Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: Vni4Mo/S76onJel7BMrxitP9XyoG9Br+xFxzZiG6wyM=
Subject key identifier: 41:1C:82:3C:6D:5E:9D:C6:1B:DA:8C:09:B1:3B:41:0F:7B:D7:B8:D0
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0198D4044C29462333584BE8ABB5805B7464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 12F7
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: PPaev+3bIkqIu+LViTrHU+19z0l2XfVlMwgkITga6Sw=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4c:29:46:23:33:58:4b:e8:ab:b5:80:5b:74:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=411c823c6d5e9dc61bda8c09b13b410f7bd7b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:e1:d1:d2:c7:2f:86:64:b6:55:d4:33:21:
fa:ef:ac:95:b4:5e:29:12:2e:e8:e4:86:67:49:ed:
e2:76:0b:c1:51:4c:04:dc:9c:6c:29:4e:52:35:9e:
a9:07:4c:cd:5e:ed:3f:77:18:dd:5c:bd:e7:e5:3c:
58:bf:1c:99:4e:c0:28:ad:ce:a4:26:ae:5a:44:27:
45:92:9f:02:02:1e:22:1d:e7:c2:c4:6c:b1:37:ad:
ce:79:77:ee:4e:b6:a0:13:ea:9f:7b:51:67:36:45:
43:a2:47:1e:c1:83:4c:d5:3c:a3:d7:f0:05:08:31:
d8:76:95:27:33:e6:63:ba:25:e0:51:70:95:f9:f9:
72:ab:1f:11:e0:49:8b:04:73:5a:c4:8b:a1:60:0e:
b7:bd:2a:76:d9:43:0d:f0:b8:23:85:bd:31:8a:23:
5c:28:0a:9c:38:56:ea:eb:a5:49:db:8c:a0:01:e5:
49:76:68:fb:3a:c4:5e:1e:a8:02:10:c2:b0:5e:61:
21:92:f4:db:b0:d4:d2:06:66:d3:e7:20:08:cf:c6:
5d:10:a7:d6:87:76:42:0b:dc:bb:c0:1f:d7:a4:80:
93:ca:70:7d:d7:a3:cb:7c:93:37:21:db:43:f6:81:
0f:4d:5d:e8:c0:0c:00:15:0a:f0:5d:b5:36:06:50:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:82:3C:6D:5E:9D:C6:1B:DA:8C:09:B1:3B:41:0F:7B:D7:B8:D0
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:75:3e:82:b1:7a:21:d8:1e:28:74:5d:bb:7e:ae:ef:9d:e2:
52:fc:5b:12:f4:bb:73:86:57:25:a0:68:9d:09:55:bb:6a:44:
9d:b1:2a:9f:68:d9:a8:79:40:9d:7d:f4:7f:06:52:86:91:95:
d5:fb:39:f3:45:1c:57:28:c2:cd:a7:1d:58:6a:6c:f6:91:48:
04:ac:51:9a:ac:ab:c9:3f:71:de:48:6d:3b:ba:ce:aa:7a:ae:
66:5e:a3:42:3f:aa:85:3e:8c:87:23:c5:09:a2:a8:4d:f1:d4:
3a:26:75:42:08:ad:23:74:18:f6:88:29:07:22:2d:b0:d5:71:
94:51:16:f4:72:7e:eb:05:02:07:cf:47:19:f2:91:3d:d2:f8:
8e:58:fe:e5:dc:55:9f:3e:8e:35:bf:75:f5:56:d0:78:dd:d1:
51:ad:df:36:43:fd:bf:5a:e2:3d:cd:23:90:7a:4b:47:9b:59:
18:e4:fb:f6:1f:eb:97:cb:a8:d1:a6:1c:7b:43:0b:90:37:f3:
48:99:57:df:a9:4e:7f:e6:11:2d:32:1e:b9:ea:fc:a2:ce:65:
ce:fd:33:d2:af:82:ee:cc:9d:e9:a9:ca:e2:b7:b9:48:72:5c:
4e:98:45:8e:55:5c:01:2a:65:5c:c9:e6:cd:a9:ef:fe:25:47:
56:e5:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:30 2025 by rpki-client