Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: 4CkOQX9aNzLMp6g4HlQFhf/mItfz9wJb1C0GnuO4kuY=
Subject key identifier: E9:CF:F1:1B:09:09:F3:17:96:90:8B:3C:38:2A:E6:F1:48:5A:A0:89
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 0199FC2154C47505C32CB0ED29603E8C72BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0AF3
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: ZCLFLawII7XvANKeG2owacWICyySnwP5dn+QC9cEMQY=)
2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:c4:75:05:c3:2c:b0:ed:29:60:3e:8c:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=e9cff11b0909f31796908b3c382ae6f1485aa089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:2b:e9:42:e6:17:20:21:43:ab:71:ec:83:
37:6c:ac:04:17:25:e4:4a:ea:74:16:b8:35:04:f4:
9d:f1:b2:71:54:77:de:62:76:4c:57:99:60:15:0d:
0e:02:db:7b:e8:43:07:e9:cb:04:91:9f:22:3b:36:
1e:04:04:8a:69:93:55:79:78:16:32:96:ea:23:37:
5f:a8:0d:ca:fb:51:60:4c:70:31:c4:d4:18:c7:95:
df:bd:09:bc:2a:5a:c0:03:c8:f3:db:8a:c3:60:be:
b9:1e:42:f2:e5:a4:60:e3:f0:49:6f:65:f5:3b:59:
48:e5:5e:43:83:44:c1:e5:23:a1:2b:e5:a0:db:57:
59:5f:93:6e:fc:64:8c:d7:de:c1:2e:0f:02:20:34:
00:85:e3:df:fd:a3:cf:24:76:45:a7:0e:ef:19:58:
ee:c8:6e:2f:94:7e:c6:11:d7:e8:0f:41:a4:12:51:
bc:41:2d:50:db:a4:08:cb:e5:77:b3:18:de:d4:a6:
84:6a:6f:ad:55:a0:bd:a7:96:02:68:06:67:dc:4b:
db:ab:77:36:4d:7b:90:4c:ca:0b:62:34:f7:9e:dc:
ee:68:d0:d2:07:c9:2d:fb:1a:b9:29:8c:ba:f3:39:
97:5a:70:b0:fa:44:c6:6a:93:ff:e6:38:1a:d7:3c:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:F1:1B:09:09:F3:17:96:90:8B:3C:38:2A:E6:F1:48:5A:A0:89
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:76:b1:38:2d:65:1a:62:7c:77:66:93:5e:71:3d:fe:7c:72:
25:4a:ab:c8:63:40:da:b3:72:fc:45:6f:c9:43:b2:5c:66:ef:
a6:15:62:e9:d9:1f:9e:2e:6f:d0:3c:3c:8c:18:4b:57:7e:b0:
6a:2a:1a:a2:16:bf:fd:0f:31:e3:b3:0e:33:9b:49:b0:e4:5d:
55:b0:e2:6d:1c:77:59:17:f5:43:21:21:4e:ce:7b:eb:44:7d:
ca:61:fd:22:71:0c:66:f9:be:84:1e:ff:74:29:56:0a:18:73:
34:6d:b2:1a:b8:f6:a9:43:f4:c0:a1:d8:b1:e3:05:96:e9:90:
01:06:3e:fd:8a:68:f0:dd:7b:b4:a9:bc:1e:d3:00:24:68:f8:
20:f8:e8:2c:e9:ba:d6:39:84:b3:5d:b7:63:3d:ae:cd:3f:95:
b3:ce:a2:73:4b:c2:49:32:5f:62:e6:26:26:81:86:9b:85:37:
e4:89:04:05:3f:b2:b2:d9:a3:b4:e0:cd:13:39:c5:11:68:f2:
0d:2e:90:4e:e6:67:58:18:02:9a:f1:83:cb:eb:5b:94:ad:0e:
1e:f5:be:a7:3f:70:34:a5:f0:ed:ad:8d:54:30:e5:e9:38:f6:
c5:79:82:5b:b7:65:15:58:55:76:45:2e:3a:a9:24:a6:ab:ba:
5a:d9:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:22 2025 by rpki-client