:5a:8a:5f:45:fc:ca:78:11:88:
71:55:8b:58:55:7e:4b:95:1a:bc:ed:c0:7f:23:15:3d:b3:bf:
94:6b:e3:09:f3:1d:55:4e:1e:a0:73:0b:46:b6:c1:d8:2f:96:
4a:db:50:c3:31:43:04:4a:c7:c2:1d:d2:3a:30:66:55:02:23:
13:30:d7:38:d1:54:7c:28:e2:86:8f:01:08:24:20:df:aa:4d:
18:aa:ce:75:e2:e8:8f:b6:3f:6b:ab:5b:f0:9d:ca:cb:e2:59:
0d:f4:b0:4f:4f:c9:0d:bb:ae:e5:5b:4b:77:45:d3:d3:02:5d:
bb:87:ea:c7:cd:7d:b6:7d:4f:bb:02:17:2c:de:03:6b:fa:fd:
21:2b:9a:0f:5b:26:b9:c5:dd:97:70:bc:2c:f0:fc:5f:b0:fc:
ac:a5:4e:ab:39:89:f9:48:4d:a7:dd:50:78:e6:51:ba:e7:25:
81:89:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:56 2025 by rpki-client