Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: OSaxb/BszNilbuAYWDedZZ2x79TDyZ2IhzvVb/rhFgA=
Subject key identifier: E4:5E:AA:9A:2F:CB:CB:4C:F3:C9:CF:4E:64:3F:F6:89:43:DB:42:DB
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019A72263B3AA99979D978758F2E4AF26E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 1159
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: uXURyp1Iz/I9734+tNUqSMU7F7+8M8M4KL+xG3vfX7c=)
2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3b:3a:a9:99:79:d9:78:75:8f:2e:4a:f2:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=e45eaa9a2fcbcb4cf3c9cf4e643ff68943db42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:00:4c:64:b6:ad:08:94:54:a5:d1:14:17:
0f:5e:c4:f7:6e:4a:13:9c:25:94:32:f6:29:99:61:
7e:91:54:aa:39:9b:61:69:82:ae:eb:51:a7:f0:b2:
35:3c:ea:2d:e2:55:84:1b:97:4f:bb:e2:ca:75:d9:
0d:ba:0e:b7:f0:e4:d5:d6:58:60:05:ab:9a:d8:57:
0e:77:10:39:ef:e9:1f:c3:b8:d5:e3:76:de:dd:32:
ba:8e:36:09:8a:47:77:1c:b9:30:c7:15:8c:e2:59:
46:f6:a1:2b:fe:a8:67:72:49:ab:87:2b:71:df:52:
10:7a:d3:5f:89:65:eb:af:7b:6c:b1:05:aa:7a:30:
68:d7:a5:ee:47:5a:0d:57:90:3a:b0:df:a2:29:37:
ae:3f:46:da:c2:e2:77:da:8d:72:ff:3b:a6:c6:ac:
73:e2:bc:f5:d0:f0:cb:58:2f:2f:77:31:3c:47:dc:
83:9c:a9:9b:d8:47:05:4d:f3:97:9f:7a:14:d1:c6:
59:e6:4e:06:99:da:52:db:81:ca:fd:c8:89:3a:6e:
6a:8e:e2:17:83:0d:1b:3b:5d:79:ae:29:fc:16:e1:
49:ce:e8:f7:5c:58:c3:a5:68:4c:c6:fe:e6:1e:6b:
fd:ae:00:4f:45:03:1a:33:df:4d:db:28:f3:6c:64:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:AA:9A:2F:CB:CB:4C:F3:C9:CF:4E:64:3F:F6:89:43:DB:42:DB
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:f5:d3:20:33:e8:5a:31:cd:08:89:ed:46:2b:5a:83:6f:
9b:69:a1:9d:08:8c:91:42:96:e2:8e:b3:6e:1d:1f:80:13:19:
7c:da:fc:33:6c:a1:4d:cc:5b:ff:2f:d5:a6:c4:9e:69:6f:0e:
97:f8:c0:a0:af:d1:b7:05:df:23:2b:d3:0c:1d:09:40:e4:d1:
53:81:50:b3:70:2d:40:de:f8:6d:67:4a:74:86:c7:80:fa:51:
ce:26:be:b8:de:24:61:0f:97:7e:3e:6c:da:1f:b1:8b:50:5c:
60:35:a9:c9:70:b7:5f:3e:62:5e:04:02:f1:26:d6:65:ca:fc:
16:d5:4f:38:96:3b:58:fe:88:b0:7c:47:ef:f2:84:ed:f2:a7:
b0:83:9e:37:79:13:c1:4a:a7:e8:2f:f1:3a:1a:57:cf:cb:b6:
12:3e:9b:e2:d6:73:7c:d5:3d:ba:79:69:e9:9c:64:33:f1:76:
0f:3d:44:9c:c2:c8:28:98:e3:34:d9:3b:7c:30:ce:1f:20:8d:
a0:95:20:54:b4:68:d5:3f:5d:30:bb:4f:a5:08:6c:52:bb:54:
af:06:78:fc:ea:57:c6:ba:17:51:96:6a:08:ca:a4:91:d8:0b:
86:26:5d:6b:f3:5e:4c:e1:8b:66:92:06:5e:15:cb:5f:5e:73:
31:fb:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:08 2025 by rpki-client