Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: 64yb85/ua0mpzjqR03Rb5Kms6maFKkexSDpOu1srNYs=
Subject key identifier: D1:F1:35:3C:4A:91:D5:7A:F9:DC:A3:E1:27:E9:AB:7F:37:DD:D3:2B
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019A2E201949C77E7B65E2E1CA5FF8900B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 13F8
Signing time: Wed 29 Oct 2025 04:00:46 +0000
Manifest this update: Wed 29 Oct 2025 04:00:46 +0000
Manifest next update: Thu 30 Oct 2025 04:00:46 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: wCkWnSUVsUxTyXEBxlJGzPb2/qkzN9sMfzFhEafdnO4=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:19:49:c7:7e:7b:65:e2:e1:ca:5f:f8:90:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Oct 29 04:00:46 2025 GMT
Not After : Oct 30 04:00:46 2025 GMT
Subject: CN=d1f1353c4a91d57af9dca3e127e9ab7f37ddd32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:06:c9:ab:96:49:2c:5b:72:bf:e2:16:6c:
0d:34:3c:c7:0c:16:b6:4a:26:e6:37:ce:d2:d0:4b:
f4:77:fa:dc:f2:4d:4e:7c:10:45:76:9a:d6:a0:b9:
79:57:91:0b:2a:29:92:d8:3a:46:0c:f7:b2:4f:65:
8e:bb:71:3c:1c:6c:cc:e0:c1:31:d9:7f:56:2a:a5:
03:8a:71:54:a8:54:6d:d3:fb:cc:bb:5f:63:4d:92:
07:a4:0d:be:0c:63:67:21:21:cd:45:6a:ea:b8:bb:
92:a1:0a:4d:8f:32:59:2b:21:3e:3f:d1:2d:ba:4e:
67:2d:1f:05:67:e5:9f:bf:11:b9:22:3d:8a:e7:c1:
a9:87:86:ab:33:f6:bf:a6:ed:c2:f4:71:91:36:25:
b4:71:6e:29:e4:5d:ee:f7:aa:9b:9a:4e:4b:c6:c7:
ed:81:d7:93:61:2e:23:73:a1:31:6f:58:87:e0:e3:
00:1c:81:12:a8:ae:28:07:a2:1e:83:a3:9c:b0:5f:
8c:b4:3a:5c:2b:57:b4:d0:a3:ba:f7:b2:ea:68:ef:
11:0b:63:d1:66:7c:56:d9:1f:b8:cd:b7:62:8f:be:
c4:a4:f5:99:db:5d:c0:6e:8f:c5:65:50:a5:9d:0c:
2f:da:72:55:18:73:92:89:c3:0e:6e:86:59:ba:d2:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:35:3C:4A:91:D5:7A:F9:DC:A3:E1:27:E9:AB:7F:37:DD:D3:2B
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9e:41:d8:89:e1:eb:0f:b1:18:0d:71:57:f2:61:82:1a:a9:
0b:94:71:b8:1a:8c:43:4a:4b:a5:42:cc:6d:94:44:3f:45:39:
cc:2a:76:c2:e8:6c:c8:4b:14:0d:b5:2d:cf:bf:ad:ed:97:b6:
81:c6:d0:d9:c0:7c:8f:cf:d2:50:12:0c:f7:08:8f:a5:1e:e1:
b1:17:0e:f0:44:32:c3:59:ce:fb:0f:5e:f4:4c:01:85:de:d0:
81:14:6f:21:9b:03:34:77:46:3d:0f:40:82:f0:e2:f6:c3:d9:
57:8d:5d:17:19:a4:f8:ee:36:4b:10:16:1b:0e:7f:8b:20:c2:
02:8b:f0:63:a0:29:7f:f4:63:6f:5c:c4:c1:ba:e3:01:85:61:
f4:91:1b:85:7a:69:f9:ec:5b:22:64:c2:85:38:15:e8:bf:1a:
f5:b0:d7:3c:f2:6a:d6:11:40:c2:2e:50:2d:68:ec:b1:ae:c8:
e3:ba:f8:29:e1:3d:b8:bf:73:95:a0:9f:51:81:d6:26:f0:c3:
a5:83:71:07:41:43:ef:db:6b:05:1e:97:a9:e0:50:23:86:91:
5e:4c:d4:c3:b0:b7:d5:1d:04:a7:b1:a0:80:7e:ef:d4:16:1d:
c8:ee:f0:96:c3:d7:c0:c3:5d:4c:d7:2b:17:53:81:42:15:d5:
a0:bb:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:45:00 2025 by rpki-client