Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: z/bOCO7osjFOroFtOw5eneeY9EfdwdxDmJyC8IpQLzc=
Subject key identifier: 2F:E2:8A:85:EE:92:A7:EC:DB:A7:EA:E1:AD:DF:FF:2D:5E:F8:1C:63
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 0197605DBA5DB936220FD8F5504C054B39E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0EC4
Signing time: Wed 11 Jun 2025 19:00:44 +0000
Manifest this update: Wed 11 Jun 2025 19:00:44 +0000
Manifest next update: Thu 12 Jun 2025 19:00:44 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: iNjBb677YJuwgKjnr6J/CgAM1lTQxppOq+aVSZSPvY8=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:ba:5d:b9:36:22:0f:d8:f5:50:4c:05:4b:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jun 11 19:00:44 2025 GMT
Not After : Jun 12 19:00:44 2025 GMT
Subject: CN=2fe28a85ee92a7ecdba7eae1addfff2d5ef81c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:0a:94:67:8b:2e:f7:c6:c6:7b:21:cb:e4:
5f:48:91:02:1a:d1:14:43:d4:e3:2d:3c:86:d6:cd:
11:47:2c:c0:31:6a:fe:a7:b5:fe:fb:1c:46:be:c5:
81:ee:ea:a4:8d:96:27:36:4e:ca:bc:63:bc:e8:3b:
3c:ae:23:d9:e2:23:e4:f7:21:da:29:a4:1c:42:35:
76:e4:e8:d7:99:57:0e:a0:f4:a3:ab:2b:e4:52:72:
cb:dd:35:5c:ca:d4:5b:d1:02:6b:eb:77:2f:19:f2:
ef:0e:24:af:59:ba:03:0f:a5:b8:4a:b5:a4:39:97:
1d:b9:fe:f8:4b:26:9d:9f:7f:05:a1:4c:2e:5c:1e:
99:81:62:e1:d6:72:42:97:b4:3e:93:39:0a:57:ea:
d1:c7:c2:f8:11:40:6c:c4:8b:81:b2:27:28:86:b3:
d1:46:69:6d:3a:12:fe:1e:ac:4e:13:33:5a:76:e2:
78:dd:dc:0c:0e:aa:a2:e2:b9:37:d8:d9:aa:83:fe:
b2:cd:4e:ed:12:5d:18:ad:4a:16:4f:0e:eb:af:9f:
67:a2:b5:3d:78:11:fd:bf:f6:be:0f:d7:31:fe:0b:
52:be:42:11:91:0a:7f:94:ed:1e:0d:5d:a1:82:e7:
5c:3c:95:36:4b:b4:74:cc:06:99:4c:ac:ff:4e:ef:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:8A:85:EE:92:A7:EC:DB:A7:EA:E1:AD:DF:FF:2D:5E:F8:1C:63
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:39:00:00:fa:b0:fa:f1:ac:ce:b2:40:83:4e:26:63:55:9b:
37:71:91:58:d2:2e:27:87:8c:6f:7c:77:20:83:04:28:e5:a3:
ea:38:35:ef:a3:e4:7b:81:af:9c:57:be:e9:30:2f:eb:f0:1b:
b0:91:4c:b2:f7:22:1e:58:ba:1f:ec:2d:c5:bf:fc:55:4c:75:
3d:7c:c8:75:d9:0d:a4:8c:d2:80:5d:74:68:02:be:9a:a2:4d:
d2:3c:32:ec:79:4b:77:1a:5d:86:cd:2d:f4:7a:cb:8d:f0:5f:
d8:34:71:49:26:4f:5b:fb:83:4c:ff:65:48:8e:59:93:c0:0e:
94:95:35:79:65:07:35:27:51:3b:26:ad:11:67:be:c3:d1:7f:
f7:6d:65:3c:af:62:47:83:c3:96:91:d6:04:17:86:5d:9d:3b:
ea:1b:9c:50:17:29:1f:97:7f:2b:b8:3b:a1:47:5a:88:28:59:
bb:f2:03:7c:8f:11:16:31:c6:0a:75:dd:f4:de:fc:9a:ff:49:
71:f8:ad:50:90:f3:ce:63:58:6b:dd:aa:d8:6a:28:eb:82:f5:
9f:96:8a:8a:3e:b1:b3:4c:c0:01:38:76:af:93:7b:80:76:a3:
b0:38:23:c7:a8:e1:7f:9a:49:9d:e2:c0:53:4d:4d:43:b6:b1:
7a:f6:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:42:57 2025 by rpki-client