Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: uuzQUHet7wSEOGemEfTF9wJYM4GxSo3BLNURbN8TO3M=
Subject key identifier: 40:00:28:5E:DB:8D:B3:FD:02:FF:0A:34:86:B5:B1:59:79:8D:73:CB
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0199FFC722BEC9440A93F23EDBD071BD54E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 0446
Signing time: Mon 20 Oct 2025 04:01:04 +0000
Manifest this update: Mon 20 Oct 2025 04:01:04 +0000
Manifest next update: Tue 21 Oct 2025 04:01:04 +0000
Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: lP1V+9FgeiYE/FhLEKiA/9vaqZYkUH1Kdo3sq3I5Ozs=)
2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:22:be:c9:44:0a:93:f2:3e:db:d0:71:bd:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Oct 20 04:01:04 2025 GMT
Not After : Oct 21 04:01:04 2025 GMT
Subject: CN=4000285edb8db3fd02ff0a3486b5b159798d73cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:44:4c:2f:53:59:b1:32:a0:06:d8:bd:60:
a2:d3:29:ee:3f:3a:10:d4:e4:fc:fb:9f:e0:e3:69:
67:69:cb:ff:c7:81:75:c0:57:f9:48:92:77:00:62:
91:fd:9b:2b:1d:e9:83:42:ab:de:7f:93:05:69:f2:
ac:f5:64:10:e6:86:3d:3e:22:0b:18:56:21:ee:12:
16:74:fd:9f:b7:7b:88:f1:58:0f:0b:29:5b:77:d3:
c2:38:66:00:d2:18:a6:8c:38:b4:65:3c:80:41:64:
a5:d8:2b:d5:a9:51:72:84:94:3f:7b:f9:ed:b4:aa:
d9:ee:cc:9d:19:8e:41:64:0d:3a:51:61:64:5b:36:
32:f3:33:14:65:00:13:b2:ab:35:59:9f:2f:99:c9:
6e:d1:85:09:3d:7b:53:28:eb:0c:6a:6b:c5:62:88:
6f:11:37:f2:7c:84:35:11:3c:8e:d7:43:f3:10:cd:
00:7a:7d:75:86:94:23:04:22:40:b8:df:58:d7:3b:
9f:1f:02:46:58:21:d0:0b:d9:e1:1e:bd:ac:de:9c:
e1:1c:e7:80:47:f6:8a:f4:95:c5:ca:b8:e2:3a:60:
ff:83:78:7d:c3:11:74:fc:b1:08:d7:34:dc:89:71:
0c:0e:98:20:31:40:7a:fc:07:e9:7e:c9:e2:1f:9e:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:28:5E:DB:8D:B3:FD:02:FF:0A:34:86:B5:B1:59:79:8D:73:CB
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:14:9b:9f:5a:2f:e1:19:aa:92:03:b4:e7:90:ee:7b:20:ac:
ce:2a:0e:5c:11:04:7c:d3:99:b4:94:29:c1:c3:b5:7a:87:05:
7c:31:c2:29:4b:6b:2c:2c:d0:65:e0:27:6a:db:82:da:54:38:
59:79:e1:a8:f6:63:92:4e:81:29:b1:f2:db:6a:db:b8:49:bb:
d9:00:49:c6:c7:76:34:c6:86:a4:88:e0:c9:2b:4f:04:cd:28:
c3:d4:1e:12:2e:f7:ff:fc:0b:01:4e:ee:bd:bc:d5:60:e1:b5:
c4:c4:2b:4c:41:94:e9:52:63:29:3a:13:99:68:21:71:c8:a7:
1b:a0:1b:13:22:ff:3e:c4:e1:73:f4:06:20:0f:f4:54:76:f7:
23:6d:7b:b3:4a:2b:f4:1c:92:d9:af:cc:92:f1:42:46:f2:f8:
ce:fa:cb:3f:41:ce:13:94:ae:11:37:d4:50:03:c0:b8:ca:1b:
52:41:4f:79:00:f2:a4:63:8e:ee:c2:c2:8e:03:00:6f:98:27:
3e:8e:1c:ba:9c:23:d0:a5:e5:63:ef:ea:16:94:f7:22:e1:8c:
33:1f:6f:a8:0a:b5:13:75:09:2a:5e:07:b5:19:cf:b3:1e:ab:
9b:3f:81:18:43:be:e9:c5:2f:12:61:11:86:44:e7:2a:f1:cf:
ae:17:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:02 2025 by rpki-client