Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: UgKy5BZLpwBgAMiUH56Y5r7ZD7MZC9q9h04rKf65hNk=
Subject key identifier: B8:02:85:F6:1B:A6:A1:92:28:C1:F1:83:2A:79:3D:F8:64:B8:85:39
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 01974E204F00F56D966E0A53802A96A4428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 06:00:29 +0000
Manifest this update: Sun 08 Jun 2025 06:00:29 +0000
Manifest next update: Mon 09 Jun 2025 06:00:29 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: KzYIfXjuNzlnxDVoC672o2fRFlswl9O9PjRbZbPbOSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:4f:00:f5:6d:96:6e:0a:53:80:2a:96:a4:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Jun 8 06:00:29 2025 GMT
Not After : Jun 9 06:00:29 2025 GMT
Subject: CN=b80285f61ba6a19228c1f1832a793df864b88539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:3b:a0:e1:26:33:ed:2e:67:42:c3:f4:5e:
50:d7:c7:ee:2d:f8:bb:b4:05:74:94:c5:a2:b5:f7:
af:7e:1d:1b:3f:e1:b6:53:9c:3b:ed:fa:9d:ff:61:
75:65:5f:bb:f7:66:5f:a5:3c:e7:e3:62:41:88:8c:
3c:86:e4:0f:99:62:46:48:44:0a:37:38:20:c1:06:
5f:1a:81:1d:86:c9:f0:fe:df:7f:81:90:fb:a4:ec:
db:85:2a:df:52:70:90:6d:39:52:1c:4b:e4:cf:a9:
e0:25:49:5e:4a:9a:46:58:08:e4:36:55:8e:6b:17:
e1:4e:40:41:ae:5d:de:ca:f7:30:7c:d3:3d:cd:30:
4e:22:60:8e:a7:56:ec:c0:06:78:84:4d:76:2d:10:
85:05:d1:3c:1c:13:9a:8a:9b:ff:07:c1:43:35:25:
1f:7d:9f:9d:d2:59:38:a2:db:99:0b:60:0c:bf:2a:
bc:6b:c8:38:4b:d6:6b:1f:62:80:6a:b5:ae:25:22:
5c:eb:4c:24:5c:1e:68:42:96:d9:27:22:ed:1b:19:
5c:5d:1c:db:4d:27:c0:d6:93:f1:ec:af:45:7e:39:
09:00:d2:86:19:0b:96:c5:02:56:55:98:60:a6:7d:
86:5c:07:17:1f:15:f9:9c:c7:ad:15:70:0b:95:24:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:85:F6:1B:A6:A1:92:28:C1:F1:83:2A:79:3D:F8:64:B8:85:39
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:e2:9a:ce:1f:9e:ba:11:86:d6:03:24:30:78:59:78:27:
1f:d7:fa:19:f2:83:11:e3:81:05:25:05:05:63:04:f5:92:89:
a3:b0:17:ed:b1:b9:c9:7e:74:42:63:81:9f:cb:f8:44:d7:0e:
54:97:49:96:5a:e2:af:c3:e8:c3:f1:2b:29:f5:00:b7:26:7f:
3a:cc:fe:5b:2e:c7:a7:52:4e:70:bd:1a:70:f7:3d:ba:4f:4a:
62:c0:87:8c:15:a8:78:ad:e4:ea:10:a1:93:bc:cd:10:55:30:
0a:63:2b:cd:3f:41:5f:87:3a:90:72:78:9a:56:5a:21:99:0f:
dc:a1:18:0f:ca:c6:5a:af:b2:20:2c:2d:3e:03:c3:5a:1e:8c:
d9:01:7c:b6:a7:01:8a:07:66:0e:38:76:b3:38:50:13:0d:3e:
95:ca:cc:77:b4:0b:a6:17:1e:c3:3b:d0:2b:6e:0e:7a:b5:b0:
eb:c0:ab:48:41:a2:b8:1c:88:27:20:92:92:f5:92:19:0a:59:
0f:bb:5d:b3:b4:08:d6:d6:da:0d:ae:0e:dc:b3:12:e9:49:51:
c9:b4:28:23:36:1f:5f:54:97:5e:fe:19:43:9e:ab:54:19:00:
98:24:0d:3b:3a:f5:f9:a0:6c:db:1e:29:80:92:66:df:2d:5a:
00:47:bc:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIE8A9W2WbgpTgCqWpEKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy
MjRiNGYwHhcNMjUwNjA4MDYwMDI5WhcNMjUwNjA5MDYwMDI5WjAzMTEwLwYDVQQD
EyhiODAyODVmNjFiYTZhMTkyMjhjMWYxODMyYTc5M2RmODY0Yjg4NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFk7oOEmM+0uZ0LD9F5Q18fuLfi7
tAV0lMWitfevfh0bP+G2U5w77fqd/2F1ZV+792ZfpTzn42JBiIw8huQPmWJGSEQK
NzggwQZfGoEdhsnw/t9/gZD7pOzbhSrfUnCQbTlSHEvkz6ngJUleSppGWAjkNlWO
axfhTkBBrl3eyvcwfNM9zTBOImCOp1bswAZ4hE12LRCFBdE8HBOaipv/B8FDNSUf
fZ+d0lk4otuZC2AMvyq8a8g4S9ZrH2KAarWuJSJc60wkXB5oQpbZJyLtGxlcXRzb
TSfA1pPx7K9FfjkJANKGGQuWxQJWVZhgpn2GXAcXHxX5nMetFXALlSQ+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgChfYbpqGSKMHxgyp5PfhkuIU5MB8GA1UdIwQY
MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt
MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj
LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM7ims4f
nroRhtYDJDB4WXgnH9f6GfKDEeOBBSUFBWME9ZKJo7AX7bG5yX50QmOBn8v4RNcO
VJdJllrir8Pow/ErKfUAtyZ/Osz+Wy7Hp1JOcL0acPc9uk9KYsCHjBWoeK3k6hCh
k7zNEFUwCmMrzT9BX4c6kHJ4mlZaIZkP3KEYD8rGWq+yICwtPgPDWh6M2QF8tqcB
igdmDjh2szhQEw0+lcrMd7QLphcewzvQK24OerWw68CrSEGiuByIJyCSkvWSGQpZ
D7tds7QI1tbaDa4O3LMS6UlRybQoIzYfX1SXXv4ZQ56rVBkAmCQNOzr1+aBs2x4p
gJJm3y1aAEe84Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:48 2025 by rpki-client