Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: NthJ2SWkB4Yj7cR4BOo0nnuZu4rZMmhBXham7tnyk98=
Subject key identifier: E1:A0:4F:A2:C7:74:74:11:DE:C0:FE:9E:44:CC:3F:5B:01:CB:A8:CC
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 0198D4E09C158D1FA728329D6660E2C97F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: Qy0cd4NjNMlFEOezK8WrSS/3sn25E7zH5dJ6QH2PLgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9c:15:8d:1f:a7:28:32:9d:66:60:e2:c9:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=e1a04fa2c7747411dec0fe9e44cc3f5b01cba8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:6d:3c:66:54:ad:a0:ff:cd:f2:b0:d3:7d:
3d:2f:fc:82:4e:a6:70:36:9c:f9:3a:93:3f:ce:f7:
c5:e1:1e:47:4a:8f:aa:d0:11:ba:39:04:9e:7b:11:
86:1c:d3:f4:84:1d:14:32:c0:e8:08:30:00:69:35:
69:0e:22:d9:16:13:08:9c:17:3c:4a:32:27:c3:ab:
a3:e0:6b:38:7e:da:54:03:26:f5:43:92:c8:b2:ab:
50:b4:31:f6:8a:fb:11:80:78:43:4f:60:29:9c:5c:
80:71:20:af:5f:13:32:4c:c6:18:fc:d8:11:e4:3f:
34:52:4e:73:32:2d:f0:a8:03:d8:24:58:4c:ce:26:
5b:75:be:c0:fa:0a:f0:75:d5:63:61:a6:1a:f6:86:
51:85:ff:32:88:ea:36:dd:e9:17:1a:0b:61:f5:7f:
30:3f:6a:e8:b4:cb:32:55:57:cf:b0:cf:6a:31:7a:
34:4f:27:4f:fb:66:a9:76:61:77:56:fd:d5:5e:2a:
0c:ef:c1:5d:da:1b:96:5d:8b:67:62:ff:1d:0c:50:
e6:ac:43:2a:20:34:e4:ac:d8:35:64:78:99:7e:a9:
e5:fa:fa:0f:37:f4:64:85:c6:68:52:02:09:66:10:
42:4c:90:79:6a:49:78:91:60:c9:b3:1a:7c:31:3b:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:4F:A2:C7:74:74:11:DE:C0:FE:9E:44:CC:3F:5B:01:CB:A8:CC
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:44:02:f5:23:ea:09:5e:bd:b6:15:dd:f1:00:bf:8a:97:
79:e8:60:ac:c0:86:92:37:e3:a8:fd:97:2b:24:70:50:70:4e:
06:b1:43:57:71:ad:de:4b:14:9b:c8:c8:7d:0f:3d:ad:81:4d:
4b:65:6b:a4:9f:38:e6:7f:7b:1e:2e:37:36:e6:f2:15:89:3e:
37:75:b5:0d:aa:76:4b:a9:34:59:02:82:30:68:17:ab:9b:3c:
c5:c6:64:b7:3b:2c:71:e7:6e:4e:61:81:86:0f:78:61:43:3d:
ae:0b:61:18:89:86:b6:06:e1:91:84:8a:bd:04:a4:8d:3b:62:
fa:4b:e5:04:2e:62:5e:eb:b4:1a:2d:90:60:15:a4:b4:94:74:
ba:d7:ab:12:73:ca:77:80:bf:f2:77:3f:50:8d:c9:0b:37:ff:
c3:8e:27:71:1d:2c:95:67:72:41:9f:20:5a:94:9b:33:e0:43:
43:b6:8c:e6:17:0e:9e:4c:9a:11:bb:24:e9:62:fc:7b:0b:46:
a7:b5:da:33:71:19:f1:f1:2e:35:29:af:2b:e1:1e:be:e0:67:
ed:ad:c8:10:9b:74:4c:40:8a:b6:54:f2:69:7a:a9:bb:1c:62:
79:95:a9:22:e9:59:56:b4:7f:c1:63:aa:b6:04:54:db:6d:da:
73:be:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:36 2025 by rpki-client