Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: RP4PCal2EoVMHV0owB73i+7d5qenQS01QTY8O8TzQsQ=
Subject key identifier: CA:78:91:60:3C:FA:39:91:59:3A:AD:CE:50:C1:AB:35:5D:BF:4A:04
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019A32A12D61DE6C5A231D2E25A0B3DCB613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 103A
Signing time: Thu 30 Oct 2025 01:00:14 +0000
Manifest this update: Thu 30 Oct 2025 01:00:14 +0000
Manifest next update: Fri 31 Oct 2025 01:00:14 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: gnnJNPFnhHH8YWRwwxr1FS9WroDhMR5U8dPBgbs2ux8=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:a1:2d:61:de:6c:5a:23:1d:2e:25:a0:b3:dc:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Oct 30 01:00:14 2025 GMT
Not After : Oct 31 01:00:14 2025 GMT
Subject: CN=ca7891603cfa3991593aadce50c1ab355dbf4a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:0d:f7:7d:1a:18:34:1b:66:2c:6a:08:96:
74:d8:0d:27:0a:c8:fc:4e:12:2a:32:ff:09:5e:43:
d7:8f:ab:7f:4d:fa:c3:d4:33:6a:7b:12:78:41:1a:
0a:69:63:f5:4f:e2:7c:a5:04:b0:06:3a:ab:10:94:
4a:a9:3c:72:28:2d:45:f0:17:1c:2a:ba:9c:91:4f:
be:0e:85:e2:17:ea:bc:b7:f6:f1:7e:b4:de:c4:87:
a1:c8:48:2e:d4:88:bb:3a:3f:ab:80:94:07:a7:a9:
6a:eb:04:d6:b1:72:fb:1a:07:32:23:ad:b3:d3:7b:
f8:e6:04:97:de:cb:24:11:95:7c:9a:d6:73:3a:c5:
3f:0c:eb:41:65:1f:98:02:fa:93:be:88:b5:53:71:
ce:f3:b2:7f:fc:3b:56:ac:0f:80:c0:c3:7f:2c:7b:
6b:d3:9a:3a:b4:a0:ec:0b:3e:9d:90:c6:ce:c7:ec:
ea:47:9a:17:11:0d:4a:d8:7b:96:e9:71:a8:46:f3:
a3:ff:48:11:e6:74:26:62:13:86:78:ed:e8:35:68:
69:ae:c9:65:d3:0e:1e:2c:43:46:76:93:ea:ce:86:
6d:37:7b:9a:e0:ba:29:1f:6f:e8:c5:36:b6:ef:07:
e1:c7:e4:da:bc:23:53:e6:d9:2e:b7:16:18:c5:f3:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:91:60:3C:FA:39:91:59:3A:AD:CE:50:C1:AB:35:5D:BF:4A:04
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:e6:30:1f:0e:76:ef:8d:9a:a3:6d:92:11:42:16:9e:ee:
46:00:ee:c5:22:e4:5c:5f:af:9a:37:7e:83:3e:69:2a:bf:6f:
d5:5b:9d:90:9a:05:d5:56:fd:c4:fb:95:e4:ea:05:94:d2:28:
38:7a:92:8f:bd:6b:2e:8a:e1:92:12:50:77:7c:cb:b7:92:19:
34:5c:fa:e8:aa:10:ce:54:01:43:a6:f8:06:7a:d1:e9:25:24:
cb:89:27:a8:73:b0:1b:b2:69:b8:19:2b:d7:ca:49:15:96:f6:
4b:2c:f2:d0:7d:82:6a:8a:d2:58:99:05:16:1b:40:f6:39:54:
cc:ce:58:8a:a7:b8:ee:6b:96:4d:d3:79:09:6c:81:8a:59:72:
d1:5b:e0:18:62:2a:13:1e:73:65:d8:ee:60:be:ea:90:4e:8f:
86:71:d4:be:5b:ad:ec:11:a1:cd:63:0b:ea:31:15:4f:49:49:
96:bc:b5:1a:da:63:44:85:f1:53:1b:a6:55:d9:c0:d1:52:f8:
fd:e8:0f:4c:07:e7:33:22:ab:e0:bf:2c:5f:fa:64:ca:39:32:
6a:e1:5c:6f:76:33:a6:04:44:20:40:42:62:1a:cb:70:51:84:
7f:5f:06:7d:93:04:65:f1:f2:4f:f5:78:53:d4:9a:d8:7d:32:
c6:cd:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:33:31 2025 by rpki-client