Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: GvaMryYXVT6TiJZJOW0bkacUuSHhGomNohAJV9Sl/rc=
Subject key identifier: 81:DB:8A:D8:E7:AA:B4:F6:1D:CD:00:6E:CD:E6:A4:34:34:16:B1:19
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 019A71B7B502FB1F60960AEAF157B55B98FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: p8NzffmUTC9EvfImLmm3V0cV+kbtk0s0wCQC/xQ3OdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b5:02:fb:1f:60:96:0a:ea:f1:57:b5:5b:98:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=81db8ad8e7aab4f61dcd006ecde6a4343416b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:dc:bd:05:9c:b5:56:98:10:01:03:16:9a:
72:5f:d7:90:6c:88:86:7d:3d:44:05:6a:f9:94:66:
d1:15:27:b7:44:b5:ee:7a:a6:a4:b9:a6:77:3d:ff:
0d:76:8b:d9:11:e1:03:e7:e0:f8:0e:88:d3:4b:1d:
d6:56:b7:d0:f5:6c:6e:39:66:25:c5:f8:22:7c:8b:
16:3c:89:15:75:47:fe:13:3f:41:83:72:fd:62:7d:
9a:70:b8:f8:37:c7:e6:17:e1:7f:f1:36:44:15:a1:
4e:39:bf:79:78:c9:6c:7b:ab:5b:17:ed:76:97:bf:
16:9e:15:a2:c2:23:bb:b3:3b:0d:ae:31:88:10:87:
55:6b:ca:66:00:a0:6b:ce:da:9b:f3:39:96:5b:11:
57:df:c9:a2:8c:da:af:9a:8a:bf:bb:05:f8:5e:a9:
b0:c0:55:1b:30:ca:73:0c:20:d5:e8:7d:86:d0:84:
77:e3:c7:9c:de:9e:4e:d7:55:82:e9:d4:87:b1:13:
3e:14:9e:fd:d0:79:53:bb:3f:b3:8f:c8:65:40:30:
38:3e:ea:ab:10:74:71:42:a7:00:c4:9b:3e:ec:6a:
b8:cd:cc:42:47:e0:ab:41:ba:43:d7:b7:69:c7:c4:
78:eb:bd:57:be:36:3b:6f:f0:9e:12:b8:fd:e3:42:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:8A:D8:E7:AA:B4:F6:1D:CD:00:6E:CD:E6:A4:34:34:16:B1:19
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:45:7e:56:d3:16:69:e5:94:30:72:53:89:a6:f6:07:37:
10:a5:62:d9:a4:3e:d5:9a:41:07:6c:48:b3:38:a9:66:2e:18:
dc:8d:a8:e4:a9:95:18:4a:6a:60:8a:93:c8:7e:45:2e:e1:c8:
54:e2:eb:95:7f:9d:ed:a5:c5:d0:9f:30:f6:79:d4:fb:03:69:
aa:9f:b5:cb:98:87:22:a6:f9:2a:1c:6d:5a:9c:13:68:9a:57:
99:81:50:cf:34:73:44:7d:be:76:b1:d9:3b:8d:0b:30:eb:2d:
17:69:de:9a:d3:5b:90:c6:46:7d:ba:cb:4f:9f:09:10:c6:dd:
6f:88:a9:c2:72:23:26:b1:fc:8b:24:b3:fa:3e:bf:41:b4:d0:
d5:0f:97:4b:aa:bb:a5:a9:21:5c:e9:c1:44:43:6b:33:97:57:
23:4b:7d:80:16:fe:d5:b9:0e:62:5a:12:11:8b:1b:42:1a:14:
c0:fc:a7:f0:45:2e:3b:0b:6c:1c:0b:47:d4:24:37:66:7c:ac:
39:74:c8:05:d4:ae:44:c0:bc:ac:2b:01:32:d2:9d:31:84:00:
3a:7c:5f:94:d3:28:6c:aa:ed:b8:7f:4f:96:11:40:14:14:0a:
a0:6d:f4:a3:29:1f:78:5d:6c:ef:28:3b:29:a4:4f:9f:aa:6d:
ef:42:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:05 2025 by rpki-client