Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
File: aaX4To643Eyfm9j9rug-yK9uAl4.mft (raw, json)
Hash identifier: LlxgAepjMcq0kFf5YquIPGDth9AKuu1lAsHv31dcisY=
Subject key identifier: FA:E9:02:B8:2F:B8:96:91:D7:13:67:C5:03:02:63:D4:F9:40:4A:2C
Authority key identifier: 69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
Certificate issuer: /CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Certificate serial: 0199FC21522469B2C33098A150EDF166F45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
Manifest number: 44
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: aaX4To643Eyfm9j9rug-yK9uAl4.crl (hash: AKTsqc6inglPMyFSn1itQvNlyaku23598lBVkhw/eqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:52:24:69:b2:c3:30:98:a1:50:ed:f1:66:f4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=fae902b82fb89691d71367c5030263d4f9404a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:05:66:c3:c9:8c:b6:a5:73:b3:b5:3c:d7:
5c:2c:7b:c9:59:be:6c:4a:9e:f6:2a:57:7e:ad:9b:
45:f1:e3:1a:26:2b:e8:33:38:b5:f7:fc:e6:2f:4d:
30:78:d8:db:85:5e:f5:29:84:e5:a4:4c:b5:ce:80:
ac:8c:05:b8:93:08:4f:13:0e:c9:c8:a6:43:d1:64:
ce:3f:ba:81:99:eb:7e:79:de:16:c4:bb:0d:d0:f4:
53:2b:bb:01:fe:ff:e7:45:7b:a9:6e:9e:19:be:1a:
b9:1c:11:c6:6b:fb:70:75:ef:67:0c:5d:14:f8:aa:
7e:06:23:9e:2a:12:3b:77:c2:51:bf:29:30:6b:75:
21:4a:bb:36:9d:78:2f:d0:14:49:16:b1:7c:02:ed:
be:9c:41:ec:67:d5:73:ea:cb:4a:65:ec:fa:68:44:
cf:82:63:86:2d:12:60:bf:80:ee:b0:35:93:2d:c6:
dc:03:a2:24:30:7f:5e:c3:40:dc:21:a1:b7:32:e6:
7a:eb:4f:64:80:74:64:62:20:cf:cf:3b:4a:76:55:
23:9c:d4:28:f6:a1:fd:27:3c:82:d6:c4:c5:e8:27:
98:53:04:32:c5:d2:f4:fb:88:10:54:37:ba:03:14:
db:f3:81:91:f4:29:15:b6:e4:a6:47:56:1d:4a:c0:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:02:B8:2F:B8:96:91:D7:13:67:C5:03:02:63:D4:F9:40:4A:2C
X509v3 Authority Key Identifier:
keyid:69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:64:75:bb:fa:c6:18:ef:24:1f:20:7d:eb:b6:12:9f:7b:66:
14:28:49:2a:6b:d1:84:a3:98:43:a5:65:09:58:15:69:23:83:
34:7c:63:3a:14:91:f6:d1:da:79:ce:17:f4:9a:69:ea:40:2c:
9d:6e:19:96:36:d9:4d:2a:a1:a8:b5:50:00:72:54:f0:82:b8:
e7:f9:37:77:16:0b:95:12:00:b2:ab:7a:a2:d8:7d:83:fb:2f:
2c:14:9b:4b:02:95:f3:af:8d:1d:bd:16:2b:da:e5:f5:23:f3:
ca:c1:08:30:3e:a2:8c:45:97:f6:3d:50:9e:e8:5a:62:24:95:
70:9e:6a:eb:9f:7b:1c:3f:25:84:6c:58:28:9d:ba:18:de:2b:
3e:ff:0d:f1:2c:f2:bc:8e:7c:3e:e4:06:ba:8c:c3:27:9e:f7:
a5:60:14:c2:ba:0c:e0:c5:a2:5f:ad:5c:ff:be:09:c2:8c:41:
1f:d2:4e:d9:31:22:4e:c2:c1:ea:c7:29:00:4b:f8:b0:3b:56:
7e:d7:51:34:11:d9:b1:47:3b:6d:e9:92:1f:e2:e2:03:24:a8:
30:1a:67:81:3c:06:c3:b1:93:51:4f:48:c0:e3:d1:20:03:85:
e7:75:44:58:34:84:94:e0:b7:02:52:2e:1a:e8:1f:94:ce:ac:
7f:7c:46:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVIkabLDMJihUO3xZvRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTVmODRlOGViOGRjNGM5ZjliZDhmZGFlZTgzZWM4YWY2
ZTAyNWUwHhcNMjUxMDE5MTEwMTA2WhcNMjUxMDIwMTEwMTA2WjAzMTEwLwYDVQQD
EyhmYWU5MDJiODJmYjg5NjkxZDcxMzY3YzUwMzAyNjNkNGY5NDA0YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUsFZsPJjLalc7O1PNdcLHvJWb5s
Sp72Kld+rZtF8eMaJivoMzi19/zmL00weNjbhV71KYTlpEy1zoCsjAW4kwhPEw7J
yKZD0WTOP7qBmet+ed4WxLsN0PRTK7sB/v/nRXupbp4Zvhq5HBHGa/twde9nDF0U
+Kp+BiOeKhI7d8JRvykwa3UhSrs2nXgv0BRJFrF8Au2+nEHsZ9Vz6stKZez6aETP
gmOGLRJgv4DusDWTLcbcA6IkMH9ew0DcIaG3MuZ6609kgHRkYiDPzztKdlUjnNQo
9qH9JzyC1sTF6CeYUwQyxdL0+4gQVDe6AxTb84GR9CkVtuSmR1YdSsAFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrpArgvuJaR1xNnxQMCY9T5QEosMB8GA1UdIwQY
MBaAFGml+E6OuNxMn5vY/a7oPsivbgJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQt
YWQ1ZTZiNzg1N2MwLzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQtYWQ1ZTZiNzg1N2Mw
LzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWR1u/rG
GO8kHyB967YSn3tmFChJKmvRhKOYQ6VlCVgVaSODNHxjOhSR9tHaec4X9Jpp6kAs
nW4ZljbZTSqhqLVQAHJU8IK45/k3dxYLlRIAsqt6oth9g/svLBSbSwKV86+NHb0W
K9rl9SPzysEIMD6ijEWX9j1QnuhaYiSVcJ5q6597HD8lhGxYKJ26GN4rPv8N8Szy
vI58PuQGuozDJ573pWAUwroM4MWiX61c/74JwoxBH9JO2TEiTsLB6scpAEv4sDtW
ftdRNBHZsUc7bemSH+LiAySoMBpngTwGw7GTUU9IwOPRIAOF53VEWDSElOC3AlIu
GugflM6sf3xGdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:08 2025 by rpki-client