Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: 0AYAzNbJLd7vNug8IHp6IlfsCgVeVCeqxwgF/aVG9Qk=
Subject key identifier: B9:1C:19:7B:07:BC:3D:4F:EA:2F:F1:1C:D3:31:9D:17:04:B4:41:A2
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 0198D66102BA0CF8036B67A6844BA78CECC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 1346
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: n/o8qyJ+yZVMbJBMykCogGtYJGkNFqwe2r21e3gu7O8=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:02:ba:0c:f8:03:6b:67:a6:84:4b:a7:8c:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=b91c197b07bc3d4fea2ff11cd3319d1704b441a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:71:b2:7f:0b:4d:56:1a:3f:c9:24:0b:f7:
76:0f:80:8e:72:09:5c:df:d7:67:7c:49:db:52:39:
0f:d2:c5:a0:05:2d:5a:ca:0a:2c:c3:ad:c9:df:01:
19:52:7f:3c:4f:9b:a3:b3:d9:0a:78:80:7e:9e:41:
d8:17:e9:80:e7:93:1a:11:1e:b6:e4:99:97:b4:7d:
31:55:fb:e5:55:7c:22:75:7c:ea:37:8d:5e:0c:a6:
bf:c0:54:ff:3e:c7:42:e5:1c:97:ad:c5:a5:ee:6d:
42:da:28:ec:cf:f5:1b:d3:ff:5a:25:f8:f1:75:fe:
75:1d:26:88:7a:47:70:c0:69:6e:b3:ec:cf:23:5e:
e2:24:1b:0b:d6:27:ea:66:71:b6:72:41:d8:66:e4:
ca:b0:98:81:0d:6f:eb:0d:a3:3e:5d:9a:44:f4:d5:
3b:86:26:75:d7:9e:aa:e3:a0:25:55:2d:33:ea:e7:
a9:3d:99:f7:2d:ed:e6:e0:df:1d:4a:b4:10:be:00:
97:39:3e:1d:6c:3f:91:2e:ba:be:3a:c4:32:2f:6d:
14:dd:b0:2b:dc:ab:2c:52:aa:bf:b1:07:18:d7:42:
2d:42:21:15:5f:2f:a0:2b:9b:93:ac:35:ed:58:43:
bd:3b:50:14:5c:da:a0:a5:47:e7:11:16:56:e4:84:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:19:7B:07:BC:3D:4F:EA:2F:F1:1C:D3:31:9D:17:04:B4:41:A2
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:63:88:6a:ed:5d:b2:85:e1:61:0a:b3:83:22:5e:38:fe:
d7:ef:15:00:81:f6:b3:0e:2e:a1:81:9e:ea:a7:7d:6a:f5:d6:
31:e3:77:cb:10:ed:05:f1:f7:83:9d:36:36:84:3d:0c:80:ff:
c3:00:bf:5d:38:99:63:31:1f:37:2d:20:ae:b9:52:d4:ea:d4:
2c:cf:a7:3c:d0:63:3d:4d:0d:ab:e8:1e:79:3c:b1:6b:4b:3b:
a3:04:b7:eb:66:c0:28:4b:e4:48:49:0f:69:89:30:21:78:5c:
3a:19:50:b9:de:06:d5:82:20:3c:f5:df:f6:8a:58:70:5f:5d:
1d:23:d9:60:a4:20:57:78:71:ee:7c:e0:58:66:c8:54:3e:24:
b7:47:0f:af:97:26:38:6f:98:40:8c:bd:52:3d:3d:94:0d:b9:
f6:28:3c:a7:0a:12:e4:52:bf:0f:d3:c5:5c:6b:f3:37:e2:9a:
13:c4:33:a8:b0:aa:6a:5f:9d:1d:51:42:e7:5a:a3:83:9e:88:
af:5c:f7:4d:68:2d:f7:f7:14:99:bf:a2:4e:fb:97:bd:cb:6d:
60:6a:fd:44:2c:00:12:a9:e0:25:04:6e:92:59:56:13:16:4e:
a9:b7:de:ee:a5:87:9b:d8:a0:db:08:75:35:03:0e:2c:08:4c:
77:39:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:02 2025 by rpki-client