Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: en5u4urRIMZKYPxNjv/faerIbBNFbqIjIKPk0B5nvX0=
Subject key identifier: 9A:BC:B9:E0:AE:8D:84:6C:9B:F9:EF:6D:60:26:87:44:59:BA:34:17
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 01988054174710EC5F3808F3FC7F80864B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0F48
Signing time: Wed 06 Aug 2025 17:00:51 +0000
Manifest this update: Wed 06 Aug 2025 17:00:51 +0000
Manifest next update: Thu 07 Aug 2025 17:00:51 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: IIPmknFtxKQWoZEuB42xZTeA+IW87TFSA73DRbmDodE=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:17:47:10:ec:5f:38:08:f3:fc:7f:80:86:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Aug 6 17:00:51 2025 GMT
Not After : Aug 7 17:00:51 2025 GMT
Subject: CN=9abcb9e0ae8d846c9bf9ef6d6026874459ba3417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:c2:fd:bc:ef:4e:de:7e:e7:c1:48:18:d6:
5b:03:50:f4:af:13:42:9f:d6:a7:13:70:7e:d9:bc:
3e:99:3d:68:28:68:b4:04:a8:09:d2:5c:82:90:ed:
e9:4b:cb:23:d5:bf:87:d6:34:b1:9b:5a:6c:d5:49:
4b:e9:e5:af:07:a7:be:0a:90:78:d6:39:72:f4:58:
31:b4:58:ad:36:92:dc:54:db:dd:70:8a:39:66:81:
28:a7:fb:b9:44:0f:e0:32:51:9a:d4:1f:cc:46:f5:
e3:1f:95:bf:d4:28:46:bc:ac:ad:84:fc:9f:7c:63:
5d:70:6f:f6:cd:cb:4d:fd:b2:e9:50:94:9f:1d:5c:
ef:60:ac:e1:a6:7d:54:9c:d1:11:cb:81:e8:fe:94:
b5:c4:b0:cd:94:2d:75:5f:ed:1a:d1:36:1c:01:99:
04:39:6b:d7:ba:1f:10:82:d0:23:59:78:af:0c:5f:
dc:94:dd:00:c3:16:52:b1:fb:93:6c:b7:2c:38:5a:
fc:8e:ed:a5:67:82:f1:7a:1c:c8:d5:46:e4:5d:f4:
b9:c0:0a:95:5c:aa:95:5e:4b:f3:52:a4:be:dd:31:
91:9f:1a:30:f4:65:0a:16:3b:17:bb:80:94:e8:53:
6e:1b:42:8f:b5:00:72:8a:94:2c:26:84:bc:ec:7e:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:B9:E0:AE:8D:84:6C:9B:F9:EF:6D:60:26:87:44:59:BA:34:17
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d0:59:df:ad:6c:6c:22:aa:6c:ed:23:69:70:91:07:67:e4:
de:f6:9a:4b:2c:1d:bc:e1:83:a9:29:5f:5a:e4:b6:88:e5:40:
40:c4:6f:14:51:bc:0e:bd:ce:b6:90:ec:39:6a:4a:95:ff:3b:
7b:60:a4:ec:72:8f:e0:77:fb:2f:58:f0:14:f6:4a:bb:8d:ad:
56:51:dc:6f:e2:39:47:21:d6:d7:53:dc:ae:13:0c:67:cc:f2:
d6:e1:45:93:30:8e:7e:f9:2b:7a:97:35:ae:04:98:c6:d3:3f:
b6:00:28:c7:68:bf:cd:f8:d1:8f:4c:95:bd:51:60:56:2c:aa:
04:02:28:fa:53:12:d5:57:cf:5f:a1:ed:53:c9:e4:d7:ab:61:
5e:88:c1:0a:b8:7e:d8:9c:dd:cb:0c:8e:5a:2c:a6:41:71:f4:
a6:9e:dd:b4:3a:a5:a7:35:25:36:e8:ce:b0:a1:aa:0e:0e:45:
25:7e:da:4b:dd:83:af:9d:a5:e3:bb:2c:a8:34:54:e8:cd:08:
e0:e1:df:43:89:39:fb:0f:a6:27:b5:f8:76:ef:ad:45:a0:36:
d5:01:36:44:95:b3:75:d4:ac:b3:97:f0:64:f7:2b:de:f5:eb:
72:fc:85:b0:cc:7b:7b:6c:ea:ac:8d:26:ad:8a:4e:91:1f:e0:
b5:4b:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:51 2025 by rpki-client