Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: JdaiM4HPI0VEU8Mp0nC8nUywNn4mrSwkJ/Htg8yP+P0=
Subject key identifier: 7D:35:BD:EC:9A:07:63:FA:4E:D2:02:FF:A3:FB:8D:E9:B3:54:99:29
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0199FF593ADE2ADBF29D0F42C6738AADCD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 1392
Signing time: Mon 20 Oct 2025 02:01:01 +0000
Manifest this update: Mon 20 Oct 2025 02:01:01 +0000
Manifest next update: Tue 21 Oct 2025 02:01:01 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: /emC38PzRdmBmTvKtRU4PB9nVSQqut5UgJjWGz9K8no=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:3a:de:2a:db:f2:9d:0f:42:c6:73:8a:ad:cd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Oct 20 02:01:01 2025 GMT
Not After : Oct 21 02:01:01 2025 GMT
Subject: CN=7d35bdec9a0763fa4ed202ffa3fb8de9b3549929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:2e:73:61:01:eb:59:fa:31:b4:80:b6:96:
8f:26:1e:ae:cc:24:89:7e:c3:c4:38:cc:c3:a0:ee:
70:25:fb:a0:2c:61:23:34:7b:cb:75:09:22:38:32:
ce:96:b5:7b:5e:53:2e:38:15:5b:5c:00:e2:2f:7e:
92:9d:57:8d:48:65:f8:b2:6e:5f:bf:bb:56:18:ab:
76:f8:50:6f:25:31:cc:18:bd:b9:81:a0:86:77:55:
df:a2:09:8c:80:27:a0:ef:18:9f:46:3c:33:f7:2d:
4a:d9:c9:7b:ec:c9:99:78:40:9e:b3:e8:3c:9e:3d:
f0:06:62:8f:e3:b5:38:13:e3:ff:d9:a6:a5:5f:20:
3f:a1:01:e3:74:50:2b:f5:13:b3:c0:3a:b8:7a:c5:
3e:7e:d4:97:48:f3:66:46:62:67:22:de:bf:b0:f4:
5f:73:f4:78:4d:70:60:46:c4:e9:ea:a2:98:4d:40:
b7:89:5b:fa:1b:22:4a:0a:83:01:12:01:8d:15:90:
ad:f1:e3:6a:ba:28:05:3e:68:12:b4:29:80:0d:c1:
e5:01:33:1d:2e:69:18:02:83:2c:f8:a2:a8:4a:b1:
16:f1:76:02:42:0e:7e:e7:9d:76:61:d4:fb:e3:1d:
85:84:18:d6:c9:2f:ec:9f:4c:e4:3d:bd:c7:67:be:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:BD:EC:9A:07:63:FA:4E:D2:02:FF:A3:FB:8D:E9:B3:54:99:29
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8c:6f:19:64:34:2f:b8:6e:8b:64:08:86:66:07:20:23:56:
70:2a:90:bb:09:6c:a7:9d:b6:1c:48:75:86:05:42:48:aa:59:
ab:4c:fe:c7:3c:25:43:b1:ac:9c:40:3c:d1:c3:b3:ba:bc:be:
af:e5:bc:a2:a4:c4:32:f3:39:8b:fa:c1:20:30:54:a0:86:73:
2a:41:31:9b:1a:6b:74:fc:a9:71:39:09:ac:32:23:c6:ef:61:
55:23:6f:6d:8d:0a:70:35:1d:aa:cd:20:11:a7:b1:86:96:88:
05:4f:f2:43:a5:c2:14:16:f0:ae:e4:d9:8b:89:e7:29:a4:40:
c4:06:00:5c:5e:26:a2:8f:ca:cf:6d:7b:ec:d0:63:4a:1d:1a:
bb:51:1c:cd:38:a2:3d:a9:cd:c2:58:30:d2:e2:1f:36:a6:ad:
f3:f8:07:df:b8:7f:4e:f8:ea:17:2a:99:a7:4b:1f:17:16:ec:
85:1b:ee:0b:62:2d:6a:04:41:75:a2:6e:4c:19:27:ed:ab:90:
f9:44:79:b2:a3:fd:f5:cc:80:2e:f2:e5:36:fb:cf:0a:4a:3f:
b6:e5:2d:26:e3:ed:4a:45:37:e2:10:3e:ca:e7:ee:41:fc:fa:
07:60:96:03:02:70:7e:79:a2:da:e3:ce:d2:36:ff:ba:44:06:
cf:6a:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:08 2025 by rpki-client