Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: NoEyMit2/AmjtEE30m9pFm8GGyhNm6xrNnQMgGIvu98=
Subject key identifier: 15:C1:FC:89:CF:05:E0:CE:F0:42:C9:B8:89:11:32:4B:9A:5F:56:4E
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 019921B1F599973BF7729C2C0A9597A11194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:02:14 +0000
Manifest this update: Sun 07 Sep 2025 01:02:14 +0000
Manifest next update: Mon 08 Sep 2025 01:02:14 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: 8AN8/Rw4sw5mGfKFvA3I0LninTW+bAj8rmqStD4Kd7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f5:99:97:3b:f7:72:9c:2c:0a:95:97:a1:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Sep 7 01:02:14 2025 GMT
Not After : Sep 8 01:02:14 2025 GMT
Subject: CN=15c1fc89cf05e0cef042c9b88911324b9a5f564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:c8:14:9f:f7:50:15:ff:8a:30:2f:c1:d0:
2f:26:17:f7:69:79:93:2a:29:1d:24:89:46:6e:4a:
88:b4:37:fe:1e:f4:08:bd:a1:2f:9b:15:25:cd:e5:
8a:33:64:c7:1b:6d:8a:dc:2f:65:cd:78:a7:f8:d3:
81:a7:87:57:4d:23:84:1c:10:6f:76:f6:09:81:78:
10:b8:77:16:59:78:ac:d3:50:b9:8a:82:ec:8a:b5:
d8:96:f9:a2:8c:8d:7e:9d:54:65:29:27:d8:e9:5a:
cc:3f:d4:8d:cb:09:2f:cd:68:e9:a2:56:a0:e5:ac:
79:1e:cc:6a:3a:0a:76:34:60:13:a7:dc:72:69:9d:
c2:dc:68:b3:08:38:dc:1a:bc:03:42:0c:19:58:a4:
68:49:50:ad:f8:61:27:8e:46:9a:dc:01:69:47:cc:
13:f8:28:da:07:7b:9e:a7:e4:6f:99:92:55:c1:e0:
74:51:93:64:86:b7:3c:3f:d9:42:7c:1a:b4:a5:5a:
cc:20:34:a2:95:7d:55:4a:f9:3e:ef:13:a7:70:9d:
11:13:07:bf:e1:35:5a:19:21:91:87:97:f8:59:c9:
c5:b8:05:7d:96:72:bc:93:6c:71:27:b4:f2:5c:f0:
8c:42:44:c0:10:58:4a:dc:60:d8:b3:f7:d7:cf:dd:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:FC:89:CF:05:E0:CE:F0:42:C9:B8:89:11:32:4B:9A:5F:56:4E
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:01:d5:52:a2:f7:d7:05:a9:d1:ae:02:04:97:c6:8f:6f:f1:
3a:94:44:dc:f0:27:d5:1c:92:43:67:94:e3:b9:93:a3:db:0e:
b3:d0:72:42:53:b3:eb:31:41:af:de:0e:2e:17:39:37:d5:36:
54:46:49:c5:4e:aa:71:a1:b5:97:56:93:ee:36:66:1e:dc:a0:
b4:9f:8a:4d:b0:e5:b6:37:56:68:9d:c4:03:10:7f:f8:d1:a1:
af:6e:96:5c:0a:50:f1:f2:4d:04:b5:69:41:2e:9c:c6:3d:3c:
f3:9e:77:40:a7:57:42:ab:61:5c:7e:87:13:98:5d:f8:26:61:
e5:a1:86:11:ca:1c:9c:48:10:6c:c2:68:0b:22:19:48:29:0d:
4e:f8:a9:d1:d5:c7:a9:5e:59:51:df:3c:5b:71:3b:12:cf:e0:
c6:7b:0f:c6:5c:a4:88:9b:2c:e6:00:22:34:ce:fe:b2:42:0e:
75:93:f1:23:c4:c6:dc:e9:8a:48:07:31:a2:c7:48:92:1c:e3:
d5:a1:a4:a1:c8:36:f0:7c:9a:51:cc:9b:70:d8:60:1f:66:b3:
0c:fb:b1:f9:3e:bd:37:2d:48:fa:f9:3d:c1:ab:bf:a5:23:c0:
8c:76:5f:02:1f:f9:72:ac:09:58:30:8f:25:33:0c:e5:b1:42:
cb:e5:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:01 2025 by rpki-client