Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: QuelL25otnkhQwZsJoaUIqmM1G/dydjekeipoDDv0Ys=
Subject key identifier: 57:64:98:2C:04:2B:DF:F3:40:D1:E7:00:2D:2F:5B:A2:D7:F4:77:23
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 01974E2038ADEE4EB376245AC7E3B82FB1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 127B
Signing time: Sun 08 Jun 2025 06:00:23 +0000
Manifest this update: Sun 08 Jun 2025 06:00:23 +0000
Manifest next update: Mon 09 Jun 2025 06:00:23 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: CGDzmaFqHm0JOxVTtKeQuHUfqfd55hwk2RIP6E/xLvY=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:38:ad:ee:4e:b3:76:24:5a:c7:e3:b8:2f:b1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jun 8 06:00:23 2025 GMT
Not After : Jun 9 06:00:23 2025 GMT
Subject: CN=5764982c042bdff340d1e7002d2f5ba2d7f47723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0b:8b:7d:c0:de:27:45:08:c3:15:41:60:e8:
c3:1d:14:ec:a1:b2:e8:7e:34:09:58:b0:73:aa:13:
77:24:f2:48:32:ee:8f:47:8e:0f:21:25:2d:8c:db:
9c:34:4a:2a:73:46:1d:fe:a3:9d:b9:fe:47:83:23:
26:a2:1b:5b:04:a6:9b:2e:f3:35:ea:49:e3:b0:4e:
8b:8d:bc:33:03:90:85:0a:04:be:9c:61:fb:11:09:
13:02:2e:bf:a5:92:98:e9:0c:6c:af:a0:74:90:62:
d5:19:81:69:dc:8b:4f:8a:64:96:5c:b5:c5:99:09:
fa:b9:ec:75:7a:da:4e:f2:04:df:6d:29:80:7a:99:
57:db:16:d7:56:92:5a:ce:e7:fe:65:e7:52:67:79:
2b:65:40:c3:36:db:0c:21:f5:ec:dd:07:80:37:90:
55:0f:c2:4b:46:36:89:12:46:4f:d4:94:be:df:01:
c5:93:33:9a:0f:a3:e3:e2:59:fc:6a:79:b5:e0:09:
44:85:09:1f:25:04:d6:87:ee:89:c7:8d:f1:83:db:
1d:1d:6e:2d:d7:3f:ef:bb:d9:00:64:fa:bd:e8:84:
19:d9:c9:15:6c:2e:20:61:83:c7:04:53:94:06:fa:
41:b6:a9:e6:f6:82:7d:35:94:60:19:00:9a:7e:49:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:98:2C:04:2B:DF:F3:40:D1:E7:00:2D:2F:5B:A2:D7:F4:77:23
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a0:08:6b:84:99:9c:05:7e:d2:b6:9c:cb:da:17:c7:2c:34:
bf:e4:08:9c:7b:87:7a:df:c0:c8:03:b6:9a:24:7e:ca:f3:fa:
6f:38:4c:c6:94:63:3c:3a:40:80:16:60:a3:06:78:11:cd:8f:
91:0c:b8:97:b7:2f:4b:b1:6e:ee:b3:fb:24:8f:5a:1c:e6:eb:
fa:92:e8:dd:fe:23:be:0a:70:11:81:a6:fb:f6:39:8a:22:82:
c7:55:ce:cc:71:74:16:65:05:8a:80:8c:96:6c:63:8f:c3:da:
f4:d3:f4:26:90:a6:20:ab:16:e7:4c:0d:8c:ef:6b:77:46:00:
89:a8:92:97:48:89:6b:89:2b:a1:c1:82:06:5a:eb:4a:5e:5f:
c4:85:53:40:9a:8a:c7:cc:cd:57:11:3c:05:27:de:dd:62:4f:
4f:76:f3:cd:2e:de:06:a1:4e:31:7c:65:df:18:b8:12:f4:ae:
e4:0d:2f:7a:57:af:fc:18:ad:a9:db:aa:79:4f:0a:af:72:75:
1e:35:1a:c0:1c:e1:90:b7:aa:6a:fd:8b:e7:24:2b:a9:e9:82:
39:0b:d1:32:01:23:95:09:a7:a0:44:f9:1b:f8:9c:a0:08:4d:
88:49:b6:28:cb:29:a8:bd:b0:ea:fa:ef:f8:f7:c9:0a:39:69:
bb:b8:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:23 2025 by rpki-client