Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: CUTNOLvgm6nl1n88OMAuSWY96xJbJ7IqHHKFiUkfPmg=
Subject key identifier: AE:21:00:F8:FC:E7:67:FE:FB:6B:0B:49:AC:2E:66:4A:5C:0B:1B:D1
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 0198458962DC4A9FFAFB895CD33295BCD7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 07:01:28 +0000
Manifest this update: Sat 26 Jul 2025 07:01:28 +0000
Manifest next update: Sun 27 Jul 2025 07:01:28 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: 1dTcioTPQBl37VC1Nx3AIbmLlxKLcB14ZOMNBeVzFW8=)
2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:62:dc:4a:9f:fa:fb:89:5c:d3:32:95:bc:d7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Jul 26 07:01:28 2025 GMT
Not After : Jul 27 07:01:28 2025 GMT
Subject: CN=ae2100f8fce767fefb6b0b49ac2e664a5c0b1bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:73:87:de:ed:6c:21:ba:2a:20:af:fb:e6:
67:67:62:f6:26:96:cc:15:29:b4:a0:29:32:9b:60:
f4:87:85:16:78:76:bb:01:d7:68:ec:b4:2b:b0:50:
ac:70:10:ed:c4:b4:3b:66:a4:12:91:51:49:67:a5:
69:19:1c:29:76:d9:4b:84:84:60:65:c1:1f:31:8f:
51:0e:f7:5a:25:71:5d:39:68:80:97:9f:2c:17:46:
e3:47:44:61:c2:1f:d1:e8:66:56:ce:98:39:49:0e:
d8:ad:11:d9:e9:5a:e9:32:62:16:a4:9a:bf:3c:1d:
3a:be:65:8f:e3:b5:b5:91:40:27:5b:e3:88:2f:7c:
09:78:22:f9:f5:ca:dc:03:21:99:a1:b3:31:20:e2:
09:b2:e7:d0:dc:0c:60:11:ba:de:0b:52:a1:e7:21:
e2:19:30:be:1f:8c:fe:da:5a:f5:07:5e:99:5e:60:
8c:eb:11:af:97:91:51:61:9a:1b:df:4f:87:43:64:
2f:88:76:ea:62:3d:ff:21:12:c5:a4:7d:2f:f0:96:
62:41:b2:81:a6:8d:95:ff:d4:ca:13:80:5c:39:8f:
75:47:6e:5e:0f:2a:17:75:54:3b:5b:7e:d9:9a:40:
ed:8b:25:a7:7c:ff:0c:db:ce:13:bd:56:93:76:a3:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:00:F8:FC:E7:67:FE:FB:6B:0B:49:AC:2E:66:4A:5C:0B:1B:D1
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:59:1b:b1:89:dc:53:2a:9a:7a:aa:38:f0:63:1b:81:6a:
a7:a9:8f:37:40:9a:51:5c:f8:9e:b6:86:bb:62:f6:95:9c:8d:
2d:55:00:d5:a5:eb:4d:6c:5b:ee:28:f8:9d:fc:7e:15:07:30:
99:f5:25:a1:21:d0:7e:df:ea:d7:1b:e7:13:24:e6:82:80:9f:
3e:fa:ab:6f:28:b8:d0:eb:48:df:54:d5:54:c1:f2:3c:4b:36:
1b:e9:e3:02:60:41:00:c4:c6:13:15:a4:9b:ad:10:4d:11:5f:
3b:e2:b2:49:94:09:d1:87:da:7d:65:7e:22:cd:e8:6b:84:40:
59:e4:c3:d2:50:36:6e:86:ca:60:6e:ff:ea:0a:1d:e9:67:00:
af:9b:ae:dd:ff:58:62:7b:fd:dc:1a:cd:f8:a4:90:9f:c2:72:
6c:cc:65:33:cd:43:f5:f3:ef:47:3c:97:14:4c:dd:73:6f:c8:
72:bb:05:17:e0:45:a2:50:ef:89:ff:8b:54:6f:92:a2:b8:1a:
f3:ef:dd:d1:94:8d:4f:10:06:92:5d:e4:d5:f0:5b:38:79:40:
60:75:a9:37:fc:08:cb:3d:d7:38:ae:c4:65:fc:e6:dd:ba:f5:
df:aa:f5:d3:2e:0b:e5:a9:cd:71:3f:2a:19:18:99:ff:d6:7a:
c7:d5:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:43 2025 by rpki-client