Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: Qgs5ruMRT+eS4OKwlsx+wFgdM81TOGh3g3BkOr3eh34=
Subject key identifier: A6:B4:44:CD:DE:FA:3C:FD:D9:BF:EF:BF:49:3C:7B:DC:5F:09:AB:CD
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 0199FBEB7FE205A15FDF2C95CC1B00978BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: pVcPBQFvP3N9OQk8A9ingCHqNyL41Old6aEnzSTniyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:e2:05:a1:5f:df:2c:95:cc:1b:00:97:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=a6b444cddefa3cfdd9bfefbf493c7bdc5f09abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:03:40:c3:e3:61:c3:c9:c6:5d:f8:64:c4:
ff:e9:f7:a1:43:48:72:61:d6:88:64:f4:8b:87:e2:
35:6d:16:89:b6:e2:42:4d:e4:78:c3:2e:30:3f:cd:
8e:e5:f2:c1:ea:1d:5b:a5:33:3e:c4:4d:c6:f3:11:
8f:64:87:0b:b9:1d:cc:60:76:d0:58:6b:76:b9:06:
f3:dc:9c:b0:05:39:04:06:2c:6d:f2:41:df:68:f6:
cf:b7:ca:75:c5:8e:64:92:88:aa:a8:a1:50:09:a9:
2c:25:84:8f:a8:ed:90:fe:61:f4:73:3d:f3:c9:51:
91:27:46:1c:ab:53:11:94:d5:33:f4:05:53:14:03:
43:62:99:18:aa:04:ab:9f:01:fa:2c:e3:5a:1f:8a:
13:f1:87:ae:ab:6c:79:0a:ad:dd:89:c4:d3:c0:74:
6f:d4:5d:56:b2:5a:34:97:2f:4a:0e:e0:ef:b7:6a:
bc:c7:81:c0:08:be:1f:29:af:f4:e2:ec:da:7c:05:
7d:fc:64:9e:db:e9:af:ed:f1:3d:95:23:c7:0d:bf:
a3:e6:f3:8f:40:88:0b:7b:cd:5b:6f:d3:39:ab:bb:
83:3e:22:c2:7c:35:d9:fa:46:69:5e:1b:16:e0:98:
8c:c0:c9:70:43:03:5e:7b:90:90:d8:70:bf:3c:90:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:44:CD:DE:FA:3C:FD:D9:BF:EF:BF:49:3C:7B:DC:5F:09:AB:CD
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:17:aa:2f:4c:c6:0a:ee:a3:be:a2:ca:8e:22:7c:52:3f:5f:
9f:73:de:3c:36:b5:46:41:39:2a:03:f4:3e:fe:fa:e4:ca:fb:
1b:42:14:38:63:2a:7d:0c:de:21:86:bb:09:18:53:15:f2:2d:
37:5d:5a:c7:32:21:5c:32:c8:b2:28:76:3e:39:63:b6:0b:b1:
87:02:df:83:cc:30:6c:36:05:e0:10:5e:77:6e:fd:8f:30:56:
75:65:0a:ed:8a:13:97:8d:91:53:f2:4d:e2:b4:0e:3c:bf:3c:
84:90:f8:cd:53:d8:5b:77:8a:c4:22:59:14:df:a6:36:88:cd:
94:c5:ed:30:bd:3c:8e:aa:5b:23:0c:80:60:f0:37:fc:04:33:
8b:6a:8e:73:80:63:3b:d5:ad:67:05:18:9b:ff:31:e3:be:95:
d6:6e:62:f5:31:00:7b:9b:4b:a5:4f:b2:86:b9:e5:1d:fc:a5:
67:e4:c6:68:27:17:78:f1:4c:91:e6:4c:f9:8a:f3:eb:17:7b:
90:73:31:e5:27:e3:9e:fe:a0:f4:a2:46:14:6e:39:76:ae:c2:
45:94:8f:3a:0a:7d:a0:d7:3a:1c:12:e9:01:c5:7c:b1:4e:43:
31:f8:62:66:7b:8e:7d:b0:77:60:09:f5:ea:ae:57:6a:51:03:
7f:75:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client