
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier: YrQI1eJlMnZvw5YMFD6th81TPfD2FT1PbWiANDqFwDI=
Subject key identifier: 79:39:78:C2:60:A0:04:65:CB:77:43:6A:C3:4A:8D:E6:54:A2:36:65
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial: 019873E22FD7DC8B7187BACCB87B963AD968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number: 0A9E
Signing time: Mon 04 Aug 2025 07:00:59 +0000
Manifest this update: Mon 04 Aug 2025 07:00:59 +0000
Manifest next update: Tue 05 Aug 2025 07:00:59 +0000
Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: mIkeZP/ZHs2RR8YSXUXBq3DQB3XzdTSoFVw+eA1yXqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2f:d7:dc:8b:71:87:ba:cc:b8:7b:96:3a:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Validity
Not Before: Aug 4 07:00:59 2025 GMT
Not After : Aug 5 07:00:59 2025 GMT
Subject: CN=793978c260a00465cb77436ac34a8de654a23665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:60:61:d0:c1:3b:75:a7:d0:35:a6:7f:bb:
c5:8b:0e:41:4d:ae:1c:a4:a2:1f:de:c4:14:44:6b:
84:0c:e9:55:fa:b2:5a:ac:97:fd:aa:d2:a7:4e:96:
f4:02:86:e8:24:05:76:42:f7:44:4f:ce:b1:10:1f:
d6:cf:42:41:ba:8c:d3:00:08:7a:ca:91:a7:6c:3a:
b3:7d:66:fc:14:62:b1:88:65:df:4d:09:65:d2:a8:
af:24:b2:8a:34:2d:d7:43:18:09:7c:ac:d8:cb:11:
ef:73:cb:29:de:ef:c5:27:82:f5:86:d4:21:82:c1:
68:78:7c:38:e0:cb:c9:0a:04:0c:3e:a6:38:ba:82:
90:3a:15:a2:df:dc:0f:5f:59:75:93:64:56:ed:19:
25:0b:c2:00:4d:75:9f:15:1b:00:c3:2c:bb:b6:9b:
0a:be:39:a3:83:a3:dd:a0:0d:b1:a5:3a:be:f1:18:
bf:d0:27:f3:bf:5d:73:61:aa:0b:b9:50:31:18:88:
52:1c:3c:d9:a6:c2:7d:fc:b3:d9:76:37:97:a4:0f:
45:8c:9b:3f:27:8c:ef:25:4c:a0:f3:25:76:40:74:
14:bb:41:07:5a:97:ef:39:ae:b3:b9:3b:28:fc:b7:
80:73:82:3c:cb:85:c3:c0:bb:67:07:29:72:dc:70:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:78:C2:60:A0:04:65:CB:77:43:6A:C3:4A:8D:E6:54:A2:36:65
X509v3 Authority Key Identifier:
keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:86:ee:4f:ea:20:5a:68:83:38:b9:4a:23:e5:34:48:47:
65:d4:3a:8d:b4:33:38:22:b1:48:bf:7f:d1:16:fc:7a:d8:bd:
65:bf:45:73:fc:ab:8e:9e:05:3e:dd:5f:e2:b0:b0:8d:45:3a:
db:2c:df:3a:4b:a4:8a:70:8b:61:ed:8e:7a:c5:92:4f:03:af:
90:98:af:d2:47:31:5e:6e:9c:fd:de:d5:69:80:cc:c7:29:8d:
0c:66:ab:7f:b3:5f:e9:0b:cd:c8:41:7b:53:d9:3c:3e:0e:f7:
f7:7f:ae:66:98:da:a2:ae:12:d5:90:99:21:54:da:23:d9:31:
08:7a:c1:77:f1:9a:50:25:40:c8:7e:cc:5c:0f:43:f2:1d:c7:
c5:eb:4c:e6:f8:79:6c:5c:ac:68:79:76:31:2b:3b:78:fe:3f:
e4:d5:51:6a:01:49:ac:07:3f:fb:9c:c4:5f:0c:70:a7:12:4c:
0b:b7:cf:a0:fb:88:c0:a7:81:37:e1:43:42:d3:4c:e2:d0:9e:
2b:30:9f:a8:46:78:d2:89:b8:ae:ef:cf:66:81:2a:47:a1:b6:
1d:9c:60:cf:9a:d2:8c:10:84:f8:41:ac:3a:1b:cd:93:68:1b:
a1:28:d8:ca:e5:ee:3f:79:ca:63:05:bd:ad:64:24:0e:87:dd:
dd:13:10:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4i/X3Itxh7rMuHuWOtloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZTNhZDhiMDIyNDUyMWNkMGFlNzQ5MmM2OTRiYzJkNGVl
MWZkYjIwHhcNMjUwODA0MDcwMDU5WhcNMjUwODA1MDcwMDU5WjAzMTEwLwYDVQQD
Eyg3OTM5NzhjMjYwYTAwNDY1Y2I3NzQzNmFjMzRhOGRlNjU0YTIzNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzolgYdDBO3Wn0DWmf7vFiw5BTa4c
pKIf3sQURGuEDOlV+rJarJf9qtKnTpb0AoboJAV2QvdET86xEB/Wz0JBuozTAAh6
ypGnbDqzfWb8FGKxiGXfTQll0qivJLKKNC3XQxgJfKzYyxHvc8sp3u/FJ4L1htQh
gsFoeHw44MvJCgQMPqY4uoKQOhWi39wPX1l1k2RW7RklC8IATXWfFRsAwyy7tpsK
vjmjg6PdoA2xpTq+8Ri/0Cfzv11zYaoLuVAxGIhSHDzZpsJ9/LPZdjeXpA9FjJs/
J4zvJUyg8yV2QHQUu0EHWpfvOa6zuTso/LeAc4I8y4XDwLtnByly3HDsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk5eMJgoARly3dDasNKjeZUojZlMB8GA1UdIwQY
MBaAFGnjrYsCJFIc0K50ksaUvC1O4f2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2Qt
ZTk3ZDIyNmZiZWVhLzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2QtZTk3ZDIyNmZiZWVh
LzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbv6G7k/q
IFpogzi5SiPlNEhHZdQ6jbQzOCKxSL9/0Rb8eti9Zb9Fc/yrjp4FPt1f4rCwjUU6
2yzfOkukinCLYe2OesWSTwOvkJiv0kcxXm6c/d7VaYDMxymNDGarf7Nf6QvNyEF7
U9k8Pg7393+uZpjaoq4S1ZCZIVTaI9kxCHrBd/GaUCVAyH7MXA9D8h3HxetM5vh5
bFysaHl2MSs7eP4/5NVRagFJrAc/+5zEXwxwpxJMC7fPoPuIwKeBN+FDQtNM4tCe
KzCfqEZ40om4ru/PZoEqR6G2HZxgz5rSjBCE+EGsOhvNk2gboSjYyuXuP3nKYwW9
rWQkDofd3RMQ8w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:15 2025 by rpki-client