Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: NYzfVsqR1A4AtJjy5vi6BE8r1nvNCqtcYuzrtIRjtpM=
Subject key identifier: 4E:84:B3:F2:A1:FA:1B:E5:80:03:86:19:09:C7:A1:18:E1:43:88:4B
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0199FDD8F832BA09AA5D20EF146FCCE9CA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: DogHE7nEtd4zR/NT7ZLIj5X51PlfE+NiCfrEtizagTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f8:32:ba:09:aa:5d:20:ef:14:6f:cc:e9:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=4e84b3f2a1fa1be58003861909c7a118e143884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:0f:00:9c:c9:20:00:ea:1e:30:ba:e9:9a:
7a:c2:9d:9a:17:de:b8:7b:92:c6:23:f4:55:86:44:
df:ad:99:9a:4f:5c:f8:da:f6:ef:7f:4b:7e:84:89:
b4:f5:03:05:4d:18:7d:2c:27:94:3a:9e:76:e1:b0:
54:c0:af:c4:2c:7f:3f:82:5d:a9:ab:eb:14:18:3a:
f8:9b:c8:7b:9f:40:73:aa:13:48:23:ea:36:6a:4d:
d3:af:eb:f9:21:8b:88:e2:2f:17:d7:d0:e4:9f:66:
08:17:42:b4:1e:28:9f:91:79:4c:b8:06:62:ec:d8:
22:85:fc:85:f0:de:6b:e4:f1:09:e7:f9:27:4e:e4:
0a:03:67:83:93:9d:4d:b8:d1:6d:d2:d2:e6:b6:6e:
2d:31:00:d0:c3:a0:d8:f1:0c:66:55:5f:16:02:1c:
55:2e:03:af:26:74:4c:ce:09:0a:a6:51:17:6c:02:
3c:4d:66:4d:63:6b:92:0e:c3:3c:e7:82:d8:ef:d5:
ee:eb:e8:b6:6c:5c:61:62:fb:11:1b:72:01:a2:1f:
1a:7f:0d:3e:a8:9e:eb:08:a0:32:de:14:5a:80:1d:
db:26:e2:1c:29:9c:ad:69:4f:db:ff:c1:5e:db:c1:
af:c9:92:44:e2:c1:69:88:18:e0:bc:3d:b9:59:4d:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:B3:F2:A1:FA:1B:E5:80:03:86:19:09:C7:A1:18:E1:43:88:4B
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:45:6b:70:7e:0f:7a:e9:ea:74:37:6b:91:44:0f:5d:c6:b5:
12:94:8c:d0:29:11:9a:dd:3d:5d:08:ad:e4:f4:c7:26:bc:88:
09:55:ae:08:7c:af:3e:51:51:d3:24:c7:c7:ed:01:ba:4e:80:
ce:be:f2:0f:0f:a8:23:77:1b:64:93:83:f3:53:ce:50:19:1f:
d0:57:1d:c2:63:7b:8c:21:5e:5f:55:21:24:36:25:04:40:49:
79:5a:55:98:d9:6a:50:48:84:bf:19:89:59:f4:b5:8a:a0:33:
88:f8:79:80:26:29:0a:6c:d1:cd:ba:72:02:46:7c:49:e2:87:
ff:d4:ff:90:ff:47:c7:45:f9:65:95:f4:ed:9f:89:33:5b:54:
e7:59:09:13:76:00:41:b7:1b:62:35:11:7d:55:c4:7b:b8:55:
66:2c:d6:b7:d3:aa:cd:34:47:67:e8:03:3b:f9:a9:29:a2:22:
78:46:9d:38:ad:c6:f2:6d:33:c2:3c:13:88:b6:7b:27:87:ca:
a9:4b:23:bb:f2:92:1c:3b:ae:d6:bc:4e:c1:b2:dc:9f:05:62:
9e:d5:95:be:3f:96:a2:95:8c:f3:7a:ec:2a:90:f6:12:0d:c7:
48:1c:02:ad:21:24:8d:e8:31:ae:7c:08:b3:ca:9e:07:4a:96:
67:56:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:20 2025 by rpki-client