Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: obhx3IlVFHJPT/P3rIAdf4rjwrixH7MgJK6u61SzpOk=
Subject key identifier: 5D:4B:B3:92:8F:AC:EE:DD:41:D7:09:91:55:AA:7A:B5:83:94:B1:46
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 0197C8DDF06EDD61F4554709729492733DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: 2B
Signing time: Wed 02 Jul 2025 02:01:17 +0000
Manifest this update: Wed 02 Jul 2025 02:01:17 +0000
Manifest next update: Thu 03 Jul 2025 02:01:17 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 1AvIoE1tYgPKy748Vsim5vvVZqdHFoWNtwutNEA9Vpo=)
2: gMzs6rirQQRZAjvshqXfjLlaNno.roa (hash: iunV7Ujyat6852tDhXRhK089VOiQcDUDyu6UKbazRYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:f0:6e:dd:61:f4:55:47:09:72:94:92:73:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Jul 2 02:01:17 2025 GMT
Not After : Jul 3 02:01:17 2025 GMT
Subject: CN=5d4bb3928faceedd41d7099155aa7ab58394b146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:df:40:ca:9e:8a:07:25:7b:c3:47:80:3d:
55:e7:a0:df:62:9e:08:77:03:ba:e3:69:5c:ad:0c:
d5:5f:d1:1d:e2:db:6e:17:c1:2c:63:ab:98:c0:f5:
2a:45:47:33:e2:cc:e7:93:c1:87:7d:1e:3f:ed:10:
43:f8:46:cf:25:88:f0:af:c7:ad:f2:46:a9:56:04:
5c:bc:f0:86:76:1e:60:90:b6:a8:ff:d0:b3:09:0b:
c5:ae:09:64:fa:f6:cf:31:35:51:02:63:e6:33:38:
9d:4c:ba:7f:2b:01:f8:23:7c:55:80:c5:cf:6e:5b:
2c:25:78:ca:14:4d:04:83:bc:14:99:4e:0e:5b:db:
d3:67:bd:eb:db:57:dc:0b:b6:fe:66:c8:30:03:88:
71:d7:36:63:d2:ea:c2:9e:c5:a9:6d:64:92:a6:88:
ea:7a:66:13:57:d4:16:40:1d:06:d0:c1:db:f3:af:
41:6a:7a:56:66:a2:ff:18:5f:87:cd:96:6b:0e:cd:
d7:df:b4:e3:50:d2:29:1b:8c:d1:4e:25:4f:e7:3d:
41:fc:a2:92:f4:ba:5d:15:d5:94:74:c0:b7:86:90:
a5:7b:b8:a1:e8:ed:d4:26:fb:a7:e9:11:fd:4b:39:
a1:30:a8:4e:f0:a1:ef:1d:af:06:68:c3:54:50:ad:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:B3:92:8F:AC:EE:DD:41:D7:09:91:55:AA:7A:B5:83:94:B1:46
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6f:54:ad:87:34:99:8e:f4:a2:c2:34:5d:29:dd:1d:c5:53:
3e:cb:8f:34:23:3c:76:ae:d4:9e:bc:f7:48:a3:80:dd:45:99:
15:0a:34:55:a8:7b:1b:90:55:bf:bb:f1:42:13:ce:32:99:ab:
ec:ed:1e:c7:e0:c6:ed:43:ee:2c:2e:bc:40:85:1d:ca:ad:45:
75:d4:c1:61:da:2c:90:1f:f6:c9:fe:3d:61:be:4f:43:d6:61:
10:48:af:fa:8f:ea:fd:d4:67:92:94:c6:5b:07:42:a0:9c:70:
ff:40:f7:8a:8f:b2:51:60:03:7f:9f:d6:7c:c4:03:bb:94:52:
d7:8c:f4:fc:f6:e8:b5:87:49:42:d1:68:d3:18:a5:0e:46:b9:
d8:1e:d8:83:8d:87:4f:d3:04:90:07:37:8a:95:e5:13:f3:86:
48:d1:36:09:2b:56:c9:df:19:4a:c5:76:26:66:5d:cf:3b:05:
a7:cc:ec:98:43:e4:71:5c:a8:9b:c6:34:41:fa:1d:da:72:a2:
40:b6:88:56:24:ff:b5:30:8e:ab:ab:f5:dd:aa:69:30:61:10:
1b:1d:bc:8b:26:96:8d:ee:17:50:ef:42:8d:03:c4:86:49:bc:
05:2f:16:20:5c:6f:c0:2e:bf:b3:0c:fb:ff:30:55:90:c2:20:
9e:dd:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:54:39 2025 by rpki-client