Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: 3qlr4CMHXGq2C9xHi1uSJxLHmQ0KPZl2u6v2pLWrLyQ=
Subject key identifier: 6E:43:9D:9A:2E:88:0F:A6:8B:E2:F8:7C:E5:CE:B6:BE:6E:24:D3:E1
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 019A4D05CAFE4966CF3AB0614131256B16FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:00:16 +0000
Manifest this update: Tue 04 Nov 2025 04:00:16 +0000
Manifest next update: Wed 05 Nov 2025 04:00:16 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: YqGt1PJnN9aBQEYzH3HM3ywFY9rosrfFKdg+0L/3Xq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ca:fe:49:66:cf:3a:b0:61:41:31:25:6b:16:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Nov 4 04:00:16 2025 GMT
Not After : Nov 5 04:00:16 2025 GMT
Subject: CN=6e439d9a2e880fa68be2f87ce5ceb6be6e24d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:2b:51:82:f3:a1:47:26:62:60:1a:4f:c5:
f3:51:34:24:18:b3:9c:1e:ae:b4:a3:c0:a1:fa:fc:
a0:1a:4a:0f:d0:05:49:2c:da:1d:42:53:eb:da:3e:
a4:86:e8:15:77:e2:d0:2c:2d:39:a1:ff:64:24:4e:
95:ab:e1:a9:b2:aa:06:4d:d3:75:7b:46:cf:17:40:
b7:3d:1f:a7:73:fc:98:75:b8:aa:37:ad:66:73:78:
5d:fd:28:d5:24:ce:92:94:64:2c:19:ea:8f:7b:8b:
3b:ee:36:82:bd:39:e4:50:54:24:23:1a:9f:af:bd:
d7:ca:84:50:e4:73:24:dd:75:90:d5:9a:27:6a:5f:
66:4f:cf:0e:4f:2e:ca:21:ad:35:48:95:9b:5d:8b:
ad:f4:45:37:3f:f4:4a:7c:a5:01:44:91:04:14:6c:
21:1c:57:72:6f:20:d7:5f:67:e2:a5:fc:79:8b:fe:
ad:0c:23:6d:c8:5f:dd:6f:39:7a:c9:16:34:c9:b4:
21:8c:f4:3a:76:04:06:03:f2:7b:e4:26:c5:31:9d:
61:64:f6:9c:8c:39:28:46:0d:69:b4:ec:1d:ee:a4:
f0:4a:f9:ff:0d:d0:e9:71:23:03:a5:a1:58:7c:19:
2b:ff:28:ee:43:b3:32:f0:01:0b:a8:2f:41:07:03:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:9D:9A:2E:88:0F:A6:8B:E2:F8:7C:E5:CE:B6:BE:6E:24:D3:E1
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:00:a3:e6:38:bb:f8:f8:d4:7b:98:95:08:d3:b0:31:c1:d9:
24:4b:ea:76:af:ce:6a:23:89:d8:47:bc:0f:1d:e6:20:66:a1:
28:3e:32:68:6e:df:c7:5c:33:ce:c6:2e:98:16:ac:da:53:b8:
f9:e2:44:bc:f8:0d:0c:86:89:8d:37:61:ca:0a:b9:74:fc:43:
a2:35:03:0c:41:f1:f6:e6:e6:95:5f:c9:31:42:0a:2d:4e:54:
31:c1:c3:ea:e7:16:0f:c8:bc:1d:66:d9:ae:f6:05:60:2b:98:
14:5c:87:4b:45:71:37:34:94:46:8d:a7:94:f4:38:88:19:38:
e0:2d:e2:d5:23:28:7d:5f:71:df:55:fe:bb:09:9f:ac:02:fb:
cd:e1:2b:cb:e0:10:94:29:98:dc:61:54:94:9b:ee:18:7b:84:
cc:58:7a:e9:33:c3:c7:59:f3:39:5e:59:96:46:1c:3a:ff:5c:
52:80:ca:ac:96:51:ef:df:c8:6b:1d:be:48:ea:a7:bb:e0:9c:
cd:05:bd:4b:3d:32:83:f7:9b:e5:7f:cf:c1:98:d1:8a:58:2b:
30:57:65:cc:a1:58:aa:22:ae:74:fa:62:88:89:47:e4:a3:ab:
c6:1f:7f:e0:b9:2f:37:db:7d:ea:c1:e0:00:2b:9a:df:5f:1b:
d7:da:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client