Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: S7d+C1Yl8V/SvdgghBt27jls7wL+GQKzegs36x8gTpQ=
Subject key identifier: C0:9A:FA:08:13:D5:29:23:E1:62:0C:BE:AF:C4:DE:C8:CD:3F:1A:B5
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019A26664A7D1D6147F2A57A4C614FEE94AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 16:00:29 +0000
Manifest this update: Mon 27 Oct 2025 16:00:29 +0000
Manifest next update: Tue 28 Oct 2025 16:00:29 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: Yc4DodGGnvqeeYTRBfZGHO7629JahmQjSh69H4F9IM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:4a:7d:1d:61:47:f2:a5:7a:4c:61:4f:ee:94:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Oct 27 16:00:29 2025 GMT
Not After : Oct 28 16:00:29 2025 GMT
Subject: CN=c09afa0813d52923e1620cbeafc4dec8cd3f1ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:56:4c:74:43:21:4a:08:20:aa:b7:47:95:
b9:3e:05:87:f2:b5:63:d9:c2:78:c1:76:8d:94:17:
82:00:88:5c:8c:53:1f:d1:cb:73:ef:f7:d0:67:3d:
8b:eb:4e:b7:d8:20:c2:2e:5d:1c:5d:bf:64:3b:a8:
5f:6b:2a:1a:66:4c:1c:f6:70:b4:6f:0c:7c:31:6d:
66:7f:0a:be:78:7e:69:bd:08:1a:56:a9:f5:a5:64:
b5:39:c1:3a:2f:da:57:76:51:05:b7:1a:69:ee:cc:
a2:05:84:28:9d:df:be:81:1e:d2:a4:93:69:ef:d5:
76:93:07:12:fd:eb:03:4d:82:20:da:8c:fa:aa:f2:
74:c3:18:bd:d8:c7:da:2b:6a:97:66:04:91:07:09:
79:ce:2c:25:de:d9:45:da:06:77:3a:5c:29:cb:7b:
7c:c2:06:54:38:ec:39:94:51:e2:89:c6:1e:4c:71:
8b:44:ca:ae:bb:0d:64:d3:19:05:01:97:07:c1:d2:
46:77:9b:2c:5a:cb:9f:09:83:a6:dc:11:3c:39:73:
af:73:86:58:cc:a0:ec:e0:15:33:e6:f2:27:ee:7d:
00:e0:26:df:a7:03:4e:fe:8b:83:6b:39:20:f9:5e:
0f:3a:d9:a5:24:74:eb:d6:9f:35:4d:1a:3e:ef:09:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:FA:08:13:D5:29:23:E1:62:0C:BE:AF:C4:DE:C8:CD:3F:1A:B5
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4e:d4:20:8a:aa:cd:28:75:e9:93:10:4d:5d:3e:ef:b7:48:
99:ea:3e:5d:dc:d2:1f:4c:22:bc:02:a1:d0:81:0b:10:27:6b:
36:6c:0f:dc:9c:d7:90:b0:bf:b1:58:f2:78:b6:d8:b8:80:1b:
40:2a:ae:6f:bb:6d:b9:19:a8:d2:5d:a7:bf:4f:ed:bb:75:61:
f3:a1:41:be:e5:fa:c8:a6:9f:33:82:63:db:d7:0d:45:cd:72:
58:80:6b:d8:b7:c3:fc:e4:ab:5d:8b:48:9b:c0:37:1f:4d:42:
40:48:92:86:b5:fc:5f:dc:5b:30:d5:9c:12:fc:f6:cc:44:eb:
8d:e6:0c:4f:df:45:5f:f2:22:0b:7a:01:3f:84:3a:92:93:68:
b1:c0:91:73:2c:45:0f:20:f1:8b:83:4f:85:4e:60:ab:c3:cd:
05:8e:96:2b:44:19:6b:7e:66:46:75:d0:8e:1b:3f:6e:aa:88:
96:5f:1b:12:99:12:60:02:0c:74:45:48:88:49:93:70:8a:ff:
6d:5c:3b:25:bc:0d:12:32:d2:92:1d:21:e6:6e:72:7e:12:19:
d4:a1:19:5e:29:24:3b:ac:22:d4:c6:3b:97:cc:5e:70:de:4d:
90:c0:06:69:62:46:ab:cc:4c:11:94:fe:7d:19:59:e8:50:2e:
a0:6a:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:54:17 2025 by rpki-client