Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: c7bD2G8HdPetv1l4XqbXRfIsO7n9uqWlu82t+Ay864U=
Subject key identifier: E1:47:06:44:66:C2:82:59:DE:2A:45:8B:91:3E:99:D6:93:1A:80:E3
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 0198D69862BB97C4C59D1735BA37F715B4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0A5B
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: UM7spRPujJOihXJzUCu5J1aO3EIIGnc3KD/oTjLebRA=)
2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:62:bb:97:c4:c5:9d:17:35:ba:37:f7:15:b4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=e147064466c28259de2a458b913e99d6931a80e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:12:ff:cb:3d:1d:96:38:20:ad:d6:ee:61:
8b:47:1a:83:e4:cb:4d:fa:0c:fe:18:c3:30:c1:79:
98:54:ed:02:1e:b5:48:2a:f2:5b:11:dd:0b:dc:31:
59:6b:a1:a8:67:ca:17:25:af:00:e8:84:85:a6:4f:
f6:28:19:46:b0:e9:75:87:55:db:af:0f:a6:d5:3c:
f6:32:49:bc:de:0d:e5:d8:7a:47:02:0b:bf:8f:70:
14:a8:0b:08:ea:f0:2e:3b:83:22:21:cf:f9:d9:bf:
c9:ef:9b:a6:f3:b3:e6:5d:71:f2:3a:eb:05:0e:b6:
cd:9c:2f:da:a1:09:82:c7:e2:e1:dd:8f:0e:9a:fc:
7a:f8:9c:6d:86:1f:9c:15:49:cc:be:d4:12:c5:db:
93:ae:65:93:f1:a1:dd:46:b0:cc:01:09:d8:61:15:
57:f1:2b:9c:00:6e:54:f8:c8:a4:23:16:2e:3b:52:
13:68:e3:ca:50:23:d6:34:40:3a:50:a9:a0:b2:af:
89:cd:ea:6d:34:60:91:3e:3e:67:cc:19:99:d7:b7:
a1:5b:9c:82:1e:92:11:7b:4e:f3:92:62:13:d5:cd:
4b:40:dc:57:cb:60:7f:86:d5:0c:af:48:0d:60:ca:
d1:a8:7d:3b:4f:be:8f:0a:48:bf:f8:6c:c7:8d:0d:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:06:44:66:C2:82:59:DE:2A:45:8B:91:3E:99:D6:93:1A:80:E3
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:18:69:7b:93:d8:4f:21:86:7d:7a:53:b5:11:82:d6:bb:d8:
39:d7:c7:82:72:d4:ce:c4:1a:60:cd:ce:15:29:05:fc:34:51:
2f:89:2b:0a:04:31:f7:e3:d4:db:58:77:57:61:d3:c2:8e:ab:
b3:b1:5f:04:14:10:f3:ab:e1:33:28:1b:9c:ac:08:bf:74:8d:
29:6a:28:bb:05:18:f5:bf:72:11:1f:e5:c5:30:2b:e6:b4:bd:
e5:87:c8:09:5c:82:fa:8b:0d:a5:8f:97:4c:1d:48:80:3b:52:
1a:a9:f8:20:8e:da:c7:6a:54:ec:85:bf:51:12:2c:4f:ca:00:
73:c1:34:01:f4:93:45:aa:22:5e:2d:f2:12:cb:69:39:1b:07:
cb:9d:06:6e:7b:22:ca:72:a8:e8:f7:84:e0:43:b8:e5:43:ad:
05:bd:e8:64:37:00:fc:2a:a0:b1:a1:75:ad:66:98:34:ab:3e:
e6:26:d0:6b:7b:24:33:2a:3a:19:89:93:31:3b:b7:28:47:fd:
a0:5b:40:54:2c:e5:9e:d3:d9:3e:d6:30:6f:35:66:68:4f:58:
f5:a0:08:a1:54:b3:67:66:49:e0:05:fc:33:ab:69:2e:76:a0:
46:da:96:1a:47:72:62:94:51:30:65:08:fc:3e:bb:c2:1b:e3:
30:0d:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:26 2025 by rpki-client