Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: jHz3sB6awmDI3Ph1Pjb9abX0kB44sFlvSlHhpGPOU18=
Subject key identifier: EA:AA:31:FE:D1:C3:FF:F6:7A:30:CD:EF:F4:42:30:2D:DB:1E:85:57
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 0197B6A143AD5C555CBA82B60BD96A90315D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 12B1
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: kUjShE+0sqGUhUDqYZ9ipyfjGqDkXkmFF3xswtvYTx0=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:43:ad:5c:55:5c:ba:82:b6:0b:d9:6a:90:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=eaaa31fed1c3fff67a30cdeff442302ddb1e8557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:b0:7b:bf:0b:ef:b6:a8:ae:dd:66:6b:02:
8d:59:1c:bc:f6:43:7b:12:9f:a0:e7:24:f3:3f:a9:
d9:93:49:0a:f1:b6:7c:04:4d:a8:74:6f:7b:07:b7:
2f:0e:ab:7b:02:ca:5c:3a:f5:33:5f:97:85:c9:dc:
4f:5c:79:17:23:5d:36:66:50:f6:8b:60:f2:14:2c:
a9:ad:17:85:e4:10:4f:b9:c0:c5:f5:6a:df:40:a1:
80:9e:84:57:12:f2:2b:32:f8:5d:4e:14:83:66:60:
6e:43:2f:f3:c6:c8:e9:d9:97:85:74:58:e2:3a:73:
56:cb:98:83:ce:8a:aa:24:f0:fe:7f:6d:69:44:f1:
a6:4e:7a:a4:3a:ad:cc:4f:bf:04:d0:91:95:c5:dc:
0c:17:94:13:58:af:28:cc:5c:18:27:1a:43:70:a9:
b4:4b:c4:52:54:34:d1:09:84:40:9b:e2:e2:5b:76:
06:61:ac:5f:4f:a5:41:31:02:17:11:74:1c:68:0e:
4f:15:d8:ae:3c:ea:f4:ae:74:b0:1c:d4:f4:ad:bc:
57:b4:4c:ea:17:25:dd:1e:4e:66:4e:99:73:7a:97:
8b:c7:dc:85:89:5f:29:5e:2b:7d:fd:e1:e3:d1:bf:
d2:0b:55:3e:4c:b7:f2:27:be:0a:14:ba:23:7a:c7:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:31:FE:D1:C3:FF:F6:7A:30:CD:EF:F4:42:30:2D:DB:1E:85:57
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:aa:d6:17:8b:4b:9f:56:bc:b4:91:62:8a:55:8c:6f:c6:77:
94:ab:fa:b6:ee:fb:e1:70:b1:6b:b5:4f:94:e0:12:c5:a1:a0:
4a:e0:48:a1:43:44:ac:23:4d:95:01:13:d5:78:80:3d:2a:e5:
0c:db:9b:a4:37:3d:88:cb:68:3e:53:9f:d4:ee:42:bc:5f:fd:
cb:ab:7b:c0:51:e2:e3:fe:dc:f2:28:39:b7:e1:3e:49:21:11:
00:9f:d1:61:b2:ad:4d:c1:8f:90:ba:b6:c1:a6:35:ca:7e:0a:
7f:5b:f2:a0:70:02:5d:1e:e8:f4:c2:ec:c1:57:7e:7d:af:75:
6d:75:99:c9:f6:30:a4:d3:07:b2:b7:78:e8:49:c7:1d:8a:09:
1c:d4:f5:9e:03:4c:8d:6a:00:55:5b:f6:e4:5f:af:c9:97:a1:
c6:bc:6a:f0:40:ec:a9:ea:6c:0d:a2:e3:76:7e:59:c8:e9:ce:
78:00:17:6c:17:0b:92:fa:1f:c8:6c:d7:6f:e1:d6:c1:ba:4e:
a1:9f:cc:24:87:18:1e:2c:df:5e:ac:3a:8d:dc:1c:4e:68:d0:
5f:a5:8e:67:75:50:b5:5a:bc:42:fa:76:b9:e5:cb:e4:0b:2e:
8b:5a:33:d5:2d:a1:a3:c9:24:ef:b3:3d:32:04:8a:c6:e8:6b:
91:78:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:12 2025 by rpki-client