Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: uHiSPBzhwY5VXHTakE2/1o8dG5EAkaTQpldxSwXfA5g=
Subject key identifier: 05:A1:38:77:7B:4B:E8:F4:86:8F:18:E5:96:25:FB:1C:13:39:DE:37
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 0197B7B32BC6D936B2246DCAF7689D6D6B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 11EA
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: vHZ3YXjY8k9s/B5ahhP4PhZ2GL8Lws34TbvAn2kTc44=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2b:c6:d9:36:b2:24:6d:ca:f7:68:9d:6d:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=05a138777b4be8f4868f18e59625fb1c1339de37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:bb:94:e3:ab:e2:8c:2d:c1:c5:2e:95:df:
0c:9d:07:2e:fa:7b:28:c6:6e:61:00:b2:25:78:70:
52:e6:f4:4e:5c:c2:be:25:a3:80:3e:fb:2d:eb:a5:
aa:e4:49:31:49:d0:4b:1e:48:85:12:ea:03:10:f7:
9f:ab:78:c6:2b:f3:5e:45:b7:8f:f9:0e:1a:c3:a7:
fa:35:33:37:7f:dd:49:40:f7:bd:cd:68:01:f9:87:
8c:65:c3:19:84:9e:dd:22:2d:c3:2c:4f:ac:81:bb:
f2:2d:75:bb:7d:dd:9c:ca:20:aa:f7:2a:77:38:16:
40:88:d8:e4:bf:a3:7e:87:2c:a0:82:e4:e1:a8:3d:
26:cf:7d:d7:5f:d8:90:60:65:30:29:25:6c:fa:7d:
b5:d9:f5:82:84:aa:98:b5:95:6b:18:50:35:e1:fc:
45:6e:24:82:8e:c4:70:9d:17:24:dd:fa:1a:c5:98:
59:db:7f:cb:86:93:3c:36:82:b2:39:76:cb:06:2e:
b9:fe:41:3b:f8:d8:6f:de:3a:7b:a3:99:71:de:45:
67:44:97:4d:44:24:44:9e:8d:95:5d:54:f3:14:69:
09:1e:58:c7:a8:47:a9:da:ca:7b:e0:c3:45:ee:14:
15:0a:f2:29:be:47:d3:75:1c:9f:71:7a:ac:3c:76:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:38:77:7B:4B:E8:F4:86:8F:18:E5:96:25:FB:1C:13:39:DE:37
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:49:a4:62:a3:88:15:61:49:8c:55:7c:41:24:bc:55:39:
69:fa:82:04:f1:e8:12:7f:b4:e7:e4:51:8b:d3:b0:0b:1c:6f:
40:13:38:79:e5:83:1c:46:23:d9:30:aa:1f:3b:0c:7b:c1:47:
4a:3e:05:7e:96:d9:3f:9d:1b:d8:9e:b7:b2:d7:a1:f3:7d:21:
fb:27:83:9a:72:eb:6f:a1:a7:d7:24:81:5e:76:31:83:fa:29:
9c:9b:05:01:93:44:25:67:d8:69:61:29:a3:21:88:9a:79:21:
01:62:0f:90:ef:6c:28:d0:c8:82:d2:46:77:3f:29:8f:f4:3c:
b8:18:6c:3f:3b:0f:ca:3f:bd:16:9e:6a:6b:83:ea:12:df:2c:
2b:a5:fe:b4:94:66:12:19:ab:30:48:ad:ff:20:af:43:65:92:
29:5c:93:63:ed:eb:16:82:79:b6:6e:32:63:33:78:eb:10:85:
a5:aa:05:f8:b0:be:67:4b:36:67:09:99:4c:e3:d1:83:38:b2:
6e:92:9d:46:67:52:51:81:3a:03:d6:db:4b:a6:61:da:ac:9d:
35:18:31:f5:41:13:f7:fc:35:2e:58:3d:45:5f:38:c0:fc:c8:
45:1f:41:d1:e4:1a:31:f6:4e:ae:2b:2a:64:db:32:9f:a0:7a:
c4:11:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:49 2025 by rpki-client