Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: mrSAa6C6Jjc/3seeJw02Hb0JZQ0/s040Gf/DVn4KSF4=
Subject key identifier: 46:FB:65:CD:58:4B:0F:25:C3:17:FF:31:66:89:1E:C5:6E:98:0E:22
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019749D5BA121793C7E5BD79BF30E4E52861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0AE8
Signing time: Sat 07 Jun 2025 10:00:32 +0000
Manifest this update: Sat 07 Jun 2025 10:00:32 +0000
Manifest next update: Sun 08 Jun 2025 10:00:32 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: 0BaojnqIoZyftA6oYL627+GJ3rhvMws5CDWjz8CpmTA=)
2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ba:12:17:93:c7:e5:bd:79:bf:30:e4:e5:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Jun 7 10:00:32 2025 GMT
Not After : Jun 8 10:00:32 2025 GMT
Subject: CN=46fb65cd584b0f25c317ff3166891ec56e980e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:87:0e:d7:41:64:58:06:70:a6:f7:3c:ba:
9b:70:a4:df:f4:4e:bd:af:ec:9b:21:35:da:ac:39:
82:1e:f9:e9:ca:f3:cc:ba:a9:64:1a:b5:fc:96:cf:
aa:63:d9:92:21:e8:b5:b7:8b:dd:ad:30:81:46:ba:
43:e7:7a:fd:5b:7b:b6:c9:97:16:ae:5a:02:32:30:
ee:6a:89:b9:6f:f5:ed:7b:e1:63:35:d9:f8:65:27:
63:00:f4:2f:27:ab:b2:4e:49:38:8d:82:13:ff:6b:
bc:eb:8e:55:58:4b:ae:b1:30:e5:8b:18:da:7a:d3:
98:e1:1b:73:54:68:93:80:49:c6:b4:22:9f:c5:c7:
56:b7:3e:58:ac:09:7a:63:ef:2e:c2:92:77:7e:cb:
95:bd:cf:47:f3:ea:0a:b8:7a:18:80:7c:9e:62:bb:
9c:b8:cf:20:c4:71:2d:86:e6:1d:d1:d3:79:1f:83:
d1:36:64:7c:8d:0d:4d:26:a6:13:0a:db:12:f6:25:
e4:2a:60:02:dc:8c:db:40:81:10:65:58:d8:98:dc:
02:42:b0:1b:1a:86:a7:bd:c5:e7:e9:c6:c2:7f:ed:
86:04:41:cd:c1:e2:e6:ab:a4:55:0d:9c:80:69:36:
d5:98:69:e4:9e:e1:8f:2e:ac:65:77:17:c0:de:6f:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:65:CD:58:4B:0F:25:C3:17:FF:31:66:89:1E:C5:6E:98:0E:22
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:62:79:fe:04:cf:12:cb:77:d3:c5:35:1c:82:a4:2e:14:
19:10:7b:c9:57:0e:6e:45:7b:ad:48:b5:a3:e4:41:ea:75:2c:
27:14:7a:06:54:24:78:8e:32:67:af:e7:eb:b8:e4:86:4e:a7:
38:de:40:ca:34:33:7f:c0:47:13:e4:8f:ed:2b:2b:47:56:1b:
32:db:53:cc:1d:56:a1:d6:6a:3d:ff:45:02:02:57:03:0a:5c:
d5:b6:48:b5:dd:ce:21:43:9c:30:16:06:47:0b:03:c4:7a:3d:
8d:53:bf:21:7e:8d:32:85:14:a9:24:92:81:b8:7f:13:2c:5b:
93:d9:82:19:aa:25:26:58:ae:6b:19:7d:cd:2d:9a:d0:bd:8a:
05:6f:bb:83:4e:6f:ee:ee:66:24:49:fc:28:75:df:a0:26:e5:
a3:3f:8f:14:6b:15:16:27:d8:5a:d7:cf:e8:ee:b2:01:86:39:
88:8b:71:1a:79:d0:47:55:95:1d:c4:3f:74:b9:1d:5a:2d:54:
94:14:2e:be:7f:10:40:90:c9:66:a3:36:86:b8:fd:64:8f:3f:
90:19:ad:b9:b9:24:ff:01:fe:96:07:53:e5:1a:ce:95:f0:c0:
18:c7:02:13:be:5f:ea:27:45:d3:93:f6:b2:c3:8a:c6:4e:d3:
1a:f9:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:23 2025 by rpki-client