
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: 9X3zSUITlxJtmC7HATGs4tXcn9UFqS9cxiAqJEqHQ9E=
Subject key identifier: 94:10:5C:A4:86:3F:B8:61:45:B4:ED:77:5A:E1:55:1D:AC:63:2A:AF
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 019923A0117378DB875B31B45554874F1E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:56 +0000
Manifest this update: Sun 07 Sep 2025 10:01:56 +0000
Manifest next update: Mon 08 Sep 2025 10:01:56 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: YGeauu7UeRoFjX9lwRT0nkWgPw+i6PKUOFSFstvC2Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:11:73:78:db:87:5b:31:b4:55:54:87:4f:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Sep 7 10:01:56 2025 GMT
Not After : Sep 8 10:01:56 2025 GMT
Subject: CN=94105ca4863fb86145b4ed775ae1551dac632aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:a6:26:b2:8c:66:ad:f4:42:57:1e:ef:fd:
51:68:6f:49:3e:de:73:be:ac:14:cf:07:cf:6f:bf:
43:73:e0:ac:d8:c4:e0:20:bd:d7:57:7d:5e:2d:78:
0e:68:b9:ea:32:64:c4:91:7b:26:52:b6:ad:09:42:
c9:2e:60:40:76:7f:b9:f7:d7:a0:d7:4b:7a:1b:fc:
e8:19:95:fe:30:7a:1b:e6:c5:c2:9d:b5:3f:82:f6:
56:07:eb:a7:72:da:ae:47:6e:f7:4a:15:99:a9:0f:
39:02:04:f3:a9:dd:47:81:84:23:49:eb:7c:1f:79:
44:ba:cc:9e:d1:f4:a4:b1:bb:1e:75:bf:9a:c4:1f:
6c:95:7b:81:4f:7b:e5:4c:83:b3:6a:81:7e:03:ad:
39:e6:8c:60:39:7e:5e:25:de:94:42:1d:4a:e4:78:
75:9d:35:6f:16:4e:c8:46:b2:a1:66:72:a1:49:3d:
8c:dd:a2:75:2d:00:d6:05:96:07:b2:5a:5a:bb:d4:
7e:22:3f:c4:6d:66:ce:cb:a1:de:8f:30:20:f3:3c:
f8:81:1c:c8:fa:dd:b8:bf:0b:1b:fb:0f:04:29:41:
91:4e:5b:28:c3:5e:ff:cc:91:ae:4a:f4:8c:25:3c:
4e:02:8f:70:d0:68:37:ce:c4:ed:98:3d:48:7d:a7:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:5C:A4:86:3F:B8:61:45:B4:ED:77:5A:E1:55:1D:AC:63:2A:AF
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:c0:a5:23:9f:53:fe:5d:54:f7:63:55:42:98:e6:1b:2d:
77:81:70:0c:30:60:33:46:3c:9f:4c:42:04:3a:d2:d9:66:cc:
f4:51:75:3a:ed:2d:6e:d6:2b:a1:7d:6d:bf:0b:f1:fa:b8:19:
90:a1:67:bd:9d:d2:57:39:3d:eb:ff:9b:d0:b2:63:a3:1c:f3:
02:bb:69:b0:43:8f:be:74:17:ce:2b:c9:ef:fa:49:cc:2d:7f:
63:6b:cb:59:10:50:8c:41:6b:ee:82:45:b9:e0:7e:3b:ea:5d:
07:bd:a0:d4:50:4a:a4:79:ae:56:91:60:af:7c:fd:17:a8:6d:
60:0e:30:b2:74:22:de:47:d6:7e:68:70:f1:cb:5f:07:25:2e:
66:ba:30:74:88:41:e1:78:31:b9:db:00:58:bd:bb:be:e1:7d:
2f:9b:42:c5:83:8d:17:d8:eb:e1:74:7a:af:b1:66:0c:7b:e3:
b2:af:94:8c:bc:0d:df:b5:4a:a8:29:c8:ff:db:2b:35:49:e4:
b0:17:b2:e4:ae:76:02:0d:14:ef:94:10:b7:28:ec:e1:d4:2f:
b3:82:78:34:50:57:52:87:bf:04:70:94:15:8c:87:03:86:19:
62:75:15:4d:50:32:49:49:3b:ee:8c:a4:6f:a5:cb:66:e4:82:
20:bb:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:07 2025 by rpki-client