Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: YsAHUe7OdEnQmE7QqBe5ruaDbD6R+kjEGBULwPFoRfA=
Subject key identifier: C6:EE:B6:6D:B2:B4:2D:81:1B:B2:F3:24:6E:08:BD:0D:66:B8:A6:D2
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 019845BF49D7A0088AA182645B40A52DF531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0A10
Signing time: Sat 26 Jul 2025 08:00:20 +0000
Manifest this update: Sat 26 Jul 2025 08:00:20 +0000
Manifest next update: Sun 27 Jul 2025 08:00:20 +0000
Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: 90tdO4d5PseL4vGyKpzwsX41tj49W3CAPZmIYkn6/kE=)
2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:49:d7:a0:08:8a:a1:82:64:5b:40:a5:2d:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Jul 26 08:00:20 2025 GMT
Not After : Jul 27 08:00:20 2025 GMT
Subject: CN=c6eeb66db2b42d811bb2f3246e08bd0d66b8a6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:9f:a3:8a:92:5a:bb:59:66:95:08:d1:b8:
e0:73:60:c3:63:5e:de:ba:17:82:db:88:cb:e0:c4:
01:45:ca:af:7e:98:03:1d:a8:f3:68:5b:a5:ae:81:
21:f6:9b:f5:93:11:b4:85:c6:d4:9d:f7:f1:a5:71:
4e:cc:34:aa:05:b4:2a:3d:7f:7a:24:07:24:b7:7b:
12:ea:83:72:94:4f:95:c8:0e:fb:05:46:7b:93:24:
ec:d0:b0:6c:5a:6c:48:61:24:63:87:4f:7a:b9:e3:
5c:b8:65:e2:b7:68:b2:60:de:4d:77:ac:c9:1d:26:
1e:72:c0:db:a8:8b:5e:45:75:ea:fd:ed:57:9f:91:
58:d0:12:12:dc:ef:09:cb:5f:67:1f:fc:96:02:e3:
b5:22:9d:80:ad:9e:d5:b9:0a:de:7f:b8:b4:25:c5:
c2:e3:91:4c:93:b1:0b:c9:f1:56:b5:83:a5:c1:36:
4d:c7:3a:53:06:57:66:84:12:df:27:69:10:e2:5d:
53:4c:3c:08:8a:d4:eb:1d:52:ef:3d:18:55:38:af:
ec:8e:4b:dc:0c:32:c9:b5:cb:07:4e:fe:84:58:7c:
8f:91:ba:b5:fb:2a:46:f2:f2:48:0d:2b:35:72:d5:
e6:42:61:46:31:d3:33:9d:60:49:c2:e4:eb:25:93:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:B6:6D:B2:B4:2D:81:1B:B2:F3:24:6E:08:BD:0D:66:B8:A6:D2
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:65:e1:f7:21:33:c9:b0:f7:87:74:4b:33:c5:fb:75:87:bd:
ad:6e:6b:25:1e:cc:92:fd:92:3f:1c:fd:a5:12:f9:0c:38:fc:
19:48:6c:a9:a1:35:62:5f:2d:f4:e0:0f:18:e2:5a:e2:fb:fe:
0f:a7:1a:d5:95:bb:3a:4e:cb:dd:a9:1c:77:f2:68:05:b0:43:
fd:37:df:4f:90:ff:60:41:82:38:77:7a:ce:e1:3d:55:0b:62:
ac:40:a0:34:ca:85:4d:ba:85:cc:17:a4:45:f7:d3:76:20:92:
e3:70:d0:11:29:09:f8:5f:ce:82:19:10:f2:0a:3c:b9:9d:50:
d5:df:a3:d8:a1:1e:42:c0:c0:bc:3b:c6:45:eb:21:7c:2a:e4:
c7:fd:a1:33:50:8a:8a:98:a1:f0:8d:51:77:44:14:a0:98:f4:
ef:35:8a:bd:59:0a:ba:a2:21:c9:0e:0e:92:d9:21:aa:aa:eb:
3d:b2:99:74:7e:14:36:b5:62:ae:9f:2d:40:92:b4:ad:6f:85:
ee:61:16:3c:fd:a1:6f:32:74:14:72:a3:c3:80:bf:2c:00:58:
df:07:2d:78:b1:f5:64:06:42:af:e3:4d:ec:89:f0:e5:39:dd:
f4:e7:0b:a7:64:d5:cc:fd:c9:f6:a6:cb:b0:e4:3b:4c:45:32:
c6:19:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:59 2025 by rpki-client