Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: cetz497pSTL0Oy42KVEj7+hllQmB4I0bCIKmJDGLge0=
Subject key identifier: 4A:FB:6F:C1:A3:A5:29:8E:15:11:80:35:05:BC:51:B6:CD:60:6A:33
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019887D66B64518BE1782127F8FA0AFBC289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0F5D
Signing time: Fri 08 Aug 2025 04:00:32 +0000
Manifest this update: Fri 08 Aug 2025 04:00:32 +0000
Manifest next update: Sat 09 Aug 2025 04:00:32 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: doRn4ZuEAEkYIYFnOJAjbhlH9G3XLPeKumX9ahJXUpo=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:6b:64:51:8b:e1:78:21:27:f8:fa:0a:fb:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Aug 8 04:00:32 2025 GMT
Not After : Aug 9 04:00:32 2025 GMT
Subject: CN=4afb6fc1a3a5298e1511803505bc51b6cd606a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:ff:0d:53:59:c3:11:3f:03:6e:cd:01:73:
5b:33:c9:b5:af:0e:d8:21:8e:39:7f:25:7e:31:41:
9b:f2:74:e1:91:63:db:6f:f8:10:51:d5:f6:e3:95:
e9:15:67:8c:b7:56:db:10:8c:17:2a:b9:7b:7b:3a:
6a:4d:29:19:93:3b:08:ab:78:05:f3:81:e7:5c:83:
95:fc:60:71:7f:3a:55:33:46:ba:2a:a6:cc:5c:64:
d1:59:54:da:8f:57:20:c6:87:19:c2:0e:5a:17:1e:
5e:b6:fa:6e:15:7c:f7:12:a8:66:47:a9:e6:a5:d1:
f8:85:db:fc:0e:e4:74:b4:d0:a5:fd:a2:fc:70:2c:
1d:47:2c:14:46:68:2d:4a:e0:99:a7:d3:3a:19:f8:
b2:96:6d:81:50:5b:df:82:4d:07:f6:4a:11:9a:1c:
17:f1:8d:c4:5e:ad:51:a1:33:63:00:26:75:2b:b7:
f8:49:76:1a:3f:f6:0c:a3:e3:80:b4:9b:ab:9a:8c:
00:93:3b:92:83:f2:a0:51:05:90:63:9d:bc:70:96:
6e:63:da:d4:ee:a1:dd:8b:75:5d:86:b5:4f:b2:22:
d8:2b:9b:13:d7:33:eb:9f:6d:35:1f:2d:3a:55:b7:
aa:fa:e3:37:41:76:a9:8b:39:7b:16:59:05:b0:d4:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:6F:C1:A3:A5:29:8E:15:11:80:35:05:BC:51:B6:CD:60:6A:33
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:18:d4:46:59:89:c0:30:d3:d9:dd:b7:86:3f:fc:12:39:
94:2b:e8:d7:85:20:16:cd:35:18:ba:aa:22:c9:d6:be:68:99:
1d:cf:d3:1d:ed:4c:af:1e:a5:39:30:23:a7:ac:30:94:5c:44:
e2:19:71:8a:d9:5c:2e:bf:79:7b:cb:b8:20:2b:35:9b:af:a5:
27:e9:49:89:d2:78:96:b4:5e:34:5c:3a:0b:ec:51:92:c9:67:
e3:7f:6a:06:24:ec:bb:93:c6:a9:bf:93:42:27:a2:f8:e4:36:
0d:88:09:8f:eb:61:c4:69:c6:7b:a0:af:4b:45:5a:a1:fc:b4:
e5:55:12:b6:3a:19:77:90:1f:70:0f:53:d2:28:77:0d:7a:d4:
f8:7c:8e:2f:04:0e:4a:cc:89:20:5a:ab:8b:26:8d:04:40:57:
f7:54:20:71:8f:df:72:ee:9a:d9:11:5f:64:bc:32:fc:64:e3:
8d:79:9c:c2:bf:db:52:42:cc:e5:d6:60:7c:d6:65:d5:3d:c0:
3e:66:34:0b:aa:54:40:59:57:13:2a:17:88:3a:2b:94:5a:9c:
8a:62:59:4a:83:27:ad:fb:e8:37:24:83:80:a0:13:d0:8c:2e:
f2:2a:8f:f0:b1:47:bd:70:f7:94:54:44:6d:ff:ba:33:7f:fe:
12:b3:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:39 2025 by rpki-client