Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: fin4/zB5lr6k79cj7rypQ0r7I3P986zi3eAnuhnJD74=
Subject key identifier: 76:B7:37:E6:6A:F6:DF:94:9A:27:05:F3:01:C4:27:E8:55:C9:E1:BE
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0199FE46DBBAA0009B491CC77B94300EBDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 111D
Signing time: Sun 19 Oct 2025 21:01:20 +0000
Manifest this update: Sun 19 Oct 2025 21:01:20 +0000
Manifest next update: Mon 20 Oct 2025 21:01:20 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: wuH6NYCT5KZxn0qEFKmm+SLo4rIDsrmRnJ3EokR5x5I=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:db:ba:a0:00:9b:49:1c:c7:7b:94:30:0e:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Oct 19 21:01:20 2025 GMT
Not After : Oct 20 21:01:20 2025 GMT
Subject: CN=76b737e66af6df949a2705f301c427e855c9e1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:5f:df:f8:e7:f7:e0:2f:d2:b4:ad:89:c6:
1b:25:a5:18:3c:64:30:dd:c1:11:81:22:72:db:38:
5f:19:ef:ae:c5:d9:61:9f:8e:57:f9:37:cb:78:22:
cb:e3:99:cc:06:8a:78:55:b8:77:8b:5e:a7:9c:80:
51:af:d7:52:09:37:6a:9e:94:04:62:34:d0:33:01:
3f:d7:16:5c:db:1a:d3:40:79:6b:7e:4b:a7:8c:bb:
4b:4b:83:bb:c3:b9:92:82:45:b6:79:95:56:a7:19:
32:fe:c6:06:f1:8e:49:8f:f5:c0:d3:58:22:30:31:
2f:70:b9:34:9d:b3:62:bc:84:58:c5:27:4e:00:ac:
4f:35:12:74:b5:79:b3:e8:6d:4f:0b:4f:2a:f6:b2:
3a:29:60:30:f8:27:de:9a:03:69:38:85:ec:2a:49:
7d:6a:f1:56:5f:73:0a:0f:11:7a:6a:80:de:b6:b6:
91:9d:6f:02:a0:25:d8:2b:39:00:81:57:03:cf:04:
28:24:51:29:0c:59:93:47:bf:e8:ff:34:91:46:87:
dc:5b:45:93:60:34:fd:78:c4:9b:8b:84:df:68:ac:
46:10:93:3f:6d:59:c4:76:0a:61:ed:ee:e9:ca:47:
fc:57:53:19:6f:a6:1b:17:12:f0:ea:6e:e6:8c:a0:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:37:E6:6A:F6:DF:94:9A:27:05:F3:01:C4:27:E8:55:C9:E1:BE
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:27:16:72:a7:3b:f5:1a:3e:5e:28:10:ea:9c:22:84:ff:47:
de:15:7d:5a:70:e1:8a:a5:5f:85:a6:b8:09:68:17:e9:0c:81:
35:90:76:b5:03:d4:d3:cd:b7:90:8d:d2:4a:0c:45:75:54:64:
e6:09:ef:f6:b7:6e:db:67:d9:10:87:b4:bb:45:ea:97:ac:f2:
9e:0f:b7:72:25:d3:68:fb:aa:c0:ea:9f:e0:a9:2c:e3:ab:b7:
f3:c0:2c:d4:70:4f:3b:3d:d6:83:17:59:e2:9c:5a:85:45:6d:
43:8f:2e:27:6b:9b:5e:70:02:6f:92:d6:3f:f6:80:7d:12:c6:
0a:98:cf:83:14:81:bd:56:eb:7c:6e:ae:c7:a3:d7:29:69:83:
74:67:d9:11:39:d5:a1:f8:56:4d:0f:5e:c7:dc:23:a9:8c:8f:
f5:06:31:5a:f3:4e:66:2c:e3:67:3a:d0:87:03:a1:0c:21:c8:
18:ff:33:b7:68:b3:e8:09:df:30:6b:5a:b9:41:eb:85:f2:5c:
3f:45:44:8d:04:69:55:91:83:be:a4:18:1f:79:81:00:7d:d3:
44:a6:46:b3:84:f1:29:6f:71:8a:4b:90:da:73:73:6a:91:62:
7f:75:f5:e5:9f:00:5c:65:aa:53:07:09:d2:47:39:11:28:20:
40:7e:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:15 2025 by rpki-client