Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: CiAV66T+tMfFcgAa3LTYDuPvVEScwjIndzokRbVt50k=
Subject key identifier: 0A:A1:36:46:ED:A4:A2:F3:E7:EC:C9:9C:87:83:4C:58:2A:11:A2:FC
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 0198D73AE981B9B6393D694A9DC647BF384E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0F75
Signing time: Sat 23 Aug 2025 14:00:18 +0000
Manifest this update: Sat 23 Aug 2025 14:00:18 +0000
Manifest next update: Sun 24 Aug 2025 14:00:18 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: qkNQkAmJIJ+uMvXU4vMsM2R4qaCynNqSZapgWrkA4sw=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e9:81:b9:b6:39:3d:69:4a:9d:c6:47:bf:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Aug 23 14:00:18 2025 GMT
Not After : Aug 24 14:00:18 2025 GMT
Subject: CN=0aa13646eda4a2f3e7ecc99c87834c582a11a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:08:54:1d:e0:6c:d5:b7:d8:61:b3:a0:17:
cc:36:44:71:1c:97:63:c4:4c:79:a8:ec:58:20:20:
93:39:a8:4c:57:11:14:45:fa:1e:05:ea:b3:0b:10:
15:7c:57:78:31:65:2f:17:89:8f:bd:03:c2:ef:22:
cf:53:07:bc:37:9c:af:9d:c3:5e:db:d2:10:8f:93:
49:36:0f:cb:8a:ba:01:04:f9:dc:d0:68:02:26:4a:
e0:7a:d1:b1:2f:5f:2e:1d:18:b8:dc:24:b9:5f:d5:
da:97:aa:d8:8a:a0:26:0b:35:16:88:2d:b0:9e:18:
72:f0:a3:c8:35:6f:d3:76:d5:98:54:d3:0e:72:ae:
e2:07:ca:8e:3b:f5:37:14:c2:b7:77:55:69:90:76:
2f:71:81:cf:dc:29:b0:df:7c:ce:62:03:04:a4:4b:
98:33:92:07:56:ce:0a:18:8f:de:66:d6:6c:82:3e:
f6:28:36:c4:11:fe:c6:16:b1:fc:47:ed:a5:c4:43:
17:7b:31:2b:d4:7c:4b:7f:df:96:1f:98:47:11:69:
2d:48:12:59:59:61:07:ae:51:36:b5:92:86:04:ee:
6f:92:4d:95:80:f9:d1:b4:00:e9:0c:cf:85:ab:df:
95:83:58:65:34:e9:6a:ef:5c:b4:a6:b6:de:01:2e:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:36:46:ED:A4:A2:F3:E7:EC:C9:9C:87:83:4C:58:2A:11:A2:FC
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7a:17:28:81:f9:96:cb:76:ae:46:72:a8:09:07:7d:ec:44:
63:03:5d:fd:f9:bb:f8:49:24:ce:70:70:68:cd:1c:09:4d:c1:
58:fc:80:3f:74:90:dc:ee:65:77:90:48:7c:f3:34:27:6d:8a:
5b:c6:7f:3a:a4:79:62:98:6e:e5:73:e5:f1:c6:34:77:2b:52:
46:41:0e:20:88:3c:6c:12:26:d5:e9:61:b3:b8:3a:c7:99:08:
f2:f3:f8:f3:b9:3b:aa:a9:e2:e4:80:6d:78:ca:7c:6e:21:2f:
99:bf:74:55:5b:f9:74:fa:42:1e:55:a7:29:fa:2f:eb:e5:15:
08:a4:a2:2c:41:26:48:3a:90:7b:81:e7:57:50:49:68:0c:c2:
16:ca:f9:80:9b:1d:f1:69:72:a8:d9:1c:cf:e6:55:3b:5c:30:
8c:c5:40:fe:9d:2a:87:6d:2d:66:e8:49:98:88:5b:9f:6d:e0:
61:90:20:7a:4f:01:a7:c4:5a:fb:af:8f:98:63:ce:4d:dc:90:
29:ee:83:fc:08:3d:33:85:56:3a:aa:4d:f4:80:69:e3:cf:67:
67:4e:ad:bc:98:ef:fc:74:64:48:0b:05:8d:7c:81:12:17:06:
ff:48:31:94:c9:dd:f1:29:75:e5:ad:0d:87:d0:69:4b:a3:e9:
cc:6f:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:24 2025 by rpki-client