
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: 1NyDitaU1z+OLeyHXbbOeg95hT+oPtI8kogGcMi2bwQ=
Subject key identifier: 6C:EB:3B:D2:45:32:A9:0C:0D:23:91:2F:16:78:21:64:5A:2E:88:20
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 019A71B85E720C2B172FDC0433613CF2FD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: 0190
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 8g1BI4yTBjaEsbMF2mDzVcZlPTVaIi+wTehyaoBBSAY=)
2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5e:72:0c:2b:17:2f:dc:04:33:61:3c:f2:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=6ceb3bd24532a90c0d23912f167821645a2e8820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:d3:92:bc:b4:14:0f:57:83:06:86:5c:12:
b3:93:9f:59:bb:38:c1:0b:03:89:bb:95:8f:f2:e5:
7e:4f:ee:bc:89:09:f6:7d:63:82:c9:1e:79:b9:9a:
ad:c6:3e:ea:db:e6:0b:aa:f1:53:d8:d8:ab:2e:9a:
64:43:ab:3a:75:67:87:7f:ea:97:20:a3:5c:1d:68:
c1:ec:3b:6c:57:62:68:73:5c:bd:66:4e:3c:82:3c:
ca:75:da:65:7b:ce:cf:36:80:aa:70:15:2c:a2:dc:
31:96:da:ab:37:ff:52:82:76:de:77:d1:3b:e1:72:
b2:88:70:0c:30:0c:80:10:28:02:34:12:92:17:bc:
63:20:55:9a:f4:34:13:ff:57:8a:1b:1a:ac:90:c9:
ae:0c:3e:94:d6:7f:9d:99:3f:b4:09:d0:9a:99:d4:
1b:9c:0b:10:75:42:b2:4b:bb:b2:81:0e:bb:30:0b:
96:0e:68:5f:85:48:b9:0e:4c:03:1a:34:ba:ef:33:
63:42:db:ba:37:f0:0e:6e:ca:23:ac:06:15:cc:51:
b5:1f:51:8c:cd:ac:bd:79:97:5a:ce:14:b9:d4:22:
68:29:02:74:08:b8:d1:3f:8d:b9:d7:e7:ba:13:72:
8b:b8:51:2c:76:a7:c5:bf:76:f8:5c:b5:ed:0f:1f:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:3B:D2:45:32:A9:0C:0D:23:91:2F:16:78:21:64:5A:2E:88:20
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:1c:94:12:eb:19:41:3b:d4:50:fc:95:87:24:80:3f:ff:
73:a1:88:24:a9:05:76:38:f3:9b:2e:d3:8a:42:78:cb:3b:26:
31:18:f1:03:38:bb:ae:39:0f:59:82:af:8d:19:9d:a4:1d:c5:
35:5a:be:9e:52:bf:23:dc:7e:07:76:e2:8b:94:76:45:8b:17:
ba:78:c0:c7:51:ae:3f:64:0f:b5:58:3c:ca:11:79:0b:c7:8a:
71:b8:69:bf:9c:35:a8:26:1d:b7:60:74:84:8b:3f:c1:2d:f6:
ee:de:9c:a1:74:37:43:a4:49:0d:6b:ca:3f:52:0c:40:d6:8f:
ca:37:c1:ee:57:23:52:31:86:aa:b6:16:f1:fb:8b:05:24:20:
4e:50:b3:e1:b5:1d:be:ca:1d:49:38:16:aa:46:b0:d0:28:d9:
22:8e:b9:65:2b:fe:e5:6e:86:a2:6e:57:af:37:f2:ea:1a:c0:
1a:f8:68:26:23:8e:f9:c9:44:de:ac:e6:bf:d2:42:41:38:b4:
7e:c3:91:6b:66:d2:a8:f3:55:4f:d1:d5:c3:ae:f4:2d:18:6d:
4c:79:77:cf:34:43:4a:03:a1:03:ed:49:b4:b6:eb:d9:f1:73:
9e:a6:1c:03:b8:7e:16:e2:d8:10:46:fa:1c:b8:7e:c3:a2:81:
06:eb:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:07 2025 by rpki-client