Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: ohqGATRtP0mqL0ntU9xTOeLaN4WwukAxtS9JeURHoSk=
Subject key identifier: A3:4B:5B:52:A5:88:D3:44:CE:CA:56:38:E9:6C:0B:71:70:7A:A2:A4
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 01993839ABBC9E99A330F75854078DFBFBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1395
Signing time: Thu 11 Sep 2025 10:02:07 +0000
Manifest this update: Thu 11 Sep 2025 10:02:07 +0000
Manifest next update: Fri 12 Sep 2025 10:02:07 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: ABPoMpdVDLy9taOcAnnLklIk3JJMT5SSzNm7Khtg1VY=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:ab:bc:9e:99:a3:30:f7:58:54:07:8d:fb:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Sep 11 10:02:07 2025 GMT
Not After : Sep 12 10:02:07 2025 GMT
Subject: CN=a34b5b52a588d344ceca5638e96c0b71707aa2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:ee:bd:f9:d4:02:61:7d:07:b7:82:ba:90:
0a:49:3a:de:3e:51:41:08:b1:03:ec:7a:72:dd:81:
8e:7d:c5:68:74:49:51:77:d4:ce:48:25:5d:db:c4:
22:73:fb:cb:31:87:dc:19:5a:fa:15:32:04:42:79:
b0:c4:78:7a:85:e6:07:86:67:bb:3f:7c:b0:16:ab:
de:95:08:d3:44:bc:c8:4a:45:ab:9e:17:aa:4a:24:
04:89:26:1d:10:3b:d0:1f:0b:57:c6:f7:2e:a2:b0:
40:d7:de:0b:fd:78:96:a5:ee:44:b9:d7:89:14:d5:
8f:ae:94:13:2c:c2:89:36:9e:64:e0:70:95:cf:3e:
59:b9:e7:f7:9a:eb:d6:68:c4:fc:1b:47:6f:fd:77:
88:24:b6:1a:d0:bf:5f:e7:cb:9c:9f:4b:ae:a6:47:
39:d2:63:4e:1a:4e:54:9f:c7:62:46:fc:fb:0e:9e:
d9:ba:c9:9d:6b:67:76:e2:4b:5f:63:eb:1a:7f:fb:
bc:67:0f:d8:27:04:32:b4:46:2d:e2:4b:8a:02:67:
09:2a:75:19:81:03:39:08:63:45:17:7c:3a:19:13:
d5:bc:4e:6e:6a:d7:cd:41:9d:a1:32:20:4a:9a:e8:
53:9b:ed:b4:01:f2:14:e1:40:00:f9:cd:7f:92:a8:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:5B:52:A5:88:D3:44:CE:CA:56:38:E9:6C:0B:71:70:7A:A2:A4
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:ff:98:1e:1e:d5:76:0b:1b:7e:df:35:15:b2:74:f3:ca:
4c:81:b2:48:9b:5d:6b:18:6c:3c:c8:fc:ee:ec:0d:1f:cd:c4:
c9:9c:45:b7:92:4e:c7:0d:62:ba:d4:d5:f7:66:58:28:f0:1e:
2e:49:f8:67:96:17:de:41:84:eb:73:89:99:e1:9e:94:1b:92:
ca:6d:96:7b:92:b8:22:9d:d5:51:3d:0b:39:07:67:d4:76:92:
a1:70:70:f8:3a:ff:54:03:1a:20:c6:30:83:43:8e:74:46:c1:
e1:bd:9f:8c:f9:24:fc:bb:f3:e6:fd:5a:ef:c8:2a:41:6c:7f:
bb:c6:d9:99:50:0a:c8:0e:29:16:c9:ba:e1:91:cc:5b:d6:17:
40:6d:57:3a:c5:21:83:a8:55:65:fb:b1:f3:8c:68:56:85:72:
65:dc:35:96:78:d5:7f:2b:5b:5d:e3:ab:32:cc:25:d7:a4:37:
71:72:88:6d:a9:19:97:de:fc:c3:3c:b8:b1:f9:6f:d8:ef:1f:
f3:99:d6:27:2b:89:37:f2:93:f4:8d:22:61:02:80:85:b1:2a:
48:54:37:f8:9f:49:cd:1f:70:2c:b6:46:04:81:7b:20:bd:eb:
ef:36:39:9a:8c:11:22:01:7b:73:e2:ef:ff:26:f1:5a:51:c2:
a0:4b:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:32:14 2025 by rpki-client