Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: QJmQhe93Qz31zeNHuFWP9p3fq1mm+G62V+cMu1Op7VA=
Subject key identifier: 6C:71:3E:15:0B:31:AC:FD:A5:CA:EF:4D:8B:D6:85:57:D2:F0:15:C7
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 0199FC217FCB2EF89EF4A2BFCA6A9F324105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: S5JwfGx4B7CbKx2MQvS/Ktp2s7RoPwq1B811ybARzZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7f:cb:2e:f8:9e:f4:a2:bf:ca:6a:9f:32:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=6c713e150b31acfda5caef4d8bd68557d2f015c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:d0:45:1d:3a:de:9d:e7:d0:0b:a8:33:d0:
05:ba:c4:a6:f9:2d:98:fb:f3:a2:ef:3b:0a:27:4d:
52:71:e3:2b:77:73:47:da:28:ed:f9:6e:be:aa:01:
9c:34:bf:69:d7:12:37:83:3c:30:1f:62:34:7d:3b:
5b:be:85:b3:a8:ed:28:90:77:99:7c:6c:24:28:c6:
91:ea:8e:d7:ff:3e:f2:d2:40:13:e1:55:46:8c:ff:
60:f4:17:c6:f5:58:8f:a8:69:87:f8:4c:72:03:c6:
76:8e:d6:5a:dc:df:d2:37:44:42:b0:e3:60:cf:d5:
33:b4:b5:34:3c:14:9a:67:f0:3f:ff:b8:d5:26:2c:
e6:f6:40:df:e3:48:c7:c4:b0:11:c5:6d:8b:8b:ff:
5d:16:0f:a6:5c:8e:fe:53:7e:c8:b3:65:b2:32:da:
70:57:37:4c:2e:a1:16:23:65:cc:20:1c:62:6b:77:
d9:5f:28:02:7e:39:fa:71:5c:27:33:fb:5b:b3:be:
4a:cd:cc:d3:db:e0:b8:0a:63:b1:79:a3:fb:cb:60:
a6:78:2b:ad:87:22:f6:86:65:be:03:39:31:a3:7e:
7c:cd:1a:ea:de:79:8c:77:3d:c5:5d:2e:16:80:6e:
54:4f:83:b2:18:25:6a:f9:7b:75:09:67:9a:ac:e3:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:3E:15:0B:31:AC:FD:A5:CA:EF:4D:8B:D6:85:57:D2:F0:15:C7
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:bb:b8:b8:b2:a5:df:5c:da:a2:a5:65:4d:ab:40:d3:2a:ca:
2b:e6:8b:cd:6c:bd:4d:9b:ca:eb:f0:bd:e9:3e:f8:86:79:e7:
09:9f:97:bd:4a:a2:3a:7c:ae:71:e8:7f:33:89:5f:f1:81:21:
52:f3:b5:db:24:45:90:fe:fb:46:5b:b9:58:eb:8e:e6:fd:f0:
37:04:91:21:75:ad:44:0b:07:f2:74:f1:57:ae:a7:3f:9d:1e:
cb:5a:50:3a:f0:6d:b2:b6:8b:97:a4:66:63:69:dc:f5:ba:cb:
2d:ad:8b:15:6b:80:d6:b2:6b:e5:02:7b:e1:59:79:b3:03:1d:
c5:fa:78:75:a1:c7:b8:1d:f4:55:da:24:fa:a2:b2:92:b2:80:
d2:70:54:40:05:8f:87:74:6b:cb:31:52:40:79:5f:c7:d5:fa:
1d:5c:4f:b1:71:e4:ab:a2:e4:ac:30:12:35:ae:b7:de:37:14:
bb:e9:f0:27:18:3f:76:e3:c9:56:35:a1:40:f4:b5:db:34:9b:
88:5b:f3:09:b3:ca:b4:68:4c:65:87:97:ab:8c:df:38:24:30:
21:35:43:68:3b:6e:35:22:c6:67:98:88:2c:70:7e:50:66:57:
21:63:e6:9b:cc:cf:41:d5:77:20:60:a8:94:d5:e9:0c:39:eb:
70:47:0e:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IX/LLvie9KK/ymqfMkEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NDAyNThhMWE2OGFlNjA1YzA3M2ZiNTgzYjEzZTEzNzZi
Nzc4YTcwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD
Eyg2YzcxM2UxNTBiMzFhY2ZkYTVjYWVmNGQ4YmQ2ODU1N2QyZjAxNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQrQRR063p3n0AuoM9AFusSm+S2Y
+/Oi7zsKJ01SceMrd3NH2ijt+W6+qgGcNL9p1xI3gzwwH2I0fTtbvoWzqO0okHeZ
fGwkKMaR6o7X/z7y0kAT4VVGjP9g9BfG9ViPqGmH+ExyA8Z2jtZa3N/SN0RCsONg
z9UztLU0PBSaZ/A//7jVJizm9kDf40jHxLARxW2Li/9dFg+mXI7+U37Is2WyMtpw
VzdMLqEWI2XMIBxia3fZXygCfjn6cVwnM/tbs75KzczT2+C4CmOxeaP7y2CmeCut
hyL2hmW+Azkxo358zRrq3nmMdz3FXS4WgG5UT4OyGCVq+Xt1CWearOMH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxxPhULMaz9pcrvTYvWhVfS8BXHMB8GA1UdIwQY
MBaAFGlAJYoaaK5gXAc/tYOxPhN2t3inMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgt
NzQ5ZTk4MGVjMGI3LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgtNzQ5ZTk4MGVjMGI3
LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyru4uLKl
31zaoqVlTatA0yrKK+aLzWy9TZvK6/C96T74hnnnCZ+XvUqiOnyuceh/M4lf8YEh
UvO12yRFkP77Rlu5WOuO5v3wNwSRIXWtRAsH8nTxV66nP50ey1pQOvBtsraLl6Rm
Y2nc9brLLa2LFWuA1rJr5QJ74Vl5swMdxfp4daHHuB30Vdok+qKykrKA0nBUQAWP
h3RryzFSQHlfx9X6HVxPsXHkq6LkrDASNa633jcUu+nwJxg/duPJVjWhQPS12zSb
iFvzCbPKtGhMZYeXq4zfOCQwITVDaDtuNSLGZ5iILHB+UGZXIWPmm8zPQdV3IGCo
lNXpDDnrcEcOXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:33 2025 by rpki-client