Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier: owG+FCxdwsXTE1L/EqNLLLjDBS55Cy+A5DngxkxuR0g=
Subject key identifier: AB:A1:74:18:71:49:44:A2:B3:5D:FE:13:31:86:F7:B7:07:EF:6C:A7
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial: 019A4EF56B24A8A9AC433FCB8196D80F4156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number: 0B94
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: bVnzaQqmPQ3S662Tn0DlkUuatuKX9CE5SARECn1TJjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:24:a8:a9:ac:43:3f:cb:81:96:d8:0f:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=aba17418714944a2b35dfe133186f7b707ef6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:88:01:ed:18:14:99:b4:be:3f:61:01:a8:
d4:f6:73:cd:de:6d:fd:1b:59:f0:de:bd:d5:33:69:
47:1e:27:12:5c:12:fd:ef:93:f8:80:2f:f4:f3:a6:
fb:9f:6c:ef:03:68:95:97:26:38:69:2f:d0:29:a9:
ac:9e:06:ca:f0:33:75:48:7a:9d:18:1d:c9:26:39:
d5:68:7c:ef:0f:e2:b7:b5:18:2f:17:0e:d2:d2:7e:
4a:fe:33:2f:cd:4b:30:e9:8b:d5:50:92:d3:33:ce:
c6:57:f5:cf:65:73:ea:5b:7e:8f:00:7b:ec:d6:61:
3c:94:40:c1:b2:9d:54:0e:27:8c:62:b5:e1:ac:3a:
d6:5c:14:0a:e2:92:c0:01:0e:83:e5:ca:d9:72:2c:
d0:92:a7:26:ae:19:99:8f:eb:e5:10:3e:b8:36:17:
97:6e:01:71:fd:55:c2:3e:cf:a6:3a:d5:17:f8:dc:
94:53:c4:28:ad:93:c4:f8:cf:ad:1f:fd:23:28:c4:
b7:31:19:2a:93:cb:cc:da:bc:ae:57:2f:1d:ba:62:
a0:9e:fb:50:48:bb:fd:80:a9:ff:3c:2c:c2:dd:f4:
c0:08:c6:17:97:71:dd:76:2d:e3:37:60:28:9d:6a:
36:75:b2:c0:b1:70:f7:4c:b9:ee:aa:15:4b:c5:d6:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:74:18:71:49:44:A2:B3:5D:FE:13:31:86:F7:B7:07:EF:6C:A7
X509v3 Authority Key Identifier:
keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:5c:e5:ca:2a:90:c0:18:a0:67:94:b3:5e:ca:f6:61:94:
87:56:6f:2a:07:0d:0a:4b:da:ff:9e:3f:ca:c5:ca:85:bc:6b:
f9:9c:4a:63:a2:e7:9a:70:4f:57:31:a0:7c:a5:5a:be:c0:d8:
05:84:f3:09:8c:2c:ab:77:2f:fc:ad:d4:a8:3d:94:10:0a:7f:
c0:c8:da:ae:b4:ea:31:b5:14:b5:49:1e:7a:81:38:42:7f:fa:
84:e7:6c:63:2b:a4:30:6f:40:c3:b2:c0:c1:2c:6c:7f:5a:3c:
c7:13:12:fa:0d:db:ac:26:01:9d:4f:0c:4d:18:48:8e:0c:da:
60:89:c9:f1:95:cc:85:03:1d:53:d9:54:af:6e:34:fe:73:3b:
5d:86:b8:51:e9:e3:fa:1f:1d:a5:4f:37:bf:60:dd:fd:ab:a8:
1e:61:6c:8d:e0:6d:da:43:04:9b:6f:36:de:80:0b:45:ab:f6:
cb:79:f5:b1:06:99:38:fb:61:91:ad:dc:bf:2d:a1:f2:a4:3e:
97:2a:57:bc:26:61:2e:1d:43:fe:2e:11:24:53:4f:10:56:65:
8f:10:fd:c5:64:31:61:34:7f:28:55:28:1a:de:ed:1a:50:70:
35:bf:76:6a:52:4f:ad:f7:bb:d9:af:22:c2:02:79:a6:75:36:
92:dd:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:04 2025 by rpki-client