Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: V7ExdHebBe3bspDAqIMXEj5qtrO0HpJbEetpSMyQ6aA=
Subject key identifier: 81:19:47:6A:41:D4:34:05:EA:95:02:F1:7C:3B:49:7C:12:E6:FA:DE
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019A50071B543498A8FC21D3DCB06A0F2A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 1342
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: 4Xt/k1coF/zLwVB2FROa14CNjR85cmoiY2dmE/N44jg=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1b:54:34:98:a8:fc:21:d3:dc:b0:6a:0f:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=8119476a41d43405ea9502f17c3b497c12e6fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:b3:45:4f:a9:fa:04:54:9f:ec:4b:86:d3:
85:d0:15:f0:5b:48:c9:6f:c5:63:11:94:98:07:38:
4a:88:9b:58:ad:5a:d0:0c:af:4a:d9:97:ee:d3:4e:
fc:d6:ee:b6:bf:5d:3a:4a:28:1b:8b:4d:c9:a4:51:
8a:56:ba:5b:c0:a7:2d:05:39:df:16:81:51:94:1d:
8a:ac:72:c8:3b:88:d9:d8:cc:ac:41:59:77:eb:27:
2d:1d:fc:70:7e:35:7f:2b:c1:b6:fd:37:0f:ea:6b:
20:8e:db:07:27:af:78:f1:81:cd:69:f8:a2:82:7b:
11:a4:ed:71:31:1a:bb:23:70:b8:c3:76:f6:f7:bf:
07:11:68:14:a4:09:2c:51:84:1f:4d:95:27:82:23:
4f:cc:6e:dd:59:c8:b4:c5:a8:c0:a3:c7:3e:1c:23:
bc:60:28:93:51:bb:6f:c6:2a:09:81:19:65:6a:50:
d6:58:30:fc:80:2d:b1:e2:1f:8f:f2:ff:6c:86:90:
e8:7f:f6:e5:47:b8:47:a5:18:97:d6:01:21:49:f8:
b5:2e:cc:1a:a0:52:2e:3f:b5:4a:c8:08:66:ee:2e:
84:5b:83:6d:4e:b5:76:d9:ba:33:99:10:99:ab:f3:
00:90:54:5d:88:05:a6:54:dc:d8:0f:38:cf:09:16:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:47:6A:41:D4:34:05:EA:95:02:F1:7C:3B:49:7C:12:E6:FA:DE
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:05:1b:56:ba:4f:c8:15:86:f8:dd:db:d6:73:41:5f:db:
ad:48:42:dc:8f:29:4e:87:cf:c7:b6:fa:8d:48:c5:37:48:e2:
48:b0:e4:22:96:15:c7:16:6c:ea:25:48:5b:f5:df:50:26:4c:
55:42:bb:e5:6e:83:b2:6d:51:84:66:de:9b:a8:11:e4:e5:61:
e5:3f:bf:e2:38:1b:d6:e9:5d:5e:5f:94:26:7f:61:fc:6f:da:
c1:7d:a2:0c:57:09:2b:6a:2b:53:33:0f:ee:4c:88:be:9c:e8:
07:c1:05:f2:87:87:28:3a:dd:95:ef:e3:91:30:6c:d3:5f:3c:
97:92:86:8e:c8:fa:60:a7:5a:8e:d1:7a:a6:a0:c4:21:04:78:
a0:59:51:f1:f3:ff:bb:0a:88:a7:3e:75:8a:7d:d2:d9:ad:8c:
92:2b:3d:be:39:5f:8e:de:21:52:54:ea:77:e2:6f:b5:72:80:
c6:21:7c:f4:be:b4:bf:54:b5:4e:d0:3b:f8:57:31:8c:a2:2a:
fd:53:a7:7c:1f:16:7a:1e:ec:8e:de:16:3f:bb:76:e5:9f:e2:
2f:3d:40:3f:f1:61:bc:c5:47:d6:dc:16:94:d2:ee:4a:bc:78:
9b:87:c4:f8:c3:cc:1c:3f:02:be:1c:e0:8e:88:24:40:eb:f4:
ef:29:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:19 2025 by rpki-client