Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: J6mGLKsyowibRPVSx17VuwoQvr39VyiV0GEGDLwCmQE=
Subject key identifier: 49:EF:DC:AC:CF:0E:AA:71:DE:70:59:02:3A:27:57:C2:85:D3:9D:A1
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0198537BAF90044DC2E7DCF6C21353E7FBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 1040
Signing time: Tue 29 Jul 2025 00:01:11 +0000
Manifest this update: Tue 29 Jul 2025 00:01:11 +0000
Manifest next update: Wed 30 Jul 2025 00:01:11 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: thRI8fNiFNwtmr6Bg7ugds7V2yUVjnw+OFhwJZod6y0=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:af:90:04:4d:c2:e7:dc:f6:c2:13:53:e7:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Jul 29 00:01:11 2025 GMT
Not After : Jul 30 00:01:11 2025 GMT
Subject: CN=49efdcaccf0eaa71de7059023a2757c285d39da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:2a:44:fe:90:c9:8d:8d:7d:20:01:6d:74:
54:3d:fe:9a:fb:f6:17:fd:ec:2f:31:82:6f:bb:8f:
c6:b8:a3:05:a9:db:3a:e7:39:3e:d4:e0:3e:20:77:
31:6d:7b:af:6a:d1:ae:7f:62:92:d5:61:9a:06:af:
91:ce:39:3a:e9:0c:6b:64:d1:f5:7d:0d:28:bd:98:
8f:50:ec:ca:2a:58:52:f0:19:b6:0f:98:5f:7e:ba:
fe:72:d7:14:dc:f0:4b:0a:7f:70:bb:1d:26:e0:85:
07:3e:cb:d2:33:5f:c3:04:56:40:51:f6:af:e3:09:
0c:07:fe:ec:3b:d9:2a:c7:dd:cc:43:13:db:a1:5a:
35:1d:c3:65:74:7f:f6:99:0d:29:1c:f5:8e:97:e6:
a0:5e:e2:29:47:95:9e:74:b1:ea:b2:4e:fe:37:5e:
01:00:84:3e:ba:fe:b1:21:e4:0d:58:6c:88:61:ef:
07:db:23:b1:99:cb:71:a8:3b:0d:c5:30:c5:d2:a3:
89:f1:49:2c:a7:fe:6a:fc:e2:ee:51:59:f4:43:51:
50:8f:ce:69:40:e1:97:c9:79:37:d3:dd:89:5f:b1:
3d:0c:ce:6c:c2:ed:ee:c2:d0:98:ec:62:9a:33:9f:
d2:8c:9b:6f:71:2a:52:2d:10:b6:6e:e1:4a:9a:12:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:DC:AC:CF:0E:AA:71:DE:70:59:02:3A:27:57:C2:85:D3:9D:A1
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:1f:4f:f9:77:a3:29:2d:de:2a:db:f8:83:f2:60:37:3c:
73:1b:58:0f:e1:df:d2:1c:35:8e:b9:44:b5:91:07:32:b1:57:
c2:84:63:5a:95:70:46:b4:70:ac:c0:ba:42:00:0d:5f:42:81:
2d:9d:16:cf:f4:10:dc:c1:87:6d:b2:6b:b2:29:d3:1d:2c:48:
40:b8:57:f8:4e:a2:f4:8c:ef:20:42:c1:db:1c:d8:0c:89:cd:
29:37:94:a5:40:58:70:4f:d0:0a:33:3d:7a:67:82:28:ef:cb:
3c:a2:a0:07:37:c2:af:6a:04:dc:35:5c:85:59:04:84:2b:f2:
bf:4b:55:34:38:28:c4:49:9f:d7:88:08:81:30:c9:2d:97:c1:
b4:61:ba:3f:2b:bd:ce:51:27:f1:45:a9:43:e9:5e:18:65:18:
a0:d8:19:1d:ff:64:20:c7:bd:15:83:2a:e9:20:cc:f0:f8:7f:
c9:ad:1f:0a:7a:71:f8:d5:7b:f9:10:25:42:cd:23:7f:76:c9:
7c:dc:3d:01:1d:62:3f:b7:95:f8:a0:b8:99:de:28:9f:09:fd:
32:c3:ed:c7:ee:34:9f:c7:48:17:0f:35:ae:90:12:97:65:b8:
49:c3:22:a0:49:5b:8c:81:e3:f5:21:99:51:00:08:95:ac:cb:
4d:30:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:53:30 2025 by rpki-client