Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier: ymb/oIjZsjV/SbgO/bm07jddrCS+5FaFhj8QVr/5KAo=
Subject key identifier: DF:9D:D3:23:41:4A:9B:AF:70:C8:CA:3D:19:F2:EC:36:01:1B:64:9E
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 0198D8505B4A521298A23A4B2C71C5AEE89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number: 1549
Signing time: Sat 23 Aug 2025 19:03:21 +0000
Manifest this update: Sat 23 Aug 2025 19:03:21 +0000
Manifest next update: Sun 24 Aug 2025 19:03:21 +0000
Files and hashes: 1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: e65rBPOVCIBYoUDc94UGOJjb1uueO4kwlIxv71CdVJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:5b:4a:52:12:98:a2:3a:4b:2c:71:c5:ae:e8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Aug 23 19:03:21 2025 GMT
Not After : Aug 24 19:03:21 2025 GMT
Subject: CN=df9dd323414a9baf70c8ca3d19f2ec36011b649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:79:df:fc:3d:bb:f0:b0:6e:8b:00:db:df:
9b:ff:7a:5b:bf:a5:06:14:24:8c:35:9d:6a:7d:f8:
d4:e8:eb:79:de:f1:88:d9:05:00:c7:27:01:21:0b:
1e:1f:a5:b0:45:2b:1e:1a:e6:0e:40:49:6b:9b:fa:
d7:d2:c0:f1:27:4a:81:37:16:e5:2d:de:e3:c0:cd:
a4:bf:a6:e9:6c:86:29:c6:95:6d:5f:8e:22:3c:40:
30:0a:06:c3:59:d9:08:d6:60:db:f7:9c:ec:41:c5:
f4:c9:4c:e1:bb:f7:8f:af:95:a0:c5:0a:15:2b:c2:
d5:5c:25:00:52:f1:72:9e:59:c0:66:23:cc:0d:28:
0a:13:22:32:e5:5f:17:fc:4b:07:46:2b:82:35:2a:
c4:9e:ea:c1:f4:e4:40:0d:f9:ea:ab:f1:eb:fa:69:
ff:fd:ba:5a:76:c2:db:50:aa:8b:cf:0f:b2:a1:38:
9e:73:38:d8:fd:28:a2:1b:15:4d:67:78:68:4f:e0:
d9:63:23:5f:b3:de:bd:ad:6b:d0:d5:f0:f6:d1:07:
8b:4a:92:14:aa:96:c3:af:f6:0a:b0:7e:a1:4f:91:
8f:af:9f:36:53:8f:73:d1:7c:3e:80:a7:7e:29:9f:
f4:14:88:79:4e:3c:2c:12:4c:36:88:9d:bb:9d:c5:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:D3:23:41:4A:9B:AF:70:C8:CA:3D:19:F2:EC:36:01:1B:64:9E
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d9:ab:b6:de:9b:66:b5:b8:da:86:7c:47:a7:37:02:57:5a:
45:06:ee:fe:4d:e8:75:74:8d:f2:7f:66:00:a1:9d:61:a4:72:
a3:97:8d:d1:c3:2c:13:b4:88:2a:1f:cb:e7:3a:42:19:7b:e3:
f6:17:17:e6:47:fe:69:3d:ef:d2:1d:ac:50:23:41:4a:98:70:
9c:29:ad:23:fa:16:4c:55:83:0c:b6:d3:5a:06:f0:45:11:ae:
01:3b:cb:dc:11:03:24:92:0e:e8:7a:b6:c2:65:b4:20:21:36:
97:7b:79:3f:c7:0a:74:b8:3a:a2:8a:e4:69:de:5d:8c:fc:9c:
b7:e9:7b:bb:82:51:94:7e:c0:16:3f:4d:9c:c9:d8:eb:c9:9e:
15:0f:7e:f5:dd:a2:40:89:36:6f:d6:e4:d4:51:f5:01:0f:b2:
42:4d:ff:96:48:86:8d:12:e8:cb:df:ff:27:41:71:a3:e0:87:
fc:16:f2:09:06:81:77:fa:8a:ee:e8:20:f1:11:3f:c5:34:26:
11:5c:a1:20:70:9d:d3:bb:aa:7c:1c:bf:87:4a:7d:5d:08:62:
2e:29:c1:11:81:33:b6:68:d6:a1:fd:ba:40:b5:00:4b:1e:46:
75:ad:95:0f:67:72:78:37:df:a7:af:f2:19:6c:78:f3:d5:25:
f7:2f:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:20 2025 by rpki-client