Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: 2JenXUJZXRiv5BbO3rgiGZH2DGcDziwHkZpclAzueV0=
Subject key identifier: 25:13:BF:42:76:6F:66:62:91:9F:F4:C5:11:65:67:AD:BE:73:6F:49
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 01984A09F20EBFA4EBF04930AFE54C2B2D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0F3D
Signing time: Sun 27 Jul 2025 04:00:22 +0000
Manifest this update: Sun 27 Jul 2025 04:00:22 +0000
Manifest next update: Mon 28 Jul 2025 04:00:22 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: UqZyyUD6shub8+QyE1rHV/9wHniNmfOLEkynYgwIl9U=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f2:0e:bf:a4:eb:f0:49:30:af:e5:4c:2b:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jul 27 04:00:22 2025 GMT
Not After : Jul 28 04:00:22 2025 GMT
Subject: CN=2513bf42766f6662919ff4c5116567adbe736f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:ad:a2:0d:35:b6:90:7c:0f:f9:9c:7f:15:
16:c6:c6:f8:d7:2e:3f:fb:d7:29:3a:6d:e9:95:92:
ac:c7:91:fd:b9:ec:ea:dc:58:9b:ac:f9:ef:50:41:
da:60:aa:04:d1:c0:b2:8e:07:ce:dd:a6:61:76:45:
a4:c4:e5:67:d6:af:1a:b1:7d:5c:fc:86:fb:c5:87:
4d:e9:5c:3a:da:0a:fc:c6:15:1e:e7:4d:3c:a8:6f:
aa:b0:52:96:b2:f8:86:cf:78:a5:8f:b3:59:33:f5:
09:dd:94:cf:4e:12:89:a6:b5:06:1a:54:65:93:8d:
0c:b7:68:12:bd:e6:09:70:8f:ab:53:88:ca:15:7e:
33:46:cb:4a:29:0d:23:f8:5b:d0:fd:9d:33:b2:c5:
43:e8:ce:14:89:d2:1a:ca:35:8a:09:3a:35:4b:7a:
19:b2:d7:d4:cd:92:4c:76:c4:d1:8f:cf:09:b0:b2:
67:30:43:6c:c7:69:ff:62:53:85:a1:10:17:76:1f:
8c:b5:93:20:a7:da:d3:f7:d7:86:ac:9b:91:e9:83:
34:55:6e:f8:95:79:1f:b3:21:eb:e6:35:97:94:31:
52:ba:e9:b5:6b:94:38:aa:51:20:dd:5e:48:68:f9:
12:80:e4:af:50:76:a6:73:91:1d:16:97:e8:ef:dc:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:BF:42:76:6F:66:62:91:9F:F4:C5:11:65:67:AD:BE:73:6F:49
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cb:11:18:b7:37:42:c2:88:d3:f6:f2:11:78:54:50:a4:ce:
65:46:51:f1:af:42:3c:b1:0b:5d:10:2a:18:ca:16:22:a8:e7:
1d:aa:0a:03:c9:a1:41:cd:a9:a7:0d:7e:2e:c6:53:55:1b:87:
5d:b3:88:d5:5c:a7:cc:f4:34:b0:98:95:94:28:52:2d:26:e8:
46:32:c1:fd:5c:b3:8c:d3:a0:cb:8c:b0:ab:86:dd:79:93:d2:
d9:15:75:f4:3d:54:24:43:df:cf:4d:22:f3:62:ab:09:f1:63:
37:b7:e9:15:7b:ec:c5:79:d7:b9:4e:06:f7:67:7d:07:13:10:
ca:60:c0:c1:83:81:fe:f8:07:e5:5e:6e:85:05:1a:51:10:14:
25:bb:70:85:98:3c:1e:6e:5d:07:ff:b0:d0:e0:0e:39:00:d0:
6b:37:2a:36:c5:a0:68:23:bf:e3:79:65:a0:0c:44:73:a2:fc:
27:38:6c:2e:37:b6:d9:3a:45:b0:45:7e:b5:79:00:5a:ff:4f:
43:a1:b3:16:bd:ed:43:b7:f8:fc:e0:dc:b3:24:9a:b4:fd:e1:
5f:5f:7e:6f:c5:d0:0c:29:91:c6:59:b2:6b:c7:3b:08:e3:b7:
b8:27:4d:e4:26:a8:c4:62:cf:a0:0b:ef:fa:25:80:0e:81:92:
aa:ab:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:34:42 2025 by rpki-client