Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: Ky06BXtixPyQpTzky/2OWFJGvsD0vq272N5RFR+/rOQ=
Subject key identifier: 2E:FC:8C:EF:2D:06:E1:39:BD:05:1C:61:BC:A7:A3:05:BC:25:5F:FF
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019923A003116B214D40B61E9E3EDB5B2936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 0F33
Signing time: Sun 07 Sep 2025 10:01:53 +0000
Manifest this update: Sun 07 Sep 2025 10:01:53 +0000
Manifest next update: Mon 08 Sep 2025 10:01:53 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: ALb1YSs0rVIMzJZ7im4BxGOPoi9dLsoWBhe0d5Zo0bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:03:11:6b:21:4d:40:b6:1e:9e:3e:db:5b:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Sep 7 10:01:53 2025 GMT
Not After : Sep 8 10:01:53 2025 GMT
Subject: CN=2efc8cef2d06e139bd051c61bca7a305bc255fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9b:25:31:b1:df:ae:45:0a:26:5d:01:2b:7f:
0c:83:94:1b:77:b8:25:e3:7f:84:c4:fb:7a:d8:5f:
61:d7:7e:11:82:d3:15:32:e6:03:ed:3c:87:82:71:
9a:b5:be:a2:5c:60:13:79:96:44:2b:8f:12:8c:ef:
de:c5:74:5d:d3:5a:70:ae:81:78:90:8e:3b:74:b4:
1a:c4:a1:b3:b8:5d:20:16:45:de:8d:3b:fe:42:c5:
6a:42:be:04:3e:73:66:cd:68:a8:f9:4f:5f:75:12:
98:f5:8f:97:e1:0c:46:d7:f9:b7:17:ba:9e:06:1b:
0c:0b:58:9e:a0:14:c7:73:ec:0b:8a:ef:77:4e:4e:
5b:cd:1f:9a:86:a9:ef:c9:3f:e1:92:5c:b1:1c:bf:
70:4a:d1:5e:66:0f:bd:e7:4f:fd:14:29:fb:2f:d5:
ef:0c:f6:ce:b8:7d:87:7a:6f:d0:20:5a:49:69:a1:
72:b9:e0:14:74:73:f9:82:10:2b:64:86:18:20:b2:
b3:7a:96:4a:69:f5:78:37:ad:de:52:bb:41:49:53:
ac:1b:c6:98:dd:b3:ad:bf:47:77:78:e4:ab:ed:fb:
42:30:95:72:ef:8b:8b:5c:3a:fc:9c:a4:f1:75:f4:
29:52:89:e4:2e:a9:a4:b6:e9:77:83:94:80:df:7f:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:8C:EF:2D:06:E1:39:BD:05:1C:61:BC:A7:A3:05:BC:25:5F:FF
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:cf:06:0a:e3:09:ac:cb:1d:04:c9:3d:ad:a8:61:10:11:
49:a0:78:87:8e:27:27:83:db:cc:fc:29:95:94:a4:78:16:5e:
e3:35:01:66:82:0b:24:8b:05:64:3c:1c:06:c0:dd:1d:b8:c5:
d5:d1:be:b4:20:3f:e5:66:5b:ff:5c:5b:51:06:41:09:c7:07:
d6:38:34:be:47:7e:ba:60:f1:fb:7a:89:23:80:e0:7d:cf:55:
e4:31:93:ae:e2:cd:f4:0a:cf:c9:20:62:7c:38:4d:ec:b5:10:
e6:8c:24:94:cb:1f:4e:f6:10:55:80:15:e2:79:a6:d6:9a:99:
8e:46:f5:c0:44:7d:4e:83:bd:6a:64:87:8d:4c:82:3b:e1:ea:
a6:90:ed:4e:a7:6c:6a:28:19:10:a2:d5:1c:26:56:0b:5d:d8:
6b:2b:00:21:f5:41:48:5e:74:0e:3b:a5:bf:e1:50:df:96:0a:
b8:21:61:ef:78:94:f8:1f:73:fc:a3:60:e1:e2:32:10:d4:07:
da:78:43:ff:f2:a9:7e:71:bc:d8:ec:8c:4c:a2:ea:9d:34:6e:
54:cd:67:7c:90:90:11:0a:88:a4:87:fb:c1:bc:5f:9f:4c:54:
de:2b:9f:0a:da:34:10:60:47:a2:13:b2:67:a7:f1:b6:37:66:
9a:5e:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client