Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: pRrkwq/oIIfuF2OHArAdEzacSBzGAJJmqsgSBcF2llI=
Subject key identifier: 05:EB:62:72:E1:0D:D1:13:5C:55:D1:3E:95:82:0C:C8:B7:57:F0:51
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 0199221E9FB44C720E935F079E17912473C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 149E
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: il6wo3NJLDBurjw4UfNcR5y68xvqQi6l/fb2nAIH9lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9f:b4:4c:72:0e:93:5f:07:9e:17:91:24:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=05eb6272e10dd1135c55d13e95820cc8b757f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:e8:b8:af:67:4d:ef:81:0a:b0:18:6c:7c:
c5:f5:5d:09:ef:5b:25:c3:d3:41:b6:0f:ee:df:0f:
e5:d2:e3:c9:af:83:34:df:92:69:64:46:be:4b:a5:
6f:d8:2c:cf:00:57:62:00:1d:26:38:a3:61:1e:95:
0f:93:81:8c:bb:a2:25:ac:12:91:93:6d:bc:a6:70:
20:2b:fa:69:9a:17:25:7f:b4:9e:5e:48:c8:0f:e0:
36:f9:1c:95:31:eb:c0:0b:01:08:a7:84:fa:c5:c4:
09:4c:28:4b:c2:5f:84:e9:5d:7a:19:a4:a5:42:70:
af:e1:d2:ee:36:73:a6:2d:96:4c:ec:e0:ac:c8:4d:
a4:a0:f5:c6:bf:89:07:e8:b5:d6:91:b1:9c:54:fd:
7c:ec:d4:ac:10:6f:48:5d:2d:c7:06:15:f0:d5:ed:
7a:e2:01:d1:d7:85:aa:90:1c:3f:d0:3c:f8:9c:f0:
37:25:d0:00:6c:e8:0c:77:c4:e1:97:a7:62:e1:12:
9b:e5:53:f5:2f:81:28:0d:1c:65:0e:02:71:c4:dd:
c2:eb:3b:52:9a:6a:ee:2d:cc:ea:89:6d:8b:29:3d:
b1:a4:e2:46:c0:4e:79:eb:8d:10:58:cc:ee:b5:59:
1a:e1:a1:c7:c3:0a:c6:d9:d2:bf:58:7f:7a:93:2c:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:62:72:E1:0D:D1:13:5C:55:D1:3E:95:82:0C:C8:B7:57:F0:51
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:f8:a3:0f:21:c1:b9:ba:97:a2:7d:5e:fa:c1:00:e9:6f:
b7:53:0d:0f:da:a7:b9:3f:86:eb:74:13:a2:f2:60:0c:df:de:
96:18:4a:85:fd:39:10:43:bf:fa:42:10:1f:12:0c:9f:62:24:
78:c3:85:1d:e4:7f:91:6b:57:c9:36:0c:c5:02:c0:17:0b:ea:
ee:8e:7b:71:7c:06:24:ff:c0:3e:e1:7b:77:a3:95:7a:c4:d3:
1e:7a:d4:05:d4:6d:91:2d:69:d9:00:4d:d4:0a:c6:5d:e9:9b:
e9:cc:26:2e:81:0b:02:ae:b3:f7:bd:b5:6e:bf:54:fd:b5:63:
b1:69:e2:92:8c:db:98:46:53:51:45:19:50:83:b2:a3:c4:e5:
dc:9a:4c:c6:a8:cb:1e:c7:74:a3:0e:dd:90:22:b1:75:9c:06:
b8:aa:22:8a:f5:c6:5b:ce:07:b5:df:0f:b0:b9:18:ea:5b:db:
84:17:f2:7f:b9:36:d9:cd:04:2c:60:a4:15:e6:49:83:e3:f2:
d0:92:6f:55:e5:1c:34:89:a3:a8:88:76:c5:03:e1:12:a3:0d:
aa:ed:b7:0b:87:88:b3:8e:41:0b:4d:4e:5a:ed:24:d1:3d:e5:
2f:7e:7b:12:ad:70:46:dc:2d:ee:48:d6:5b:6f:5e:84:b1:f4:
3a:1f:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client