Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: MZx9qrkC2VPMRIdYAv84+l6aXs/qHCLJUfNCA9rdLZ8=
Subject key identifier: 25:EB:85:70:BD:F0:61:47:1F:53:0F:38:6D:36:44:BE:C6:DB:06:17
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 0198D583D1E2FF915BAAB354090E6E2A9CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 127E
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: b2stxWzIv9cOjnN8uUsAcMO6EJGj0vI2Bv9eDlMGMlM=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d1:e2:ff:91:5b:aa:b3:54:09:0e:6e:2a:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=25eb8570bdf061471f530f386d3644bec6db0617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:0b:01:ac:c1:85:0f:9d:39:ee:2a:af:11:
64:20:d3:f1:64:a5:cf:e7:64:b7:ce:65:24:36:b9:
57:de:f6:4c:4e:65:da:1f:be:b1:4a:8b:3c:6e:4f:
68:2a:e8:ac:12:c8:7b:be:18:2f:01:29:f3:82:c9:
eb:1f:7b:4f:38:f2:e8:92:7f:94:2d:ce:2c:fe:51:
44:c6:bd:71:a6:29:50:18:90:54:f0:f8:88:30:73:
98:a4:e3:92:b0:d3:45:6b:6e:3b:7a:bd:bf:7e:de:
91:9a:3c:a4:57:d2:92:6c:8d:13:a6:25:17:72:6b:
f4:ae:1b:00:51:b1:f7:69:7f:b5:af:3d:e5:20:50:
41:b1:2d:da:9c:1c:c2:b8:aa:87:78:05:00:79:4a:
6d:56:11:ef:f7:28:9f:82:16:e4:60:a3:36:6c:69:
9b:75:47:0e:75:57:e3:23:47:cd:63:5b:6b:9d:1e:
13:6b:71:83:4a:97:86:8d:d9:9d:89:25:9b:03:bf:
3b:a9:12:6c:d5:25:5c:e4:5f:ff:d7:66:33:68:58:
0e:24:de:91:4c:07:2b:a8:47:13:43:48:31:50:01:
a2:9a:a3:55:16:ad:e2:0f:df:37:0c:39:46:e0:c1:
80:08:7f:ac:c6:53:0d:b9:73:9d:73:54:1f:6c:0a:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:85:70:BD:F0:61:47:1F:53:0F:38:6D:36:44:BE:C6:DB:06:17
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:3b:b0:22:d9:70:b2:2e:73:5c:12:c4:ab:c9:07:43:5f:
6e:04:2e:62:ce:6b:4e:ff:35:e0:40:34:78:55:aa:d9:d7:d7:
5f:1b:db:97:e7:21:cd:d1:a7:55:10:4d:78:e7:0a:dd:98:c0:
c5:03:08:43:9b:b7:8b:b3:a8:15:03:09:a7:dc:84:b1:55:8b:
ef:05:76:93:87:24:2d:1f:0d:43:b9:db:42:c3:a8:51:30:1c:
fb:d7:a3:4b:83:65:a1:56:21:50:21:43:c8:88:bb:af:6d:21:
05:12:84:9e:d5:22:d0:ce:28:79:c3:59:56:3d:5c:68:d8:78:
e0:6f:f6:c9:dd:01:8a:33:50:67:fa:13:76:de:e5:2b:01:c2:
a1:33:e5:63:67:28:db:7b:15:10:74:9b:52:cd:a3:c5:3a:d5:
a7:d7:3c:b3:71:9c:18:5c:fa:f2:ec:fe:d7:7e:00:74:e5:56:
af:7e:50:c0:55:60:7d:a4:d6:3d:36:43:02:c1:65:e7:12:3f:
4e:a4:8b:4c:fe:74:9b:63:21:ef:20:0f:56:58:3c:b0:e0:7d:
60:61:c0:a2:b1:e7:75:fa:46:82:98:07:24:0b:98:59:13:b6:
0e:d6:5d:9b:e9:24:1e:ef:18:60:f7:37:08:97:11:82:e5:de:
6d:07:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:56 2025 by rpki-client