Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: ftjTSlrYzV8dYPo66TUhJGFMMOVj+6YYzfacVHMHx/Q=
Subject key identifier: 88:E0:55:EA:8C:2F:DC:B3:97:11:4A:C6:8E:47:F6:79:A0:0D:44:B3
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 0199228C93C8BB645EB7B41705DC15F3E431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: D9
Signing time: Sun 07 Sep 2025 05:01:02 +0000
Manifest this update: Sun 07 Sep 2025 05:01:02 +0000
Manifest next update: Mon 08 Sep 2025 05:01:02 +0000
Files and hashes: 1: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: ToBv1z1ZAQUw/R5W3rAGKQC2d1i17nEk/hiZTyENs0k=)
2: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:93:c8:bb:64:5e:b7:b4:17:05:dc:15:f3:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Sep 7 05:01:02 2025 GMT
Not After : Sep 8 05:01:02 2025 GMT
Subject: CN=88e055ea8c2fdcb397114ac68e47f679a00d44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:5b:59:7f:27:75:76:ad:89:65:d3:87:87:
4b:dd:bb:75:ce:57:83:99:0d:ac:c6:d6:c7:7d:73:
74:4f:39:d5:65:e5:ef:46:ca:dd:f8:d5:00:5c:2e:
2d:b1:61:84:41:7a:e0:52:c7:ba:1d:53:2e:8e:80:
0b:a4:81:18:02:83:cc:31:97:8a:ae:38:c4:97:58:
b0:b4:37:0a:2b:e1:41:1f:86:c1:69:1b:ed:3f:fa:
26:76:c9:bb:d0:b9:72:e2:64:c7:31:1b:bd:0f:17:
38:f3:21:01:8f:d8:4a:b9:18:e5:28:8b:f4:1f:f3:
fa:f4:09:fe:cb:16:44:7c:2b:e9:18:79:9b:27:94:
9a:bf:43:97:ba:9c:86:76:23:69:e6:84:d3:dc:2a:
a5:09:fc:0d:53:bc:cc:57:43:2e:e7:85:95:d3:4d:
5c:d9:b6:c3:ad:d3:09:b4:65:10:89:c2:15:7a:f5:
75:4f:bf:95:1d:8b:94:cb:d3:c8:16:7d:7f:1b:c5:
b0:2a:f3:85:9f:83:63:f5:e3:7d:ce:84:72:14:01:
dc:95:57:3c:56:01:87:b4:69:f4:3e:ec:2e:63:f2:
5b:bd:2e:e8:56:1e:1d:03:a2:cb:f1:24:b5:6b:b4:
d9:a1:19:c6:7f:e8:13:18:0a:4d:b5:f9:87:3b:54:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:55:EA:8C:2F:DC:B3:97:11:4A:C6:8E:47:F6:79:A0:0D:44:B3
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a1:d6:70:38:43:22:77:87:4c:0c:8b:76:d9:e6:a8:31:ac:
c8:34:22:a3:ff:3a:4f:6c:c1:78:9f:9b:6a:c3:d0:97:2b:28:
33:82:fd:db:a9:f4:c9:8c:5e:81:a0:a3:31:ab:4a:74:7f:28:
07:09:ba:0a:a3:61:0d:23:fd:c2:35:dd:83:fb:f5:9a:50:27:
ee:47:20:ad:55:7e:b9:93:55:64:9e:70:d9:13:84:5b:ca:15:
f6:39:43:f7:ca:96:03:65:e6:35:48:ed:4c:18:46:55:49:3d:
0e:6b:9a:b2:06:4d:14:29:6b:d9:3c:ff:7d:ee:35:84:6b:99:
85:6d:5b:a7:c9:f3:e9:8f:f6:38:57:b5:10:8e:ec:90:2e:e8:
85:6b:4d:69:b4:17:63:55:bf:cb:94:b0:9b:32:9f:5e:47:fc:
66:76:bf:01:73:dc:2a:8e:14:a0:fc:35:2b:f8:94:2c:4b:bd:
84:73:11:11:62:ca:a9:86:34:9e:51:cf:dd:c5:03:5f:8b:64:
bc:0d:a7:a0:2f:2a:de:ef:49:27:95:4a:46:c2:00:2d:11:20:
fa:e2:a4:2c:0c:fb:64:c2:71:c3:de:ec:67:78:4e:63:55:0d:
1f:4a:8d:1c:43:ff:e6:dd:4b:40:b8:ab:44:ef:a6:a8:26:bb:
46:9f:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:06 2025 by rpki-client