Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: MQYzhL+qk7AmGfR78O2VICZJBgJtSAprre/GlLQ7A3U=
Subject key identifier: A7:CF:CB:CE:7D:26:78:A1:DD:FA:BB:6D:3B:5C:0A:A4:EF:A4:48:55
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 0199FCFD5EA3BCF1CFA1C898C5BF3C226C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 1317
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: cfRBje1AroeWNADwiwyZwy4DMdMwOGHdg6TZyqaxH0o=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5e:a3:bc:f1:cf:a1:c8:98:c5:bf:3c:22:6c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=a7cfcbce7d2678a1ddfabb6d3b5c0aa4efa44855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:b0:19:42:c0:48:9a:88:6c:da:b6:ad:70:
29:8a:00:16:2c:c4:ed:06:64:3e:04:79:98:03:aa:
a5:d7:30:e5:e4:d0:f3:34:9d:3f:51:63:0e:54:2c:
19:91:d6:09:42:c2:62:fe:51:17:30:f9:60:9d:cd:
59:f6:64:64:eb:8c:61:4b:0a:73:73:af:16:0d:25:
d2:19:11:b6:06:39:dd:a8:83:74:06:db:6f:35:d5:
27:60:3f:f3:41:dc:11:d3:c8:66:9a:33:28:0b:dc:
01:1a:9e:82:85:a1:15:87:59:e3:7a:f2:34:b4:c5:
c4:b7:88:1b:fb:4e:8a:b3:1e:57:16:de:bf:0b:a2:
90:6e:ff:de:89:cb:bd:bf:12:ef:f3:c4:6c:f6:0e:
d0:2a:de:a3:d8:41:10:29:4c:4b:80:eb:f3:76:e5:
42:a8:31:e2:ae:52:a6:7f:f6:60:7c:a0:10:32:e5:
3d:d7:b8:58:81:14:b3:c6:40:53:05:55:26:6e:d3:
56:be:b2:38:e7:f1:6c:cd:e5:1b:73:46:e2:a0:09:
19:49:62:4f:32:6b:ae:1d:53:d2:77:61:6d:00:7f:
f9:08:df:2f:e4:34:86:fc:47:c5:97:00:cf:99:05:
24:66:17:d8:c6:88:be:85:e7:f1:c6:58:dd:b3:18:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CF:CB:CE:7D:26:78:A1:DD:FA:BB:6D:3B:5C:0A:A4:EF:A4:48:55
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:eb:a5:91:9d:21:93:03:04:3b:3a:9a:7d:83:e3:73:bc:
80:96:9c:07:af:cc:51:f2:2e:4c:eb:9c:24:1f:73:8e:b6:aa:
d0:33:36:75:87:da:a0:91:ee:37:bd:76:35:0f:e6:2b:83:ce:
1b:94:2f:0c:43:71:e5:4f:63:25:1e:b6:51:6a:4d:8a:8e:a0:
17:99:6e:ad:6a:14:ba:ba:38:4d:06:37:20:ff:f2:00:74:84:
35:37:1e:75:5e:98:71:23:8d:bc:74:50:06:f3:fd:8a:47:29:
3f:43:a8:54:13:c1:1b:5c:46:a2:41:e9:9a:29:c8:ee:84:61:
74:e1:32:5f:03:f3:cb:59:2c:6d:b3:87:aa:cc:d3:34:5d:e1:
54:71:67:84:5e:1c:60:7c:18:58:f4:07:da:bf:ae:ac:3a:86:
87:b4:3c:39:b7:4d:2d:3f:b2:a5:29:04:e0:68:11:85:16:cd:
57:63:3b:4d:44:4d:36:9b:ca:71:c9:cb:d7:0d:6d:45:bf:fb:
27:3a:6e:27:37:d6:8d:0a:e6:81:7b:4a:c5:99:9f:3f:bb:00:
7c:c8:30:4a:42:8e:75:4b:68:af:85:41:bd:03:68:f8:d9:76:
56:58:94:dd:a8:ef:2a:8b:63:c0:9f:67:43:65:af:c4:c0:69:
2c:94:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:41 2025 by rpki-client