Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: u/VTlkP/eBCCM0Aje4hyv2XcwTAD8bYFmaIPrQgZkNQ=
Subject key identifier: 91:53:A4:19:48:B5:E7:74:87:EB:71:A3:C3:03:BB:7B:F2:35:58:03
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 0196B8C7C103210C16AA2D2B1ED0E9C8F681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 1166
Signing time: Sat 10 May 2025 06:00:20 +0000
Manifest this update: Sat 10 May 2025 06:00:20 +0000
Manifest next update: Sun 11 May 2025 06:00:20 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: ROrE+JbM1LjpZavbYIZSVbPHoxJ+rbcecX2G/GHGHSc=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:c1:03:21:0c:16:aa:2d:2b:1e:d0:e9:c8:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: May 10 06:00:20 2025 GMT
Not After : May 11 06:00:20 2025 GMT
Subject: CN=9153a41948b5e77487eb71a3c303bb7bf2355803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:82:57:1a:6b:fe:b1:1a:7d:ef:47:4a:04:
03:ca:9d:1d:cd:e9:2c:87:5d:c4:19:da:65:67:19:
41:33:de:86:7c:99:b6:a8:55:05:62:aa:d1:6e:47:
6c:9d:7f:8f:a0:1f:70:ee:9e:97:75:9a:5a:fd:d5:
c0:75:6c:62:68:c7:01:6b:a7:ce:9e:40:6a:fa:46:
24:9d:c6:d0:2e:e0:78:b5:53:63:12:d4:e8:65:73:
bc:b7:25:e7:68:87:68:51:5a:08:f5:08:4f:0b:52:
44:34:50:06:46:65:56:7f:a2:d0:e0:0b:d8:1d:3e:
1a:95:94:f3:39:d0:bc:92:27:b2:9b:d8:ee:50:56:
21:18:db:92:4c:d3:83:a4:08:4b:88:aa:c6:21:41:
b0:a0:b2:90:c2:6a:74:de:e0:76:10:a6:97:62:ba:
77:43:26:44:c2:ab:8a:c6:84:21:ed:f6:21:2d:f0:
12:6a:b2:3e:ea:0b:10:b4:37:95:36:8f:70:8b:0d:
d3:5f:ea:7d:14:b6:11:c1:6a:f9:40:27:3f:b1:bc:
f1:e2:de:a5:58:df:4d:57:21:d9:d2:fd:e5:d0:1b:
4f:77:48:94:bd:40:f8:a0:91:7e:28:96:da:12:6e:
62:3a:a0:76:a6:a3:a0:a7:c2:84:94:a0:3f:f5:64:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:A4:19:48:B5:E7:74:87:EB:71:A3:C3:03:BB:7B:F2:35:58:03
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b5:4f:3a:1f:43:ea:e5:f3:c9:a5:dc:7a:5f:d6:00:e4:27:
c6:b7:72:af:04:62:d0:62:29:f2:66:ca:10:54:7d:5d:60:21:
94:41:2b:53:5c:a0:fd:08:7a:e1:93:fe:74:d3:0e:d5:bc:10:
a4:7f:1d:ce:0a:4b:e8:83:de:62:76:6a:53:c4:61:aa:1a:8a:
bb:d2:10:3a:56:cf:84:26:ad:eb:bb:a4:b2:60:2c:7f:88:72:
0e:f8:f8:cb:a1:df:5b:61:77:ce:f0:c7:dc:17:ee:35:18:c0:
a8:d1:2d:21:e2:7f:fc:6c:ff:66:90:73:20:17:9c:ef:31:7f:
bd:7a:c5:60:d1:5f:a5:43:9a:e7:13:fd:4f:61:09:bd:89:8c:
7e:f0:b9:f9:b3:a8:65:a9:53:88:43:ee:96:8a:62:6b:76:34:
a9:b1:51:1d:19:df:8f:9e:b5:3b:85:27:b7:af:53:ab:71:0a:
f1:80:36:cc:96:0f:a0:82:9f:31:1f:0e:f2:18:53:3a:7f:96:
46:9b:3a:90:78:5e:a7:6e:4f:2c:55:72:ef:02:6f:cf:ec:6a:
f0:fe:1c:26:d1:f2:c5:7a:43:1f:0a:83:e7:39:e2:e9:95:fc:
ab:2f:c3:16:4a:0e:1c:a8:a7:a7:d8:32:ce:dd:58:cb:27:61:
d1:39:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:31:27 2025 by rpki-client