Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: Jx3cFjRKJ8mMzEjAjqCb8ZXqQWkJo/xoMIRHqGg2/hY=
Subject key identifier: 2A:65:3C:B4:59:3D:B3:FB:68:D3:3A:23:12:88:FB:13:C4:16:A2:ED
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 0197B70E8026583A32EC139D183EF04E485C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: 9lxD9USOwIrMQvj4XD9d1PdKFMCdJSXb6y8W1mAS3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:80:26:58:3a:32:ec:13:9d:18:3e:f0:4e:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=2a653cb4593db3fb68d33a231288fb13c416a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:80:1a:73:89:b7:7a:ed:26:80:ef:44:27:
76:68:e8:d6:92:f3:0d:5d:6c:2f:71:0a:60:f5:8c:
d9:c9:4d:85:46:04:1a:34:c4:37:8e:cb:63:f4:d7:
04:23:8c:65:7f:ec:69:c3:c3:2f:88:70:ac:22:10:
7d:d0:fc:6e:1e:1c:71:fe:47:cf:76:6c:6b:25:5a:
e2:b4:5a:42:2a:33:41:b4:ad:7b:9e:41:4a:65:e7:
9a:39:14:74:9b:90:3d:dc:93:fd:dd:c6:cb:cf:30:
eb:bc:e4:5c:f9:f8:8c:75:db:1e:0f:15:fc:ad:71:
95:77:50:84:ba:94:20:44:ca:2c:e0:20:18:16:5e:
a3:0c:f6:87:2e:61:fd:c9:ea:ab:f7:f9:ee:a9:27:
d4:82:40:92:1f:0e:6c:76:37:f0:f8:c6:49:aa:b5:
15:b4:f3:b3:80:b2:fc:fb:21:96:45:c2:ea:4a:aa:
45:d0:76:0f:bd:13:3f:22:4b:cf:1b:b7:67:27:31:
75:42:8b:f1:71:bc:8e:a4:e2:bc:34:ec:82:98:80:
60:a9:ff:16:81:46:02:83:27:0c:82:14:f1:5b:45:
23:17:56:6d:bd:6f:81:24:0a:08:44:34:48:f9:48:
5b:7f:56:80:31:b6:ef:84:0d:64:79:41:41:d0:0c:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:3C:B4:59:3D:B3:FB:68:D3:3A:23:12:88:FB:13:C4:16:A2:ED
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5f:bb:dd:37:b3:ef:b6:c7:18:57:ed:df:3f:08:19:eb:67:
78:9a:85:52:1b:37:63:cb:5e:e1:be:cb:fb:e4:82:c2:4e:92:
22:03:ae:8b:95:54:96:95:c3:6e:3e:29:6c:b7:25:bc:0f:1d:
ba:d3:5d:44:8b:a7:ca:9e:24:7d:2d:50:c0:ee:ff:e6:96:20:
34:4f:c3:66:74:76:cf:c0:14:40:1d:22:8a:de:72:c8:27:f6:
f4:77:10:d5:53:bc:88:53:ea:e1:03:90:45:ce:db:9c:49:ae:
f5:af:ae:c9:d1:0f:1a:5c:00:bb:c8:7d:38:ac:a0:8b:e7:5d:
7e:50:fe:7f:9d:02:e9:90:79:0e:43:79:83:78:72:9d:f0:b5:
5b:fc:37:5a:a0:a8:e8:dd:9f:0d:08:68:f7:41:a4:b6:ae:5e:
bb:5d:90:4a:56:79:f2:28:23:ab:a1:00:d8:da:c0:24:55:d8:
8e:96:e6:9f:6f:af:9d:2c:15:a6:98:3a:bb:8a:14:73:90:3f:
12:2a:b5:e6:d3:86:3b:a5:1a:7a:5e:51:3a:9a:88:72:91:1f:
f5:38:f2:55:a5:5a:6c:c6:7c:2d:c6:7a:0d:1d:b5:67:d6:8c:
77:73:64:7b:cc:64:e9:9f:23:7f:17:aa:9c:26:38:2d:2c:dc:
0e:58:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:43 2025 by rpki-client