Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: ks+yU4fI6gtvKcUDLPwZxRd2Q2teFp3aDIccJCwcuQM=
Subject key identifier: 92:FF:C4:93:7D:1F:FB:B4:BD:A5:3D:75:73:3E:C3:4E:99:2A:08:2A
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 0199FC8F881BDC7593D906ABD499E7E69548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 101E
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: WDooonafvWy7P2pTm3IG1/s7wZAoRN0+0YbiFS1lyYM=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:88:1b:dc:75:93:d9:06:ab:d4:99:e7:e6:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=92ffc4937d1ffbb4bda53d75733ec34e992a082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:77:9b:8f:e8:d0:f4:bf:66:59:91:eb:5d:
88:47:0a:5f:33:d8:b1:a4:a4:fb:7d:47:77:07:19:
85:c2:94:0c:5a:38:76:d0:8b:41:7f:e1:2d:22:3f:
fb:46:ba:9a:47:ce:9f:fb:18:9b:76:21:02:b4:6a:
b5:a9:b6:e7:0f:38:c8:98:42:29:e9:5a:d3:1a:f1:
cc:66:e8:51:93:b0:4b:06:b6:39:6c:5e:33:7a:b1:
d5:8e:f0:90:2f:f2:b9:39:4b:b3:f6:14:ca:d2:d4:
e7:65:f4:f7:cf:f2:c9:74:a9:e6:14:dc:43:6c:f4:
d6:46:7b:e3:9f:ff:a1:f6:2f:de:18:0f:15:37:a1:
86:a8:de:d9:ff:61:79:44:9a:a6:b1:97:d6:4a:76:
d4:82:31:13:c9:12:48:88:8f:8a:60:4f:fc:30:85:
42:cb:2a:35:9b:42:e9:a7:eb:83:e6:ff:3a:73:0f:
45:8e:3c:c4:6d:e6:d7:42:60:78:74:f6:6d:03:43:
2c:a3:3b:f9:8e:cb:6e:a3:af:94:49:44:03:53:aa:
30:d5:0c:ee:c4:8e:1b:57:4b:bf:95:df:e5:41:b8:
a9:3e:b9:29:c3:25:21:68:8d:c3:2f:80:aa:d4:aa:
3f:0e:42:85:91:70:71:59:4d:21:1a:46:58:0b:e8:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:C4:93:7D:1F:FB:B4:BD:A5:3D:75:73:3E:C3:4E:99:2A:08:2A
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:58:39:d0:3e:69:c5:80:b5:15:30:6d:7b:37:30:0e:94:
ba:87:63:d7:ab:f6:91:f8:59:9d:f6:08:cd:0f:96:0d:26:79:
d2:b3:a0:e1:b2:8b:b5:29:48:b9:e1:a1:00:a6:f7:f9:32:e9:
44:e7:f8:81:1b:80:57:eb:8c:26:ca:55:ab:1e:fc:a2:6a:9c:
c1:d5:7e:8b:2d:70:d1:f2:ca:f5:96:97:e8:0e:c3:ff:10:cc:
a7:38:a6:be:e3:fb:9a:99:3b:7c:b4:b6:5b:61:99:6c:13:7e:
8c:3a:94:e2:22:b1:fd:3b:22:19:c3:ba:f1:b9:c9:19:16:dc:
ac:81:b1:cb:94:dd:85:18:7b:76:78:77:8e:cf:4a:86:c5:44:
5d:e3:00:e5:0e:4d:e0:f8:9a:39:6f:fe:1a:bd:18:46:47:22:
fa:be:72:42:ab:6f:d1:39:7d:e7:60:a8:03:c9:ad:ba:a5:89:
df:8f:b9:9a:5c:c0:6c:82:d8:f6:13:7c:8c:c8:21:6c:6b:4a:
9f:b3:cd:12:69:ad:63:7b:93:39:ed:1c:be:75:ff:ce:a1:99:
ab:02:06:7b:b1:b6:09:f2:48:c0:a5:a6:82:b4:64:d9:2b:df:
99:fc:88:57:c2:db:b5:7e:09:9f:6d:87:0d:66:be:71:5c:ba:
4e:d8:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:45 2025 by rpki-client