Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: JUgir17QyTnrQgGBs9lRhGKJ6n8zos0BQUWPxgVbC3s=
Subject key identifier: DE:BA:8E:C9:BB:73:91:E8:0E:5F:CA:44:1C:86:B7:59:A8:B7:30:08
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 0199FE468B7F2652133122821A1B040FD816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 21:01:00 +0000
Manifest this update: Sun 19 Oct 2025 21:01:00 +0000
Manifest next update: Mon 20 Oct 2025 21:01:00 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: eB13rUxcG4i5qiogLfBQE/wWO80S2SM61F/G7lpv5L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8b:7f:26:52:13:31:22:82:1a:1b:04:0f:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Oct 19 21:01:00 2025 GMT
Not After : Oct 20 21:01:00 2025 GMT
Subject: CN=deba8ec9bb7391e80e5fca441c86b759a8b73008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:63:0e:1d:39:11:aa:9f:ae:26:9c:23:e1:
51:d3:d3:1e:d2:67:29:f5:c0:20:f2:fb:9d:00:ea:
fc:62:40:20:12:01:65:e8:36:f0:3e:53:7f:cd:eb:
d0:99:be:2b:d7:53:b0:4f:27:34:06:b9:0c:e7:7f:
c7:39:e4:51:8d:5e:09:03:4c:06:3b:2c:42:6a:bd:
c0:41:b5:9c:90:c1:fe:af:06:0d:de:c9:12:ef:93:
18:0b:d6:25:dc:a2:ea:75:63:47:a2:ef:53:9e:51:
0e:9b:c7:69:cc:68:1a:c4:b1:45:1a:28:e4:d8:98:
e6:c7:0c:98:fa:fc:af:67:77:d6:40:c0:19:53:8f:
c0:35:e0:27:1d:b1:3c:31:da:3f:40:8e:06:8e:2e:
98:ab:28:7d:35:d3:12:7c:df:83:c0:3b:10:dd:93:
6c:7d:ef:0a:71:26:17:5a:76:61:62:c2:7e:a4:6b:
5f:91:69:f7:77:68:98:35:66:32:92:cd:3e:a2:b0:
cc:70:e0:c6:a9:22:f0:c2:06:5a:1d:c0:09:ae:ea:
49:13:ba:6e:68:27:85:20:b7:88:e9:8b:cd:9c:16:
da:26:54:af:3b:63:ae:08:f1:4c:a5:53:fd:d6:de:
f7:25:17:09:a9:35:ea:c4:07:f4:06:54:18:c6:d9:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:8E:C9:BB:73:91:E8:0E:5F:CA:44:1C:86:B7:59:A8:B7:30:08
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:31:68:ae:c2:14:61:b7:ef:0c:6a:24:cc:4d:2e:6d:f1:dd:
eb:cd:6b:ef:e2:99:c3:ca:12:8f:93:ea:64:92:18:85:a6:c5:
8b:29:c5:bd:87:e0:35:ab:6a:97:92:c4:50:ed:90:b1:70:ab:
23:0c:4b:1c:98:4a:1e:45:9f:45:ca:25:72:e3:32:c8:f2:36:
66:da:75:37:1f:8e:9a:8c:9b:a2:2d:3b:40:47:ff:f8:67:af:
ec:9e:1b:e8:f5:66:b8:60:bd:08:cf:4a:91:27:5d:d8:97:3f:
96:2c:32:f7:5d:06:ab:9c:be:95:75:0d:cd:bc:32:a4:78:b1:
34:c5:f9:cb:f0:36:23:b3:80:80:9e:1d:86:24:94:50:15:ce:
df:59:c3:c8:c5:a7:91:cb:80:bf:d4:53:4f:f8:6a:ac:c4:92:
c2:1e:97:65:18:80:25:39:8b:30:bb:59:5f:44:cf:3a:0b:84:
41:bf:45:dd:16:1b:97:76:42:7f:7a:4d:f6:d7:1d:f9:7d:db:
37:3b:98:34:3f:0f:16:06:e2:cc:fb:db:a0:36:92:dc:5c:f2:
4a:1d:ef:c6:f4:f8:fb:bc:87:80:54:aa:8f:22:71:3a:be:46:
51:9d:7c:77:5e:15:81:ef:55:db:a3:ba:fe:87:f7:4c:da:33:
90:c7:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:31 2025 by rpki-client