Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: 35w/hX+g968rzHPitJqON7e5Fp28tGw7CXCikSVunxg=
Subject key identifier: 1C:CE:F8:D6:0C:0C:D2:CB:8C:81:AB:AB:12:C7:2E:6B:E0:A2:A0:DD
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 0199228C35FE20A75BE8421E3EB81ED2D61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0F9C
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: gajzazHY/dzRPkv5PDidsTw7GJ3fjlFCFUgN1lB5sRs=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:35:fe:20:a7:5b:e8:42:1e:3e:b8:1e:d2:d6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=1ccef8d60c0cd2cb8c81abab12c72e6be0a2a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:70:c5:5e:35:b7:df:e7:17:e4:06:74:04:
f0:fe:5d:2e:96:a6:91:c4:e0:d7:c5:ac:d2:28:e6:
39:6a:23:28:4b:c6:6d:08:43:18:e3:2b:55:c9:e9:
07:94:59:ea:72:2d:8d:42:6e:23:a9:89:87:ee:c8:
18:f1:21:e5:dc:35:5f:b6:81:62:da:73:8d:3f:a1:
43:41:45:1d:5d:db:7d:35:f9:c8:95:5b:cd:2c:5f:
55:b6:cb:a9:93:8e:d8:86:b5:8c:17:02:d5:48:5e:
62:35:9c:30:8b:81:03:16:7d:72:c4:dd:d5:b0:95:
10:1c:36:d7:df:02:b1:d3:93:7a:c9:90:1d:70:ce:
98:e8:46:dc:4d:08:51:41:a0:2a:6d:99:67:a9:06:
94:e6:b6:d2:c9:57:e9:5e:ea:66:12:64:f8:4e:4b:
55:34:a6:8c:41:88:fe:e7:b0:d6:1f:08:5c:64:af:
f4:cf:c1:19:3b:a5:83:bc:08:22:ed:3a:3c:df:be:
95:7d:fd:87:f2:9c:26:fd:ca:77:f5:ee:b7:0c:61:
b4:a3:4b:a4:22:ec:d8:42:27:6b:68:d9:54:47:4b:
2c:cc:44:bf:44:f6:1d:ee:12:f5:6f:b8:e5:f7:58:
e3:bb:14:04:63:64:b1:1d:c9:67:4d:59:1e:df:0c:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:F8:D6:0C:0C:D2:CB:8C:81:AB:AB:12:C7:2E:6B:E0:A2:A0:DD
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:29:fd:ee:f2:1e:f7:ce:70:4a:32:25:6e:2f:fb:27:86:08:
bc:25:30:9b:06:30:be:54:e2:c1:c6:0e:9a:76:10:3b:d1:c6:
b3:9d:fd:a1:74:3a:fd:58:98:8c:85:23:be:2b:4a:fa:08:dc:
6c:40:3d:8c:7e:a4:6d:4f:85:e8:b0:69:d4:de:96:d1:f7:7a:
39:cd:45:16:4d:98:05:01:b6:e8:86:cd:b0:07:91:ce:73:c9:
da:6a:a8:64:3a:47:ad:61:43:52:a4:6e:56:e7:3e:43:2c:54:
06:cc:66:7c:37:e8:10:ae:27:b5:69:04:22:11:a4:b7:01:f1:
86:81:4a:a6:1f:41:93:c5:db:35:dd:3c:de:0f:a5:50:4f:03:
d7:0d:d5:22:13:19:55:07:a8:b2:a7:be:7d:ae:a2:e1:43:79:
d9:e2:b9:13:85:b4:1a:de:4e:ea:9b:e5:93:46:27:76:64:be:
96:82:71:22:ac:3f:9e:11:43:fd:f1:ae:f1:e2:1c:cf:ae:b4:
49:f2:20:da:87:e9:81:11:16:ea:97:b8:0a:7c:e3:d4:58:a3:
95:ed:ae:25:b6:1a:1a:ae:f6:4e:67:d1:c4:b7:0f:ea:dc:01:
4f:20:41:0b:7b:d9:3b:37:03:e5:b9:7f:b7:0a:ec:9c:58:ca:
c6:f5:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:19 2025 by rpki-client