Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: RwHPY9UktOnZpYsUJo5kQZbhHt0FZJmm1PLgWu8Sp18=
Subject key identifier: FF:6C:B8:65:EC:0C:54:EE:F6:58:91:76:4F:ED:6D:55:04:88:1D:22
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 01974D7BFA10555DDBBB4877B50C639F90FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 11B3
Signing time: Sun 08 Jun 2025 03:00:59 +0000
Manifest this update: Sun 08 Jun 2025 03:00:59 +0000
Manifest next update: Mon 09 Jun 2025 03:00:59 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: QngGVId0BuGsQGCU/XKRjDUlmS7FqQQLyJVO/7vuKoo=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fa:10:55:5d:db:bb:48:77:b5:0c:63:9f:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jun 8 03:00:59 2025 GMT
Not After : Jun 9 03:00:59 2025 GMT
Subject: CN=ff6cb865ec0c54eef65891764fed6d5504881d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:3e:69:20:b4:51:9d:38:ce:47:a0:b2:2c:
13:c6:4a:81:48:59:10:51:6e:7e:68:b2:69:08:9c:
30:b0:82:cb:e7:ad:2e:fc:c6:97:32:d1:0a:3a:70:
0d:ff:98:83:c8:80:41:dc:fc:01:ef:89:4f:f4:8b:
5b:2b:bf:99:57:d5:11:25:3b:58:71:7e:e7:b2:dc:
67:d9:e2:0d:8c:f6:3a:f8:f0:fc:fa:6b:d4:84:6a:
e3:b9:a5:6d:9f:aa:0d:c0:c6:b5:15:9a:27:74:29:
ac:5a:fe:2a:c6:25:f5:e7:39:7e:3e:81:c3:f4:21:
57:ff:2b:73:61:eb:c5:db:c7:e0:51:1b:8f:f8:4b:
21:1a:9d:5e:25:52:aa:be:7b:9c:a2:e2:0b:5a:8f:
c4:b7:00:62:e3:2e:5e:21:29:1a:92:2b:18:25:4d:
2a:0b:5c:a1:59:a3:1a:32:83:c9:14:85:ba:28:33:
d7:cf:80:21:62:d0:9d:96:6f:32:d4:b5:2f:f9:98:
df:3f:e7:55:4f:5d:b8:51:37:33:25:30:ea:c9:7d:
b9:f6:b9:92:32:14:58:a9:86:98:52:76:05:1c:e7:
a7:67:ea:ec:b5:01:5d:fc:6d:72:2a:a4:d1:08:7b:
7f:b7:cf:6e:0f:ea:42:6c:3d:39:ca:55:55:4c:33:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:B8:65:EC:0C:54:EE:F6:58:91:76:4F:ED:6D:55:04:88:1D:22
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:99:8d:3a:e8:45:41:d0:7c:3c:f7:74:fc:58:4a:90:89:d5:
9d:61:20:32:67:ff:22:f6:64:f5:a5:5e:99:9a:ec:88:d2:8c:
32:c1:9d:13:a1:95:6a:09:9d:4f:55:9b:4e:4e:85:88:9e:45:
29:aa:43:31:14:1a:5e:c4:4b:a6:7a:be:11:7e:be:2b:7c:55:
0d:d4:ce:39:2e:a6:39:84:c7:8f:9a:4f:97:28:7b:cf:b0:4a:
ab:11:7f:10:fb:8e:6f:fc:f2:18:67:40:43:77:bd:1f:98:7c:
38:0e:36:a7:07:86:c4:ef:c2:1c:a6:23:7c:e0:1f:b8:94:d2:
d0:c4:28:40:8f:e1:39:c6:cb:f9:ef:5e:ca:bb:d6:54:23:51:
67:dd:61:66:1d:30:33:d4:32:58:52:59:56:02:ec:e4:20:fe:
6a:64:e6:79:3c:b4:49:73:a7:0d:15:ae:d0:4e:bc:da:36:32:
f2:ea:40:f9:bd:5b:08:2b:d5:f1:66:fa:8d:39:8a:53:99:5b:
42:79:ba:ad:97:ea:d7:69:54:b4:b8:51:a7:1b:b3:36:40:73:
34:ea:6f:79:66:e9:47:52:c4:3b:f4:90:80:78:a5:a3:73:2a:
93:1f:de:8e:84:58:36:98:14:5b:4f:3b:23:d6:1b:1d:94:94:
88:0e:21:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe/oQVV3bu0h3tQxjn5D9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx
ZjMzMTkwHhcNMjUwNjA4MDMwMDU5WhcNMjUwNjA5MDMwMDU5WjAzMTEwLwYDVQQD
EyhmZjZjYjg2NWVjMGM1NGVlZjY1ODkxNzY0ZmVkNmQ1NTA0ODgxZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujc+aSC0UZ04zkegsiwTxkqBSFkQ
UW5+aLJpCJwwsILL560u/MaXMtEKOnAN/5iDyIBB3PwB74lP9ItbK7+ZV9URJTtY
cX7nstxn2eINjPY6+PD8+mvUhGrjuaVtn6oNwMa1FZondCmsWv4qxiX15zl+PoHD
9CFX/ytzYevF28fgURuP+EshGp1eJVKqvnucouILWo/EtwBi4y5eISkakisYJU0q
C1yhWaMaMoPJFIW6KDPXz4AhYtCdlm8y1LUv+ZjfP+dVT124UTczJTDqyX259rmS
MhRYqYaYUnYFHOenZ+rstQFd/G1yKqTRCHt/t89uD+pCbD05ylVVTDPmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9suGXsDFTu9liRdk/tbVUEiB0iMB8GA1UdIwQY
MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt
YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl
LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJmNOuhF
QdB8PPd0/FhKkInVnWEgMmf/IvZk9aVemZrsiNKMMsGdE6GVagmdT1WbTk6FiJ5F
KapDMRQaXsRLpnq+EX6+K3xVDdTOOS6mOYTHj5pPlyh7z7BKqxF/EPuOb/zyGGdA
Q3e9H5h8OA42pweGxO/CHKYjfOAfuJTS0MQoQI/hOcbL+e9eyrvWVCNRZ91hZh0w
M9QyWFJZVgLs5CD+amTmeTy0SXOnDRWu0E682jYy8upA+b1bCCvV8Wb6jTmKU5lb
Qnm6rZfq12lUtLhRpxuzNkBzNOpveWbpR1LEO/SQgHilo3Mqkx/ejoRYNpgUW087
I9YbHZSUiA4hWw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:34 2025 by rpki-client