Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: 0jh7aBrIzAAZPTmb1JvXuaFAtT0d+rJxc7t2D8voiR0=
Subject key identifier: F5:7E:C8:EC:0A:A2:0A:42:82:2A:30:EA:DC:D5:4D:75:FC:39:DA:20
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0199FDDA1DFA99C01160873F2B29107C799B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: SabL4y8BezNxQkSA6JyXtmx3uCwJKAMEWsPEJ6OGdWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1d:fa:99:c0:11:60:87:3f:2b:29:10:7c:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=f57ec8ec0aa20a42822a30eadcd54d75fc39da20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:c3:c8:b2:30:db:1c:e0:fd:7d:0d:d7:6b:
a6:15:0b:40:46:88:4d:94:a9:81:a8:17:5c:66:2c:
78:ed:2e:ae:dc:82:aa:b6:e9:be:d1:68:3d:b9:9f:
32:f5:ee:e1:aa:91:df:bf:cf:d9:43:66:b7:dc:92:
bf:0f:da:38:60:44:06:81:8a:7c:dd:48:92:a8:a1:
f6:4a:85:d2:2d:38:88:b7:37:c4:aa:83:12:a1:a2:
23:10:22:6d:39:b3:ab:c4:99:7a:fc:a8:f3:29:8d:
f9:5c:4e:d0:ca:1e:b3:96:24:41:75:7e:fc:72:bf:
0c:6d:a8:6b:fc:58:d7:d1:b1:c3:9c:8b:03:f4:ce:
ef:95:ef:41:e1:d7:7d:87:f7:02:19:9e:52:93:7f:
74:c3:c3:6f:90:67:be:cd:8f:76:d0:b4:e0:24:27:
99:a3:24:a0:bc:7e:64:f9:66:c6:bd:1e:e0:d8:b4:
e2:72:aa:97:8c:d1:7f:90:41:6e:e6:9f:2c:4f:15:
da:df:cb:96:ce:79:4d:f0:6b:b4:6e:59:0a:27:d5:
78:84:cc:8e:ff:5d:7a:af:84:36:35:4d:77:3c:ff:
18:22:1a:2d:01:94:73:56:5a:86:ce:6b:69:e8:9c:
9d:ce:f5:05:1c:8e:3e:f5:20:80:55:27:4d:53:66:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:C8:EC:0A:A2:0A:42:82:2A:30:EA:DC:D5:4D:75:FC:39:DA:20
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1a:ba:de:fd:08:66:fe:ff:ce:b3:e2:c8:3e:cc:72:04:3b:
c1:71:99:0f:48:8f:2f:bc:97:6c:f0:da:1f:77:9f:90:c4:65:
8b:41:65:26:47:76:43:43:b4:8e:71:7d:72:57:62:e7:b8:8a:
14:b0:d5:a2:8a:04:61:a4:33:fa:3b:f6:8a:6a:c2:c6:98:5b:
b4:47:fd:78:35:66:b5:77:2d:c7:9e:36:54:97:a4:99:4d:ea:
b5:d8:15:90:74:d4:fc:44:0b:8e:b4:a2:6a:c0:7f:d1:71:8a:
95:96:70:98:1d:77:be:96:ce:16:d2:51:0a:08:30:ac:4a:e0:
d6:5b:18:3b:69:61:24:93:fe:c2:b3:9b:12:10:41:fc:fb:ff:
9c:9e:fa:ca:dd:79:e7:8f:37:0e:7c:7e:ed:df:44:24:e5:3b:
39:37:21:bc:54:d4:f9:20:63:74:05:ec:f4:61:4a:52:d4:a8:
a7:a0:28:30:53:27:88:56:05:6f:c7:92:80:a6:27:f7:91:7d:
61:97:e7:24:fa:0b:c5:d8:6d:9a:4a:81:a2:71:85:18:2b:3c:
27:87:42:2a:38:2d:e2:45:a8:39:6c:8b:55:88:93:58:41:90:
66:dd:e4:bd:6e:47:8f:f4:47:06:a1:6f:1d:5f:3d:3a:44:82:
26:25:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:19 2025 by rpki-client