Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: J7Ylm5RJY++868j12Yndue+b0BJh5HhsguCWlIPjrb4=
Subject key identifier: 05:0A:40:A7:B8:16:68:34:74:13:9F:E1:09:FF:A8:2A:30:2B:18:CE
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0198D4E082CE22AA3D2151C2121C6F35F0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 1083
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: ERde7J0eCf+nQHV48dFIV7G2p6r1KLQhlShXlle8ssE=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:82:ce:22:aa:3d:21:51:c2:12:1c:6f:35:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=050a40a7b816683474139fe109ffa82a302b18ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:da:f7:04:91:65:f5:bd:8f:f0:da:b3:55:
fe:cf:e2:a1:37:d5:b4:18:54:f8:34:8d:50:fe:91:
de:3c:05:ea:40:d1:aa:5e:f5:b7:07:12:d2:17:45:
37:cd:71:64:af:ef:fe:95:9b:9c:25:92:12:91:12:
b9:da:7e:a6:50:69:92:79:97:45:7e:6a:a4:3c:8b:
c8:a6:f8:72:aa:51:30:35:58:03:b8:67:83:65:7e:
b2:06:fd:6d:e7:01:40:4d:67:f0:6b:11:19:dd:c8:
5c:28:e4:e3:eb:cb:89:74:de:58:bb:bd:b2:b7:d5:
90:24:75:d4:66:42:2b:bc:20:bd:55:b0:c8:55:16:
41:6c:b3:ba:f0:36:c3:7f:50:f2:6e:1c:db:99:01:
69:03:75:d6:ce:cb:e7:06:ae:fe:35:ea:b3:a7:84:
b5:2c:bf:3c:0e:e9:d0:12:04:20:55:5c:f5:b0:19:
8c:67:c0:40:79:2d:e1:5b:6d:eb:26:cf:64:b0:4e:
51:47:fe:d7:cb:59:4c:ca:bd:c3:f3:b2:19:68:64:
85:88:19:39:0b:a3:b4:7a:17:a2:b3:2c:22:09:51:
09:68:f0:49:ba:f1:71:2d:f3:82:b3:e9:b9:c4:42:
38:e3:e4:0d:be:f8:88:f9:11:ae:f4:c8:a2:23:23:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:40:A7:B8:16:68:34:74:13:9F:E1:09:FF:A8:2A:30:2B:18:CE
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0d:5d:06:b1:66:c4:79:5e:b8:96:9e:12:df:b2:fe:87:2b:
8e:a2:d1:03:d1:cf:71:67:8b:80:de:9b:5e:12:6a:07:c3:93:
2a:1c:2a:29:23:72:27:53:67:0e:45:97:11:4a:d7:26:88:a6:
94:51:7c:74:25:3b:0b:c7:a5:0c:4a:d9:b2:9b:6d:cf:52:a0:
2e:2c:dc:0b:bc:49:96:39:bc:5c:15:20:10:49:63:e0:e0:28:
4b:79:0a:2a:a9:68:66:94:63:4a:52:e4:93:84:8f:92:f9:d8:
71:b8:93:58:7f:88:18:8b:a2:73:eb:61:2a:aa:12:ec:c6:57:
8d:a1:76:10:98:2d:b6:8c:b5:f4:37:bf:4e:15:dc:a3:83:00:
af:6a:7c:60:75:40:2d:7c:3e:6d:65:e7:dd:67:1a:0f:b3:69:
f4:cb:76:95:55:d3:62:fe:ae:ef:c2:cc:e4:a8:ac:5d:a7:ae:
44:2a:a6:c5:e4:71:96:28:55:8b:ca:19:4f:5a:13:88:0f:65:
23:6d:83:dd:dc:67:54:14:12:d0:54:3d:8b:7b:bf:b1:e2:d3:
94:3d:99:49:c6:8a:63:7c:30:ac:2e:51:4b:f4:b1:f8:27:b0:
72:5a:10:65:f6:91:f4:e8:a2:5d:4d:8d:4b:97:21:1f:14:63:
50:e2:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:11 2025 by rpki-client