
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: IGgqX6vIkeghiYz93bp7s8Qd2ho2RuXao63T9wzVguY=
Subject key identifier: 7E:FE:6D:A0:96:F2:01:47:0E:84:4C:25:2F:01:E8:44:62:F3:AF:A8
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0199FBEA929BBB9674187D94BA075F8D70CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: 9zSRtC91SxySMQX2vrDFbCb5vCvtunKIJ13+4yUYrR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:92:9b:bb:96:74:18:7d:94:ba:07:5f:8d:70:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=7efe6da096f201470e844c252f01e84462f3afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:6d:5c:a9:ce:f2:dd:6f:d5:79:85:1b:69:
50:71:e3:8e:35:96:f9:56:6f:4f:9f:63:aa:eb:77:
17:67:3d:9f:7c:0d:e6:d7:32:5a:ea:98:76:e4:fb:
8e:2f:59:f3:65:2a:0a:74:0c:9b:e7:99:41:b1:18:
75:d2:00:0d:4e:a9:6f:ed:f9:7b:43:c7:79:9b:b5:
06:9b:ee:2c:d8:15:0d:37:bd:ac:af:0a:7a:48:e7:
06:a4:1d:f8:53:c3:82:aa:5c:52:d1:5f:de:5f:19:
a6:2a:7d:4e:65:03:8c:7e:f4:88:f3:5e:c0:49:cd:
42:69:2d:e6:7d:fb:04:af:a5:64:0f:4e:6a:5d:90:
45:ca:10:a0:c0:80:e8:01:9e:e2:a1:7f:b1:98:9c:
86:3d:19:40:f0:5a:5d:f6:0c:ec:1f:df:55:8e:1a:
0b:0c:74:39:d1:23:39:e9:74:46:16:cc:52:29:b8:
3d:fa:5f:52:02:f6:d7:39:61:32:50:e4:4a:7f:0a:
a7:aa:35:1b:18:62:e0:ec:c7:94:47:e6:f0:f2:9b:
89:75:40:60:57:54:76:d3:3e:16:ed:c9:06:62:d6:
90:13:b9:c5:07:ab:d3:cb:1d:28:ef:8e:93:8a:fa:
96:ff:f7:15:b7:a4:e1:b5:90:5c:23:bc:d6:e5:9e:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:6D:A0:96:F2:01:47:0E:84:4C:25:2F:01:E8:44:62:F3:AF:A8
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:4f:e3:c1:0e:70:62:fb:63:0e:9f:76:a5:97:33:c7:0b:
8b:5e:5d:25:a8:95:75:06:f1:df:bb:0d:38:4e:bd:50:9d:71:
5f:45:64:8a:0f:bc:28:85:80:fc:1c:7a:fd:fc:b3:f5:b7:e8:
18:01:e3:69:a2:7f:65:d8:69:bc:36:66:59:a7:16:53:9f:c3:
60:0f:f9:cf:51:17:1b:d0:8b:40:d9:25:cb:9b:81:69:df:c1:
3e:ee:90:f7:87:74:4f:15:20:3c:7a:2b:2b:a0:1d:56:a2:1d:
a1:dd:8f:05:00:b6:62:8e:be:3f:8c:30:66:5e:f0:91:8b:51:
06:cb:fa:9b:6f:60:ef:1a:c1:6f:ea:80:e3:9e:98:c1:ac:71:
06:d6:c6:db:5b:9c:bb:e4:88:31:f6:28:60:58:27:10:11:41:
b5:c5:3e:b6:c0:b8:c7:b6:2b:32:7f:13:18:57:01:4e:9a:8a:
39:32:7a:f3:81:a6:a5:df:93:42:a4:53:ea:36:cb:46:51:be:
cc:7f:b6:94:ab:21:df:ee:67:91:4d:3d:5d:62:fe:8d:13:a3:
82:12:8c:bf:2b:40:26:ee:29:69:40:1d:99:bd:1d:33:43:16:
88:24:06:ff:18:72:0a:69:f0:25:53:c9:96:32:c6:ba:15:60:
3a:0d:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:03 2025 by rpki-client