Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: m7esg8H3ICn9xag/jyv5Pp6OYeF05klsSQt8AzHT7+4=
Subject key identifier: 0D:69:3F:E2:69:67:5A:C0:E3:A7:C0:07:95:35:63:30:5E:38:8E:42
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 0198D472DDBEAFD4CA3EE9D9F302DC7DC64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: BA
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: ghZeOQEeUC7xf993VbNq/xIGYiWFQp9Q+JAp8jAEP7M=)
2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:dd:be:af:d4:ca:3e:e9:d9:f3:02:dc:7d:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=0d693fe269675ac0e3a7c007953563305e388e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:a9:bf:e9:2f:24:93:ec:99:ea:15:bd:fa:
77:d9:35:12:66:4a:af:cb:ca:6b:2d:42:6d:b9:47:
cf:1e:3f:92:15:e0:54:7f:34:b3:5e:20:36:1b:64:
34:12:6f:93:25:27:00:72:ca:66:d9:8b:c4:d2:be:
85:7b:04:bb:0b:16:43:c9:c7:f7:af:89:8f:b7:70:
90:5d:66:b6:c3:e4:21:6f:83:7b:e4:3d:1d:f9:38:
b5:94:78:45:e8:f4:e5:9f:c4:74:a1:dc:92:08:24:
6a:3e:89:31:4d:73:2b:84:63:5d:58:59:16:fc:42:
2d:44:0a:19:92:6f:85:af:c5:07:74:23:99:9d:0c:
5e:c3:ae:dc:0d:1c:6c:3b:8b:4e:06:a8:f9:eb:ba:
9b:23:59:14:0f:48:f2:05:58:b9:a9:53:cc:44:43:
22:61:13:fd:98:c0:0f:a6:f6:4f:6d:3c:17:5e:bf:
7d:bd:e1:98:9f:c5:cf:6c:ed:1a:e7:b6:8a:45:aa:
ef:fa:f0:03:47:4a:c0:5e:84:70:c6:a7:06:d4:e0:
86:23:61:3d:bb:e8:17:a5:d1:d3:3e:b3:32:d6:1b:
dd:50:62:a2:22:c4:b3:ef:62:5f:b4:53:d1:1f:c1:
56:af:d3:72:dc:74:c2:72:0e:57:2a:7d:08:c0:ee:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:3F:E2:69:67:5A:C0:E3:A7:C0:07:95:35:63:30:5E:38:8E:42
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:9a:e7:63:53:7d:a2:c8:18:66:d0:16:31:c9:88:13:54:
a9:7d:07:fa:f7:a1:f6:65:13:d6:5b:d1:7f:35:fa:85:44:3b:
f1:d7:7f:63:45:9b:d7:42:2a:17:df:55:8d:db:bf:7d:bc:8f:
36:d1:b5:01:89:71:91:ae:4a:6f:20:af:af:dc:99:82:15:52:
6a:07:c7:c5:cf:0d:b3:98:87:bc:54:f8:76:88:2e:65:22:79:
59:82:f6:a5:c8:59:18:b4:cb:92:f2:db:4e:c0:25:d7:e6:40:
5c:08:34:82:6f:15:21:55:1e:35:08:7c:2c:d3:1f:c3:fc:0b:
6d:29:56:8e:70:bd:04:d2:10:d6:d9:9e:d4:f0:1a:28:80:fd:
7c:09:22:45:2b:51:db:49:3e:58:75:79:33:df:e7:a1:16:44:
20:23:03:49:fc:fc:9f:4a:e8:28:11:c1:e7:aa:ad:38:c1:9b:
a0:c2:2a:9d:1f:7a:b3:81:d4:00:23:ab:61:84:71:01:38:08:
40:40:b4:69:2a:44:8a:5b:f4:b6:43:12:cc:57:5d:1f:2d:7c:
3f:c4:7c:54:bd:f4:da:60:01:3e:8e:f3:b5:99:01:1a:9a:77:
bc:c9:60:f8:46:45:77:35:84:0c:35:be:3e:cb:71:77:ed:fa:
96:fb:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:34 2025 by rpki-client