Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: CwAiIJ4b0R4Ebf2y7JiXVhGFuInHShMJPsjxqtN353k=
Subject key identifier: B4:AA:FA:21:B7:9A:F7:D3:79:89:73:1A:E7:BA:08:46:AF:E0:B8:F7
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 019A7225C4F004D78D1C813E5BB01D51B96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 0928
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: xzuGJhLk7tVgAVlKMHX+rhq5Q7S+izFNrjw8g5iGxwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c4:f0:04:d7:8d:1c:81:3e:5b:b0:1d:51:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=b4aafa21b79af7d37989731ae7ba0846afe0b8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:ca:08:8b:90:3d:63:b1:69:7e:49:a0:cd:
98:ef:0e:b1:06:2f:8e:56:61:29:9f:01:23:d7:3e:
c5:76:d4:c4:dd:9b:20:71:65:8b:b4:46:ac:5a:8c:
0a:45:64:cc:8e:03:6a:45:ec:fb:81:e6:bd:f3:f3:
3b:08:a4:a1:c5:14:f7:70:1b:c1:60:0c:6d:dc:c5:
54:aa:e9:28:a8:30:ea:85:01:62:1d:30:40:88:af:
14:d9:94:42:2d:b2:8d:2c:8b:57:87:c3:2b:4c:93:
73:1c:11:c6:e9:7a:c1:44:2f:c1:1c:84:98:c6:c4:
d9:78:3a:a3:08:a3:a7:70:32:27:ed:77:a6:0f:64:
ca:45:ce:1e:a2:68:46:e8:21:e8:2d:10:83:b6:54:
23:c6:e9:f4:17:1e:8c:37:fc:b8:72:66:ac:1a:36:
83:ca:93:fd:0c:45:9f:f5:af:74:ad:83:99:83:5a:
23:de:31:49:cb:98:99:ac:0f:eb:92:72:c1:c5:b5:
c5:3e:c9:b9:fa:75:c7:cc:20:d8:86:15:0a:ef:2e:
7a:fc:96:29:2c:dc:47:cb:60:18:d6:36:1d:ff:13:
e5:24:08:f3:3b:f8:a3:1d:f6:7c:0f:75:e2:67:65:
a5:f8:62:59:03:70:80:80:21:12:32:73:19:91:88:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:FA:21:B7:9A:F7:D3:79:89:73:1A:E7:BA:08:46:AF:E0:B8:F7
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:18:23:80:fc:84:eb:3d:ec:cc:0c:04:fb:81:c3:c0:39:e7:
7f:fa:96:51:6f:06:4c:ad:6c:13:e2:d8:58:ef:a5:62:eb:9c:
60:b6:fc:18:7d:84:c5:bf:3b:66:36:a2:76:2f:a1:6e:f4:51:
80:55:28:03:a3:a0:93:bd:66:2e:45:f9:0d:17:a7:0d:58:8d:
17:e4:ae:ea:67:eb:9f:c7:5d:16:f6:0f:6a:9d:6d:25:50:ef:
65:e5:60:7f:4a:ac:1c:67:fc:1d:0e:87:89:b1:3a:1b:4b:55:
6b:f3:f3:4c:db:ec:65:55:01:59:81:b8:07:9f:a7:7a:f8:6e:
bc:78:1a:fd:a6:57:39:d0:a7:f2:23:f1:05:f8:e4:88:3d:a4:
0d:4c:f1:af:47:f5:42:fc:aa:3a:9d:a7:d6:f6:1d:9f:93:39:
f3:ce:e4:70:df:dd:40:e4:8c:48:25:eb:99:19:9a:42:88:e9:
d4:a4:5e:e4:d5:0f:f1:89:62:45:e7:ca:61:0c:4a:ec:c9:02:
84:ee:f7:72:ff:7e:23:47:4d:6e:6f:21:07:e8:c1:e3:67:d6:
f4:bb:45:f8:87:4a:68:a7:2c:6a:1f:f4:b0:31:d4:9e:b6:67:
f1:a3:d9:6c:e2:f2:c3:cb:c4:93:f0:73:38:33:67:75:b0:7c:
f9:b9:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:57 2025 by rpki-client