Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: kH4UFplYyeYK5j7dPrJff2pNZY5n6TRzV/HD3gGVCV0=
Subject key identifier: 1E:6B:7C:51:45:0D:CF:C7:4C:D4:6F:6B:60:BF:DC:AB:79:CC:43:50
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 0197B6A21AF63A448954C14F93771BA86331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: jIfBLpWrL33FaNGGaJ4frkfPm2QshroJMto5jz17QRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1a:f6:3a:44:89:54:c1:4f:93:77:1b:a8:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=1e6b7c51450dcfc74cd46f6b60bfdcab79cc4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:b2:50:b8:fb:30:23:30:f2:3c:ba:e4:c7:
1b:a8:8a:ab:f1:3c:59:88:23:cc:c9:e7:9b:75:62:
eb:29:99:1d:63:4d:8f:4d:54:10:2f:68:85:3b:1d:
19:87:0f:e5:be:00:b7:9a:75:4f:18:82:5f:30:16:
a8:9f:9c:71:11:7b:a3:fb:94:52:0a:1c:23:03:de:
89:1d:92:c7:b3:fe:7a:86:34:c8:ea:0e:02:06:a5:
06:60:da:11:59:49:46:99:a9:5d:a6:cb:c4:13:33:
a3:a6:2e:90:df:41:18:b3:7c:df:37:44:69:39:4c:
55:69:0a:4c:f0:e1:72:7c:2b:de:de:68:5d:3f:3f:
a9:4b:ab:a9:07:6e:67:75:1c:f9:6e:ff:75:16:74:
a2:01:15:10:09:a0:ee:ac:8b:47:55:ae:99:6a:38:
e0:32:55:49:85:bc:af:b3:f7:63:d2:e1:96:0c:aa:
ce:48:55:fe:14:67:b3:93:e4:3d:2c:e3:b9:22:6d:
ba:bc:d1:d8:5b:c3:32:bb:a5:6c:37:c8:b8:cd:65:
eb:99:23:be:dd:5a:da:6a:99:67:a5:1a:50:e6:ae:
b0:3e:98:0d:26:7c:36:aa:4d:94:c4:43:c5:e9:74:
8f:0c:ca:23:2e:7e:68:94:0c:62:ee:67:62:c8:09:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:7C:51:45:0D:CF:C7:4C:D4:6F:6B:60:BF:DC:AB:79:CC:43:50
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:90:d2:f1:8b:33:bf:62:ae:aa:04:5e:26:ad:18:e7:f0:
93:26:b2:a8:82:5c:38:ee:6f:e1:7d:fc:b4:81:bf:80:ff:27:
bf:71:24:29:db:8c:27:fd:e9:42:ae:07:62:cb:9e:7d:64:bd:
30:e0:28:05:01:d9:c6:3b:69:7f:34:85:68:c2:73:36:f5:6d:
64:32:6c:93:66:99:b1:85:01:6c:c8:9b:99:c2:91:e9:f8:c8:
b5:3e:f1:e4:9b:eb:00:87:45:a3:0b:a2:34:1f:b8:c1:9f:c3:
a4:94:8d:9f:7c:02:e0:66:6c:f5:66:90:25:1c:e7:63:54:03:
b5:62:2d:35:80:ef:d6:91:81:43:07:21:da:d6:e3:a0:54:db:
1d:67:06:16:4c:7d:d9:1d:5b:fb:b1:18:fa:35:18:6d:7a:7c:
a8:69:88:8f:0d:93:0d:c4:9f:8b:73:33:dc:d8:6a:97:89:27:
7a:b9:78:39:df:73:12:94:f8:b7:04:2f:c5:bb:80:85:48:d4:
2f:88:3f:26:dd:12:08:29:d2:0a:8f:35:51:1d:27:26:d3:a6:
7d:1d:2e:70:89:5d:dc:99:1b:99:72:b2:ce:c5:10:3f:7c:f5:
7b:d9:30:09:03:38:6c:39:76:58:17:d8:70:37:4e:c2:81:f6:
89:a2:fc:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ohr2OkSJVMFPk3cbqGMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy
MjRiNGYwHhcNMjUwNjI4MTMwMjQ2WhcNMjUwNjI5MTMwMjQ2WjAzMTEwLwYDVQQD
EygxZTZiN2M1MTQ1MGRjZmM3NGNkNDZmNmI2MGJmZGNhYjc5Y2M0MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeOyULj7MCMw8jy65McbqIqr8TxZ
iCPMyeebdWLrKZkdY02PTVQQL2iFOx0Zhw/lvgC3mnVPGIJfMBaon5xxEXuj+5RS
ChwjA96JHZLHs/56hjTI6g4CBqUGYNoRWUlGmaldpsvEEzOjpi6Q30EYs3zfN0Rp
OUxVaQpM8OFyfCve3mhdPz+pS6upB25ndRz5bv91FnSiARUQCaDurItHVa6Zajjg
MlVJhbyvs/dj0uGWDKrOSFX+FGezk+Q9LOO5Im26vNHYW8Myu6VsN8i4zWXrmSO+
3VraaplnpRpQ5q6wPpgNJnw2qk2UxEPF6XSPDMojLn5olAxi7mdiyAnxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5rfFFFDc/HTNRva2C/3Kt5zENQMB8GA1UdIwQY
MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt
MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj
LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPqQ0vGL
M79irqoEXiatGOfwkyayqIJcOO5v4X38tIG/gP8nv3EkKduMJ/3pQq4HYsuefWS9
MOAoBQHZxjtpfzSFaMJzNvVtZDJsk2aZsYUBbMibmcKR6fjItT7x5JvrAIdFowui
NB+4wZ/DpJSNn3wC4GZs9WaQJRznY1QDtWItNYDv1pGBQwch2tbjoFTbHWcGFkx9
2R1b+7EY+jUYbXp8qGmIjw2TDcSfi3Mz3Nhql4knerl4Od9zEpT4twQvxbuAhUjU
L4g/Jt0SCCnSCo81UR0nJtOmfR0ucIld3JkbmXKyzsUQP3z1e9kwCQM4bDl2WBfY
cDdOwoH2iaL8Lg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client