Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: +DkjIdZIX3aHG5TMmdzwjo7WslNEa0ndLHP9mgXI5YE=
Subject key identifier: 54:80:B1:E0:20:13:0B:B6:E0:E2:41:00:12:7B:98:FC:DE:AA:EF:0B
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 0199FC588113CFE2C1E26736C439DF86B8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 08EB
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: EDE8CIkFxTIvOQffoMpwbaBv6W1MqlKekMBKhXdo1RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:81:13:cf:e2:c1:e2:67:36:c4:39:df:86:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=5480b1e020130bb6e0e24100127b98fcdeaaef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:41:0d:56:70:27:9c:3c:c5:63:9b:42:40:
1b:4a:b5:a3:72:92:66:9b:11:03:19:b9:f7:2a:94:
cb:d2:bf:a2:db:a8:1c:e7:65:bb:4f:f4:86:99:ee:
92:d8:92:b0:0a:08:85:12:53:a8:83:56:38:05:61:
28:6b:fb:35:08:3b:1a:4c:ca:35:35:1a:ce:27:98:
bb:11:be:ff:d5:3c:ba:90:38:10:12:90:5c:56:2d:
64:31:dd:10:5d:fb:5a:87:07:78:af:0f:92:eb:22:
e9:cf:c5:57:cb:ca:42:da:d6:4c:cf:b4:4f:8f:6f:
50:3b:e8:ad:dc:fe:46:5e:cb:9a:f4:db:3f:bd:98:
77:d8:6a:ef:2c:48:46:35:f4:e4:26:77:84:f9:3b:
e6:7e:41:f1:85:dc:a2:b9:e4:78:d1:dc:97:bb:95:
d2:be:5a:fc:3a:ca:b2:73:b0:0b:a5:39:79:f0:c7:
d1:0c:5c:23:8e:82:bf:7c:10:ed:19:af:3b:0c:92:
84:ff:0e:c8:5b:17:78:1e:1b:d9:85:8a:d3:f8:b5:
c2:5b:ab:8c:f5:79:b9:11:a7:18:be:89:b2:76:a7:
b4:d3:89:b5:fa:f0:14:07:08:32:8b:e4:bf:7c:6b:
1b:86:47:53:6d:c6:bc:6d:73:4b:a2:be:ae:09:c9:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:B1:E0:20:13:0B:B6:E0:E2:41:00:12:7B:98:FC:DE:AA:EF:0B
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:0b:8f:df:47:d0:18:0b:9a:b8:c2:3b:ee:71:88:06:b5:
97:74:e1:8a:83:5c:8a:5e:f3:f4:39:e3:99:3c:da:ed:0a:15:
00:b2:f1:57:dc:41:86:66:56:7a:e5:64:95:13:73:3a:e5:75:
fc:bd:5c:9f:b8:a2:a3:13:b2:0d:35:34:b4:48:a4:43:71:84:
83:37:81:50:17:3c:d9:19:b9:a2:df:ad:0d:4f:49:2f:18:7a:
b9:4d:7e:0e:88:02:9c:00:43:9d:e9:9b:7a:65:44:4a:7d:35:
0a:a3:d9:88:0f:9a:48:f6:d3:c4:f2:21:78:e6:4f:7a:1d:17:
a6:d5:82:cd:cc:f6:2f:db:e2:4c:0b:52:ea:92:9d:e8:d4:59:
f0:c9:8b:0e:05:44:e1:f9:ca:83:af:c7:1c:8b:f1:12:86:b6:
99:0e:04:2a:2f:90:4f:ea:7d:80:d8:33:36:0c:a6:ed:38:d2:
c7:8b:63:e2:50:25:67:ca:2e:ec:5e:95:34:42:03:92:71:54:
5a:38:75:7b:d3:01:7b:4d:55:dd:6f:89:c9:ef:17:07:d7:4f:
8b:a5:69:eb:1f:87:8b:bb:e3:55:62:0f:d7:b4:30:63:80:11:
97:23:24:03:d4:f0:a0:bf:2e:b1:a2:c1:56:0a:53:b5:06:6e:
fc:ca:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:34 2025 by rpki-client