Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: OrFyjS3OASj3GJ/epTcVNWMZcKtA5ZWeQPLFqsDDb40=
Subject key identifier: 37:3E:E8:1E:19:EA:0E:86:2B:3C:1A:64:F8:A2:15:B9:C1:F9:60:C8
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 019873E25AC8BE0157D47E30F979BBCBBFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: nG1ZVIPm/+jS7l5Ejz2PI58aJg7aqxxzDuhfT5KXVRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5a:c8:be:01:57:d4:7e:30:f9:79:bb:cb:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=373ee81e19ea0e862b3c1a64f8a215b9c1f960c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:a7:07:eb:99:70:45:54:a2:78:db:a7:20:
1c:7f:dd:2a:8d:39:e0:06:d3:a8:46:f6:eb:17:7f:
93:5d:cb:e4:2f:48:ff:8f:af:07:72:69:19:20:c7:
eb:8b:6e:92:96:c9:08:06:28:1c:ff:d8:3f:47:17:
b9:d2:12:50:52:f5:93:6b:ca:d9:d6:99:a8:28:98:
7b:cb:94:70:6a:0f:8b:3b:7f:34:c6:72:e0:e9:d5:
75:48:ed:7a:8b:41:ba:50:51:a7:c8:22:29:78:8a:
32:a2:56:dd:91:3a:0f:c7:94:42:4d:d8:57:e4:11:
1c:7e:b4:86:6d:0e:ff:a0:e5:20:da:a1:86:9b:ea:
cb:ca:e5:3a:ac:92:75:72:6e:44:5f:9d:42:4f:3b:
15:cf:d9:55:6f:6b:69:bf:8a:e8:96:b2:59:ca:a4:
43:2a:bd:2c:be:07:47:f8:ad:ee:d6:9c:69:64:12:
8e:c0:18:47:12:23:dd:ad:15:6d:12:3b:f8:46:96:
d4:3a:0e:79:50:14:25:bb:4c:f0:af:b5:e3:17:94:
01:35:b5:70:ff:2e:2d:e0:fc:df:4b:4f:08:0e:4e:
f0:e3:cf:c5:0c:e6:ae:9b:6e:10:df:46:4f:a4:68:
35:1c:46:35:f9:e5:ff:47:3f:9e:f0:de:2b:62:72:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:E8:1E:19:EA:0E:86:2B:3C:1A:64:F8:A2:15:B9:C1:F9:60:C8
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:55:06:85:91:e5:60:f8:b1:8f:10:c9:31:3e:c1:e0:cf:
4b:0a:4c:a9:12:28:19:f8:ef:10:22:22:d8:79:7a:e0:e8:48:
e9:1b:05:94:e1:95:9f:75:8d:a6:09:47:14:65:72:e1:d3:6e:
af:f3:f1:fe:13:cd:11:01:d3:2a:be:7a:16:23:c6:1a:b1:4a:
ed:70:10:43:0c:db:6b:d0:2b:ec:95:fd:6a:91:e0:3a:93:d9:
3d:f0:b0:eb:d1:3e:83:11:ea:52:a2:1c:84:4b:87:2f:93:8a:
5e:c5:83:ec:0d:0e:a3:a8:18:ea:19:0d:ea:98:7f:0f:71:58:
ae:ab:8b:41:f8:94:fb:25:23:4c:5e:52:0b:05:d5:4b:74:fc:
d8:20:ae:0d:ed:c3:89:90:13:60:0b:22:d7:dd:34:cc:c3:2d:
e5:04:18:9b:c7:27:03:80:d7:43:29:18:79:cf:5e:18:09:9f:
d1:7c:be:68:08:f7:95:8a:50:b1:c7:75:40:75:8b:14:45:49:
14:96:6a:31:3e:f6:9e:8f:6e:92:08:0c:de:7f:8f:46:1c:d7:
92:ea:b5:b5:b7:42:45:cb:14:3d:9e:30:e0:0d:ce:e7:18:ac:
fa:5a:d5:61:2f:79:42:6b:c5:fb:26:d4:35:0f:8c:be:d4:2c:
34:fa:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:11 2025 by rpki-client