Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: 6kJZofiuHzKMP1c0ssjCf64AJhlVIcGjN7TTFY+OrsY=
Subject key identifier: 28:8C:37:89:6C:12:CE:F7:B7:8C:9A:C7:FC:27:F9:B8:29:CB:09:CF
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 0199FBEB6BF2BD37CFA03A7AC683B2A214AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: 0153
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: DSMtJ8qTcM2+Y4CjGZGaBPKNo9PEPDcEDnF8iEmsXv8=)
2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6b:f2:bd:37:cf:a0:3a:7a:c6:83:b2:a2:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=288c37896c12cef7b78c9ac7fc27f9b829cb09cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:16:95:f6:0c:74:b9:2b:ed:2c:41:d3:42:ef:
71:1b:99:e2:bf:6d:16:37:58:c0:85:c0:f0:e7:7a:
76:eb:d8:62:6e:0f:34:ad:a0:46:ae:18:58:b1:3c:
d9:5a:43:b3:4f:df:a8:b0:85:8c:58:6c:5b:9f:6f:
0d:78:b5:7c:82:aa:5f:8f:37:22:5f:a2:a0:a0:ce:
36:7e:e1:0d:47:67:98:7b:82:2b:6b:9d:d0:8f:05:
66:78:a5:c4:ef:7c:17:ae:16:5c:13:3b:10:11:cf:
d5:cc:a5:20:c7:76:a6:98:12:46:3e:76:38:c0:de:
79:cc:4e:d5:4e:76:46:35:c3:92:15:c5:fc:c1:24:
70:77:db:63:da:27:c8:6f:10:1d:7e:c1:81:45:c2:
27:01:ef:9a:00:cd:ee:c6:a9:7b:95:42:b8:3a:d6:
a1:12:24:3b:e0:ef:65:55:c8:2c:1b:a2:92:97:f6:
57:ed:3c:95:a0:e8:46:7e:8b:68:f1:0d:b5:1e:d8:
a2:f6:98:b0:81:d9:36:7a:2d:77:06:97:44:2b:83:
de:3b:f5:2d:af:88:43:8d:e9:c7:87:46:30:55:92:
3d:17:8d:ff:27:ec:03:25:c8:e9:85:1c:dd:90:f6:
db:65:7c:06:bb:cb:b3:ac:00:6a:e7:6c:6e:00:b3:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:37:89:6C:12:CE:F7:B7:8C:9A:C7:FC:27:F9:B8:29:CB:09:CF
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d6:68:92:5d:87:51:5a:73:2a:c7:6e:89:ec:b9:03:78:af:
e6:6f:46:16:76:4f:d9:bd:d7:0f:93:d1:ff:ee:59:1b:cc:37:
97:1f:0d:ee:9d:78:9b:4f:16:02:de:d3:93:2d:2c:0b:a5:83:
3b:70:2b:e1:f4:c9:d0:5c:eb:e4:9c:3a:db:b3:1e:90:71:6b:
62:05:a3:6d:05:48:62:55:0b:d2:49:52:a3:87:df:9e:26:8b:
e3:b1:5e:76:54:9e:f6:49:6a:93:fe:cf:81:dd:36:23:f7:d1:
c4:d2:04:f0:f9:12:4a:d6:f8:f5:05:37:fb:d0:3c:a8:b0:88:
1f:fd:16:7d:54:f7:10:49:20:86:7b:25:96:05:a2:e3:fb:15:
cc:eb:be:f0:67:40:d1:a6:82:af:5d:ed:30:51:ad:1a:66:1e:
10:2d:8a:26:91:d2:3c:c3:a4:b8:ce:0d:7f:0b:38:84:83:b1:
40:93:ac:48:be:cf:04:cc:8e:fd:78:3b:8d:31:96:1b:f9:26:
ef:bb:65:60:c7:e3:78:49:aa:68:c3:fc:63:7c:8d:fd:20:6c:
09:07:0a:18:07:05:fd:39:a0:73:73:49:5d:ac:cc:fa:f8:1b:
14:98:0a:23:6c:3a:42:c9:0b:46:84:67:8f:bb:a9:60:be:59:
1c:b5:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:21 2025 by rpki-client