Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: 4XGtqT6OBsVdJhGv0y9MXlOxD+RwE/6jxfE/Narp13Q=
Subject key identifier: 02:35:FD:55:DA:36:A4:71:DE:DD:5F:50:69:74:B2:49:E4:05:57:69
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 0199239F46FAE88E6B03C97471735837B310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: E3
Signing time: Sun 07 Sep 2025 10:01:04 +0000
Manifest this update: Sun 07 Sep 2025 10:01:04 +0000
Manifest next update: Mon 08 Sep 2025 10:01:04 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: qJWttrasO0IdX0Xc+Fwdt1D29HTtSWB3pItx3d9I5Ro=)
2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:46:fa:e8:8e:6b:03:c9:74:71:73:58:37:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Sep 7 10:01:04 2025 GMT
Not After : Sep 8 10:01:04 2025 GMT
Subject: CN=0235fd55da36a471dedd5f506974b249e4055769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:c2:3a:d2:9c:d7:61:1a:29:bf:12:d5:b7:
39:58:3c:72:2d:52:f9:bf:06:b1:7c:85:df:af:34:
58:bb:2d:54:b1:51:26:f3:e4:77:0f:ba:17:3f:51:
e8:7d:e4:c9:79:3e:06:ea:44:28:f4:99:94:71:7b:
c7:d2:16:38:89:b1:40:24:bc:78:65:5a:f8:f2:f0:
54:92:19:9a:62:c5:de:a0:b2:07:71:d7:30:53:8f:
8f:d0:d0:7c:8f:61:32:1c:6c:16:35:b5:3d:7c:84:
06:55:b1:f9:af:b9:69:90:3f:fe:77:b1:99:8c:03:
3e:9e:b9:ce:52:2a:a2:af:d2:ab:7b:be:9b:80:1d:
6d:a3:f5:58:17:b3:e3:2e:da:f7:82:c2:0f:1b:8b:
f5:79:77:08:88:94:3b:2d:be:3a:2e:11:5a:fb:b5:
78:30:9d:5a:48:0c:12:4b:87:73:c9:67:8d:33:b9:
0a:cb:03:84:ef:ba:6b:7f:05:ab:cb:a5:01:5a:1b:
7b:b8:a4:85:67:c4:e1:cc:88:37:07:a1:24:2b:49:
29:96:33:82:94:e3:0b:4a:44:c9:dd:c4:a6:93:ef:
76:4a:f9:0c:4f:0f:f6:ba:29:46:53:9f:65:9d:6e:
cb:56:b1:b5:db:a3:0d:d7:ce:7c:c4:ff:8c:c8:41:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:FD:55:DA:36:A4:71:DE:DD:5F:50:69:74:B2:49:E4:05:57:69
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:4a:fc:45:9c:69:0a:02:c0:76:a3:49:87:63:89:f7:e8:
1c:ea:37:12:5f:f1:12:7a:3f:cf:5a:81:f8:93:42:9b:24:c1:
02:ea:b3:e4:17:80:63:8c:d0:15:05:bc:ea:bd:91:3e:a7:58:
21:89:b0:46:98:0e:27:47:77:df:8c:58:cc:59:eb:e6:e6:7a:
92:fc:75:2b:ad:32:30:7d:55:6a:f7:70:35:20:01:31:f2:b4:
99:4b:fb:c6:04:f0:3e:fc:3b:b0:98:ae:18:18:9e:af:c6:01:
00:82:c5:4b:57:95:95:2f:05:8e:34:2d:82:8f:a8:3a:53:80:
c0:4a:b1:35:80:42:25:3d:01:38:6d:94:1b:30:88:30:ab:09:
8d:20:e2:09:c9:05:3d:ae:93:6c:34:61:83:f2:00:05:70:2f:
53:a0:f8:29:50:18:7d:90:98:26:34:ac:0e:23:e8:60:42:d5:
38:55:e5:bd:a0:b6:fe:c5:d2:91:b5:10:01:de:59:2d:e2:a3:
01:9f:5c:fe:58:32:ae:a8:ed:b4:d2:9d:f3:c5:40:8b:7b:ed:
66:56:6a:b5:2d:28:20:c2:86:a9:2b:ad:83:a3:21:d7:a2:e3:
e2:8a:a0:a5:9c:9e:de:7f:59:2f:01:5e:bb:92:7d:6b:05:bb:
38:a4:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:42 2025 by rpki-client