Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: qUbwY6itu6BbtRNOXf5XDUSIk0MYIGQgcOvofNNBNhY=
Subject key identifier: 57:EA:79:F2:F5:D4:2A:80:F8:E3:B4:C0:59:97:B7:F1:0C:00:A2:31
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 01975C80F98D075CD0F8402D642B0CC3CBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0EC2
Signing time: Wed 11 Jun 2025 01:00:45 +0000
Manifest this update: Wed 11 Jun 2025 01:00:45 +0000
Manifest next update: Thu 12 Jun 2025 01:00:45 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: 7BT7yI+zUvuASD/chWE11Lx+fUkaWVtiCngCBR0qz/M=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:80:f9:8d:07:5c:d0:f8:40:2d:64:2b:0c:c3:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jun 11 01:00:45 2025 GMT
Not After : Jun 12 01:00:45 2025 GMT
Subject: CN=57ea79f2f5d42a80f8e3b4c05997b7f10c00a231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:4c:6f:24:d8:0a:e1:9b:9a:49:6c:62:45:
1b:1c:9b:6f:14:2f:50:67:bd:fd:23:54:e3:85:04:
83:3e:1e:3d:35:4f:19:65:66:81:25:a8:8b:a5:5e:
de:e9:96:67:5a:b2:a7:7b:11:14:4c:0d:42:6e:37:
13:f1:ba:59:a7:cf:92:77:4f:5e:70:53:08:c0:e9:
26:63:13:bb:ac:fb:03:45:e9:c1:31:f8:9d:79:e3:
e3:e7:00:0a:2e:e4:cf:03:00:45:90:9f:18:c8:f8:
ae:dc:86:73:5d:55:c3:db:d5:5e:f6:1a:02:d7:9c:
fa:47:8e:97:ec:6e:77:d8:fd:31:ed:3f:b9:b2:33:
37:6b:cc:95:de:79:ac:2a:cc:97:bb:2b:ed:39:ca:
12:a6:e3:02:e3:e4:5a:b1:64:2c:19:9c:af:9c:37:
6e:5d:34:43:84:98:7b:b7:f9:f0:53:42:67:ac:2a:
ab:33:02:cd:aa:48:0e:c2:94:14:97:72:87:14:7c:
44:96:61:9e:81:5c:aa:92:17:d6:32:e6:f4:92:0b:
c5:99:f7:41:19:0c:33:45:39:4d:39:f8:cc:bb:19:
65:f9:b0:fe:e2:c4:b2:13:09:11:56:bd:3a:8e:a2:
0a:9a:d6:cd:05:86:bd:10:7c:d3:08:fa:1e:c5:f4:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:79:F2:F5:D4:2A:80:F8:E3:B4:C0:59:97:B7:F1:0C:00:A2:31
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:fd:bd:aa:6a:2c:67:11:de:51:00:fa:f5:d5:25:43:01:
5b:d3:6f:a9:5f:97:81:5a:85:f0:54:a1:94:23:12:8a:a9:57:
8b:10:7f:10:d2:97:a2:87:f8:4d:32:0e:e8:01:77:43:ef:92:
b7:9d:41:c3:bf:85:37:a7:f8:2a:54:f5:45:ff:8b:53:fd:b7:
fb:a0:a5:b0:58:b9:13:b7:2c:e2:90:e8:52:9d:5b:0c:95:22:
91:e2:c5:53:9e:d2:53:c7:d9:3d:cc:24:1a:d3:ea:ea:7b:3c:
57:a5:50:da:e5:a2:6c:33:92:81:cd:d1:d3:b8:89:e5:ae:b4:
2d:79:a8:96:43:ec:15:fc:d6:bb:d0:e8:79:3e:5f:46:e2:b1:
3c:dd:b3:78:3a:69:a6:95:72:00:42:63:73:64:e5:ed:44:0c:
c9:8d:1a:6f:e2:61:dd:8b:f5:01:78:2d:73:54:c7:6e:a6:c5:
11:bf:e4:9a:6d:31:e0:8f:85:e1:45:38:e4:a8:9b:61:20:3e:
bf:f1:51:ad:4d:47:82:54:d9:3b:8e:bb:fd:aa:1f:17:aa:c6:
b0:b2:35:bf:fe:7e:c8:95:62:11:17:c8:0a:6e:08:d3:18:13:
06:4a:aa:9c:75:c1:62:45:f6:71:ae:c7:28:c3:10:0b:82:00:
6a:4e:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:21 2025 by rpki-client