Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: FVR9WHtp5rX1Gn+o48YU27QZGcJ/OvtrlXCX8N96BJg=
Subject key identifier: CA:88:6B:DA:F9:62:9B:B4:EF:BB:C4:84:93:16:B2:3C:CC:93:3F:EE
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 0198D4DFFC3CC691594701512B5C7CAB1FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 0852
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: 2LAoLIdkCTW/p0b0gJ2mxOcQvVzez2rlnioYQiE7EoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:3c:c6:91:59:47:01:51:2b:5c:7c:ab:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=ca886bdaf9629bb4efbbc4849316b23ccc933fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:9c:c9:17:ae:13:13:2b:d7:e5:aa:24:9f:
5e:76:5c:55:a6:da:d3:7e:ad:6c:36:e9:b0:55:11:
92:88:75:8c:9b:7b:ef:10:fe:31:dc:17:56:a5:74:
04:5f:b5:0c:e9:58:8b:d2:60:05:5e:dc:20:48:ed:
f8:d1:25:b9:fb:61:f9:d2:56:87:48:17:2a:48:9b:
aa:1b:07:f4:89:24:64:a9:87:ef:3d:6c:92:6c:2a:
0d:de:a3:a8:50:18:4b:28:e4:7c:6d:61:67:e0:96:
1b:ea:ca:07:3d:01:6a:10:04:dd:49:2c:fc:98:0d:
d0:ff:ec:1d:2d:54:21:9f:99:5d:bc:f5:bd:66:9e:
41:be:bb:2e:af:e7:7e:b0:6d:10:80:87:14:e0:c5:
b0:eb:50:33:fe:ae:95:22:f9:74:68:4c:f5:b6:d4:
bf:e6:ef:90:f1:01:66:00:f7:d9:fb:d7:5f:51:4a:
bb:91:30:46:fd:87:7e:a2:23:c8:57:a5:76:39:1e:
2f:3e:4c:bc:c8:43:b9:a6:af:96:59:d2:4b:d4:fb:
69:4f:b5:8c:42:d0:a8:1b:76:61:15:be:54:68:f8:
c8:33:2c:8b:b5:f8:bc:d8:7d:05:2a:3a:51:b5:bb:
54:46:c4:cf:42:c5:62:44:b5:1b:e3:2a:82:cd:5c:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:6B:DA:F9:62:9B:B4:EF:BB:C4:84:93:16:B2:3C:CC:93:3F:EE
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:88:31:b3:1a:48:f8:4d:45:19:fb:39:3e:2a:ff:ba:b9:
7b:16:8c:c2:24:f8:08:78:7e:f1:04:cc:f4:a0:99:8b:43:4d:
90:c8:07:28:53:6e:ed:13:a7:78:6a:30:a3:7f:31:3b:c0:a0:
39:79:0a:e0:3c:f9:80:d1:77:d7:67:26:37:7b:e9:4d:c4:e8:
b5:18:67:89:71:5a:c4:51:5f:c3:8f:f1:c6:3d:4e:49:08:85:
ab:be:c3:e5:d0:96:5f:4e:7e:6e:a0:37:fa:78:96:01:01:fc:
86:a7:25:14:f6:52:68:bf:22:d0:11:12:74:23:c9:28:9f:26:
51:ba:a8:05:c4:c9:4e:67:9f:0d:d5:2b:f8:bf:d1:be:47:01:
39:68:1c:c7:fd:5f:e2:38:ec:b2:ec:90:9f:f1:44:57:1b:f8:
88:fa:cd:e6:d8:0b:94:a8:b2:aa:3c:ac:d4:23:8b:ed:69:ca:
99:4d:27:75:81:15:44:fc:1f:a0:58:25:f3:a5:cc:f0:a7:b5:
55:5e:aa:cf:85:69:42:50:09:29:c0:65:fc:e8:6f:ec:f6:25:
77:00:40:56:2c:db:13:0a:b9:ca:da:8e:34:da:2e:9c:5e:81:
be:40:ce:01:7d:e4:33:01:e3:00:a4:79:eb:52:43:64:cd:85:
48:8a:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:49 2025 by rpki-client