Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: cMjzb/Hhy+gExNfydj082UrGK3cgnpkXyA2XZy234vk=
Subject key identifier: 2B:DC:40:ED:45:DD:45:8B:38:34:0C:F4:C3:78:C3:98:23:A7:6D:0F
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019874502F38CA36B8B3BC85B995D8CC0A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 1051
Signing time: Mon 04 Aug 2025 09:01:08 +0000
Manifest this update: Mon 04 Aug 2025 09:01:08 +0000
Manifest next update: Tue 05 Aug 2025 09:01:08 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: 15iy8AWlcaal0GyDjK4HtzHsPMrHPmzZXpaSfpSBnDs=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2f:38:ca:36:b8:b3:bc:85:b9:95:d8:cc:0a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Aug 4 09:01:08 2025 GMT
Not After : Aug 5 09:01:08 2025 GMT
Subject: CN=2bdc40ed45dd458b38340cf4c378c39823a76d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:74:2d:3f:66:0b:6a:5c:0d:52:bf:a1:cb:
a3:f9:69:b3:f7:11:7e:fe:ee:ec:1a:d2:97:00:73:
45:7c:c1:b5:f7:dc:d5:71:eb:e4:06:f6:96:c3:c1:
12:d1:cd:a2:12:5f:ab:68:05:2f:61:a6:5a:bd:69:
46:da:fb:50:26:40:ba:25:28:6f:d5:b3:13:c5:ad:
9a:ef:3d:c9:27:84:ce:ac:74:66:01:21:ab:7d:57:
06:af:b8:de:1b:30:1e:1d:65:56:75:4b:9a:f7:01:
0c:cf:32:1a:e7:72:57:a4:22:50:c3:64:30:1c:8c:
f9:20:44:67:ee:a7:44:0a:19:93:25:68:29:3d:6f:
96:f7:a0:73:be:f0:7d:40:11:fa:0a:8d:51:ca:8c:
6e:f9:75:7f:4c:6e:07:fd:9e:77:ae:c8:e7:46:d6:
8e:bb:fd:96:70:e9:3b:15:5e:bc:99:b5:4b:12:dd:
ad:ac:d6:e2:8a:9e:de:78:91:4e:ed:da:80:65:3f:
9d:d5:c0:fd:bd:37:28:ad:d1:b2:10:b2:0b:0e:63:
af:0c:11:77:4a:b6:41:72:2b:13:6f:57:ff:83:cc:
35:f0:25:9c:5a:fe:af:5f:a6:cb:13:98:22:14:be:
ff:54:0f:39:a8:c0:26:b5:77:61:47:16:49:03:09:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:40:ED:45:DD:45:8B:38:34:0C:F4:C3:78:C3:98:23:A7:6D:0F
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:61:4c:b7:42:a8:4d:1e:8e:5b:99:53:77:62:09:8a:b1:3e:
56:4b:2d:48:9c:c0:a2:1e:a8:41:02:ae:34:42:e0:a5:c1:bc:
04:1e:bd:57:1d:45:3d:48:66:5c:03:58:ba:ef:57:61:65:9b:
d7:d8:39:6f:f5:5c:98:bb:3c:d8:ef:1b:24:7a:9d:17:87:30:
e1:89:b1:d9:92:43:70:b8:ad:6f:77:dd:55:74:6e:15:f4:47:
93:fc:93:e0:ab:61:86:66:4e:84:9c:d1:a5:2e:3f:bb:87:21:
f4:d7:98:a1:f1:ba:58:64:af:47:fc:76:60:0a:b4:08:f2:1a:
75:44:f2:bc:4b:97:60:a8:4c:ae:a0:e4:f3:51:41:1b:6c:85:
da:66:2c:3d:21:be:58:d6:68:a0:e4:34:e1:11:e9:c4:50:88:
31:d8:54:92:82:c6:6e:8f:e3:7d:d7:e7:e1:f0:ee:9d:f1:d9:
10:91:ee:12:bc:20:0c:aa:63:38:a2:39:77:25:a4:34:af:fa:
69:57:f0:56:b0:48:2f:22:4c:6c:ba:d1:5a:14:bc:35:08:5b:
6d:4f:45:22:8d:62:92:bd:bc:7c:a9:c3:2a:a2:76:c5:1b:00:
37:88:82:cc:38:6d:03:44:4e:14:ca:94:04:bc:fc:88:4c:2f:
44:51:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:34 2025 by rpki-client