Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: wgNgy2Gme09A3hy0sZEzleZpWXZ+VKkY6eBD7Udy5Ks=
Subject key identifier: A9:4F:99:04:25:C7:0D:EE:17:0D:AE:F4:BE:CB:53:80:E5:D1:52:35
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019A70DBF01F226C8A7AF28252545785CA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 1353
Signing time: Tue 11 Nov 2025 03:00:53 +0000
Manifest this update: Tue 11 Nov 2025 03:00:53 +0000
Manifest next update: Wed 12 Nov 2025 03:00:53 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: KrAeRJAM756nt4uh4CW89GSUVh++B8esFYA5V/37ywk=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f0:1f:22:6c:8a:7a:f2:82:52:54:57:85:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Nov 11 03:00:53 2025 GMT
Not After : Nov 12 03:00:53 2025 GMT
Subject: CN=a94f990425c70dee170daef4becb5380e5d15235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:49:3a:94:23:df:f3:0d:23:e3:f9:5a:79:
3b:28:68:ce:0c:1d:0c:85:78:d5:c1:be:9b:67:5c:
37:06:19:78:1f:c2:3b:e8:4d:3b:70:83:61:41:3f:
3d:9b:ab:37:43:ec:c0:97:16:97:8e:af:e9:ba:83:
ae:25:45:43:ef:bc:53:3e:07:70:d8:8c:53:d6:e2:
91:69:a4:30:e7:dc:62:ac:d8:37:d1:0a:b7:d6:84:
25:36:99:51:f3:0e:69:ac:68:3e:b0:72:87:31:3f:
83:0b:bb:a6:a9:f3:ef:81:c7:06:1a:87:9b:2d:86:
bc:75:52:27:90:83:19:10:66:46:f8:98:5d:09:04:
4c:e5:ec:b1:f7:22:d5:71:2e:6c:62:1d:9b:bb:2f:
86:3d:f3:6d:ff:37:aa:e8:18:a2:90:63:bc:2a:67:
f5:39:0a:d7:33:95:2b:d6:b4:1f:74:1a:a6:e8:e6:
cf:81:0c:f8:26:ad:45:ff:28:78:38:62:d8:fc:93:
86:c8:4d:29:20:87:1c:fd:cf:00:5c:b8:ee:07:74:
86:47:bb:e4:7e:08:39:3d:8b:43:22:09:b7:f2:92:
be:6c:c1:bd:68:af:c5:aa:c2:be:8c:89:a9:19:8e:
04:83:a4:4f:de:36:97:17:c4:79:7f:aa:03:31:10:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:99:04:25:C7:0D:EE:17:0D:AE:F4:BE:CB:53:80:E5:D1:52:35
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:4d:74:4c:bb:59:78:f9:4b:ae:dd:bb:23:d9:dc:0d:d3:
c0:73:2d:6a:2b:0a:b4:41:9b:32:7c:0f:c8:db:f6:b6:69:0c:
78:8d:3d:e8:46:de:69:b5:c2:91:71:7b:1d:18:f8:7e:4a:20:
16:67:fe:47:f8:96:45:97:f3:b6:6d:7b:14:ab:43:68:bf:a1:
f2:0d:cd:56:25:42:5d:56:05:75:4f:69:9f:e6:02:95:f8:42:
73:14:32:9a:be:dc:1a:c8:26:db:5d:d3:7b:d1:eb:0d:16:70:
c9:78:77:d5:c3:84:19:bb:bd:91:a0:47:1c:9a:d5:82:89:98:
3f:be:d4:95:b4:06:96:da:36:97:c0:5b:7c:a4:35:e1:6a:ce:
53:32:0f:a0:c3:61:c9:6d:12:37:7a:ae:6b:10:26:2f:be:16:
92:e7:1d:25:e4:b4:95:cd:cf:c4:cc:c5:cc:dd:0b:1e:0f:8d:
34:c0:da:8f:01:ea:ef:40:85:49:64:88:fb:d0:1a:15:d9:82:
70:c9:5f:a5:7d:f9:e5:d4:ba:20:30:64:d0:41:24:95:9c:d0:
b6:8b:3d:57:d9:29:f9:86:9e:a2:29:ff:a6:d6:de:0f:d8:a1:
2a:44:e9:91:be:fe:26:04:a6:1f:f1:f0:a5:c4:e8:9c:98:fd:
8d:d5:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:44 2025 by rpki-client