Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: zsd0g4PM6q90wD+9MKi1hgSoCgt6xpVN9D3qgKaVJpo=
Subject key identifier: FE:BB:13:4E:A6:4A:18:A3:C9:21:C2:23:40:11:17:84:99:E8:D7:B0
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 01989ECC5A364B278B7DCC8D784647423BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 0836
Signing time: Tue 12 Aug 2025 15:00:49 +0000
Manifest this update: Tue 12 Aug 2025 15:00:49 +0000
Manifest next update: Wed 13 Aug 2025 15:00:49 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: Rrka8ajVyXfNx21HGd7CytQHKbH7dOs2tzu2C/EDsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:5a:36:4b:27:8b:7d:cc:8d:78:46:47:42:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Aug 12 15:00:49 2025 GMT
Not After : Aug 13 15:00:49 2025 GMT
Subject: CN=febb134ea64a18a3c921c2234011178499e8d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:f5:33:59:be:ae:5e:7c:8a:09:45:cd:46:
ad:bc:9c:3e:30:ce:c6:6d:3e:61:c8:77:ad:55:ac:
f7:58:3e:1b:c5:ca:b1:d6:d5:32:0f:89:68:1b:7e:
00:0a:2f:b8:2a:7e:c7:28:88:af:c2:b8:f1:b9:2b:
09:1a:d2:d4:2b:71:be:58:cc:40:d8:11:b9:46:d4:
17:08:6b:b5:84:0b:14:36:6a:53:b3:78:83:e5:88:
c5:25:84:e8:99:db:79:fa:3c:a4:4d:eb:04:fb:43:
3e:cd:88:9d:0f:93:c8:9f:99:6a:5d:01:77:1a:0b:
f5:41:c7:3d:19:9a:e5:30:1a:16:d6:40:e4:85:5f:
1d:0e:c4:8a:92:fc:cd:92:fe:da:ca:6f:2d:40:01:
12:99:63:b1:91:20:e5:69:f8:0f:07:5e:68:6e:35:
49:2b:20:9c:09:7d:ae:3a:65:08:b9:b4:0b:a8:7b:
7f:72:5d:1b:39:ba:89:a2:22:c1:1d:6f:28:8a:91:
1a:b8:f0:9d:a2:cf:b7:05:33:3a:71:ee:8b:e4:06:
27:1f:60:95:95:99:71:dd:0b:e2:cd:3b:47:db:da:
e8:51:65:42:1b:7b:2d:18:e1:3a:b6:b0:16:f7:b7:
58:1c:6e:ad:ac:88:33:b8:5e:a7:e6:0b:b5:0b:7e:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:13:4E:A6:4A:18:A3:C9:21:C2:23:40:11:17:84:99:E8:D7:B0
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:62:4d:f0:60:f5:38:39:0d:11:ef:53:2a:e0:01:90:9f:
7c:95:4b:c1:3b:e0:99:32:80:63:0d:64:b0:9d:4b:a8:86:dd:
9a:fb:78:e0:fa:73:03:6c:03:a8:70:9e:7e:78:00:5e:05:8e:
16:ff:3b:7d:32:bc:5f:fd:14:08:59:6a:3f:14:ee:dd:4f:55:
a9:a2:69:5b:8f:36:16:f6:a6:cb:b8:f4:14:5b:b4:cb:34:ea:
b0:fb:b3:5f:f4:42:74:34:41:ec:f7:34:48:a6:8f:e3:3b:1b:
6d:12:b9:c1:87:be:29:08:11:41:8a:41:00:d7:7a:f6:02:91:
87:a9:38:e5:1b:90:21:36:8f:73:ef:c1:5c:cc:1a:ba:a9:12:
e4:d8:40:16:d1:6e:68:a1:4d:e2:ce:83:ea:7d:83:1a:b3:c1:
2c:5c:fe:40:1b:79:90:99:39:dc:2e:d6:72:9c:a4:c8:75:f9:
8d:62:ab:fa:a4:b9:a0:ee:e9:e8:02:d3:60:dc:1b:d0:53:90:
d4:a6:01:85:65:1f:8f:e4:75:6f:4e:83:9d:74:3d:81:2d:0d:
86:13:fb:84:9f:6d:26:3a:3f:a9:e4:9c:b2:38:2b:45:16:b7:
28:40:b6:e6:98:4f:48:f3:0c:e0:31:dc:51:27:1b:7f:01:ba:
33:4c:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:03 2025 by rpki-client