Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: MrFZJBxVwP5KRnuHRsqJ7sQ2haavythCWNz+o+WNAeo=
Subject key identifier: 77:0A:AC:D0:B9:33:9F:72:47:C8:D2:A0:43:0B:C4:B6:32:4C:97:E5
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0198D66112FB24A3FE80C64B57EF662303B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: 3fgaZyQrGVBYq84/q294ZOtuTiIgzn42mBvnJhcNNJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:12:fb:24:a3:fe:80:c6:4b:57:ef:66:23:03:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=770aacd0b9339f7247c8d2a0430bc4b6324c97e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:f4:bf:a6:e3:ed:9a:5e:6d:97:c9:43:57:
6f:ba:8e:68:15:cd:60:33:b9:2a:7f:ec:9d:69:14:
d8:01:78:e9:96:43:d9:77:f9:2e:23:82:eb:77:0e:
1b:87:10:8a:da:5c:76:e8:a2:41:8a:fb:d7:54:93:
4a:54:97:99:fa:ed:a0:ee:9f:c3:8d:ee:84:05:ee:
46:9e:e2:96:99:68:5b:64:c5:c6:9d:36:02:e1:5c:
29:0f:70:26:93:f8:7a:f1:93:f7:fd:a6:1d:f0:2d:
9f:54:f5:39:73:16:dc:4f:fc:03:fc:60:0f:d5:2f:
ad:1b:cf:1a:b7:7a:ce:d4:48:3e:06:18:3a:f0:d0:
d5:68:1b:bb:67:b5:06:4a:8d:57:16:b9:f8:e9:cb:
9f:22:f9:aa:f6:4a:89:fc:4d:f5:0f:e2:c0:18:95:
bd:2d:68:90:12:61:3d:69:b6:1f:f2:fb:a3:47:0d:
51:fb:67:20:21:07:ff:4d:5d:0b:5e:21:ff:bd:f9:
5c:32:61:f5:25:b9:df:84:f7:5f:2c:89:20:99:d0:
c8:b9:40:cb:51:cc:3c:06:63:f1:45:ff:43:ca:41:
12:b6:27:62:84:92:24:cc:a3:e6:0e:bc:46:1a:df:
af:14:17:63:6a:d6:03:23:c4:23:36:2b:51:04:fb:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:AC:D0:B9:33:9F:72:47:C8:D2:A0:43:0B:C4:B6:32:4C:97:E5
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:bc:c1:59:df:5e:40:65:f0:71:43:a1:0d:17:2a:ac:28:
92:dc:b2:6a:b6:ba:f6:4d:94:aa:ea:78:1f:98:eb:4a:b2:27:
7e:b7:76:e3:cd:17:2e:65:bd:d8:c3:82:2a:35:6f:bc:45:a3:
d9:fd:7f:99:b5:91:5e:60:80:e5:73:f1:3d:84:b9:a8:a9:b0:
a1:af:7a:d2:5d:fc:a2:22:03:0b:0d:3b:be:c6:47:ef:86:ec:
db:18:a3:eb:d1:46:c9:dd:f9:fe:4f:aa:d0:3e:71:76:63:3e:
03:6e:8a:92:73:05:6c:a3:93:2c:45:3b:e8:e5:ab:03:c5:fe:
0f:1e:5f:da:b7:0c:8d:1c:d2:94:f5:c8:6b:c6:b8:18:64:b9:
cb:71:49:34:c4:29:c6:41:79:3e:45:c6:98:7d:09:6c:3a:14:
7f:81:74:0d:f1:b9:5e:1a:42:52:5a:67:42:45:28:b1:51:7e:
56:0d:05:a9:d1:78:02:47:7b:f0:86:d4:30:a4:22:eb:f9:63:
5f:0c:a6:e5:29:e0:41:e3:d4:07:88:f2:b8:b6:d6:d2:88:8b:
9e:8d:4a:cc:ff:bd:af:04:78:65:0e:58:00:14:c1:6d:93:13:
ee:a2:17:b4:ca:30:6e:86:7f:fd:bb:9d:64:00:9b:2d:a6:2d:
b9:45:6c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYRL7JKP+gMZLV+9mIwOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwYTgwMWNmZGI0YjU4MDM1YTVkMDc1YTI5MDRiMmVh
YTVmOTEwHhcNMjUwODIzMTAwMjIyWhcNMjUwODI0MTAwMjIyWjAzMTEwLwYDVQQD
Eyg3NzBhYWNkMGI5MzM5ZjcyNDdjOGQyYTA0MzBiYzRiNjMyNGM5N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iz0v6bj7ZpebZfJQ1dvuo5oFc1g
M7kqf+ydaRTYAXjplkPZd/kuI4Lrdw4bhxCK2lx26KJBivvXVJNKVJeZ+u2g7p/D
je6EBe5GnuKWmWhbZMXGnTYC4VwpD3Amk/h68ZP3/aYd8C2fVPU5cxbcT/wD/GAP
1S+tG88at3rO1Eg+Bhg68NDVaBu7Z7UGSo1XFrn46cufIvmq9kqJ/E31D+LAGJW9
LWiQEmE9abYf8vujRw1R+2cgIQf/TV0LXiH/vflcMmH1JbnfhPdfLIkgmdDIuUDL
Ucw8BmPxRf9DykEStidihJIkzKPmDrxGGt+vFBdjatYDI8QjNitRBPurRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcKrNC5M59yR8jSoEMLxLYyTJflMB8GA1UdIwQY
MBaAFGnrCoAc/bS1gDWl0HWikEsuql+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzkt
MDBmNTZmNDcyMWMyLzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzktMDBmNTZmNDcyMWMy
LzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9u8wVnf
XkBl8HFDoQ0XKqwoktyyara69k2Uqup4H5jrSrInfrd2480XLmW92MOCKjVvvEWj
2f1/mbWRXmCA5XPxPYS5qKmwoa960l38oiIDCw07vsZH74bs2xij69FGyd35/k+q
0D5xdmM+A26KknMFbKOTLEU76OWrA8X+Dx5f2rcMjRzSlPXIa8a4GGS5y3FJNMQp
xkF5PkXGmH0JbDoUf4F0DfG5XhpCUlpnQkUosVF+Vg0FqdF4Akd78IbUMKQi6/lj
Xwym5SngQePUB4jyuLbW0oiLno1KzP+9rwR4ZQ5YABTBbZMT7qIXtMowboZ//bud
ZACbLaYtuUVsQw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:20 2025 by rpki-client