Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: DPPlPRcSMYOGb2IiCJo+ff856yTBdk9k9IBa96lI548=
Subject key identifier: 77:08:A5:CE:86:AC:86:43:32:17:07:5F:7B:AB:9F:00:AF:63:D8:3B
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 0199FC8F893515883FA2EBBEF0C788EB79C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 068B
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: moMxJAnpwOBe3TYDUpnaFMjPy/26JBjpP30AzGTo/10=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:89:35:15:88:3f:a2:eb:be:f0:c7:88:eb:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=7708a5ce86ac86433217075f7bab9f00af63d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:7d:df:74:e1:5f:2f:08:1d:74:1f:c3:2f:
0a:27:db:7c:4b:27:d1:81:a0:22:84:9e:dd:1d:de:
7b:ff:65:1c:90:ab:84:db:29:78:c0:70:8a:7f:9c:
f3:5c:f3:1d:4d:00:e8:7a:de:a0:8e:d4:51:f4:c6:
4c:7c:af:d3:c0:fe:fd:b2:04:51:e6:b8:11:7d:a9:
b8:3d:82:79:48:5b:52:c3:7c:98:4b:ad:75:7b:74:
9d:dc:75:9d:5f:e6:4c:40:df:bf:fb:b8:bf:c1:4b:
be:a8:be:73:0c:75:4c:93:03:5e:4d:dd:45:4d:ad:
83:30:33:34:01:73:50:7a:33:cf:5a:b3:5b:54:e1:
92:00:05:39:7b:59:8b:e9:f1:d8:fe:bc:7d:1e:a8:
d5:67:47:76:7d:82:26:4a:91:00:a0:c8:e1:ee:42:
9b:76:d4:76:84:3e:32:17:12:c3:78:73:91:ec:86:
c7:72:16:63:20:e8:71:bb:6f:c4:17:7a:0b:4b:7a:
94:7d:ab:a4:94:79:29:a3:f8:bd:6d:a5:d7:a3:2f:
c1:9c:ac:f1:92:84:44:e3:5b:66:8c:6a:b0:60:3d:
5c:d6:ec:57:30:cd:c8:c3:ea:3c:8d:93:a1:56:b4:
0f:1a:91:9c:da:fb:4f:83:e4:8d:39:40:76:a6:e2:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:A5:CE:86:AC:86:43:32:17:07:5F:7B:AB:9F:00:AF:63:D8:3B
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:d5:bd:18:44:8f:e9:da:db:93:d7:74:f3:18:ea:d1:f4:
0a:fb:8b:03:8a:67:ce:0e:ef:51:1e:24:11:52:8b:ea:c8:59:
1d:2f:43:41:7f:2e:bf:f3:8e:04:99:1b:f4:8c:0a:63:59:50:
01:11:b9:f2:c6:94:b3:9c:fd:b1:32:20:a0:a2:51:1d:9f:eb:
9a:c7:e1:78:b8:64:65:33:26:ef:0a:1d:5b:93:cf:54:94:d4:
b0:aa:12:75:5c:6a:39:bc:ba:f8:f0:f6:28:18:9a:e4:4c:98:
a1:28:fb:84:ac:8e:77:8a:c8:94:1d:e1:34:41:bd:85:97:1f:
21:13:65:69:15:17:03:7e:b6:30:23:ed:d9:76:7d:e1:b5:74:
50:c6:1d:82:af:c5:b4:ea:77:b6:8a:7a:a1:90:6c:71:ce:d4:
d7:77:c3:ac:70:52:09:65:62:f0:a1:84:c6:e5:4c:bb:f1:e1:
0d:e8:d2:37:9f:f8:d1:e9:82:50:05:59:d6:d6:5d:fc:b3:3b:
48:80:ef:6f:94:7e:5e:0b:06:f0:4a:42:dc:c9:31:0e:dc:3c:
14:b4:fb:52:cc:c2:a5:b7:5a:76:32:43:ac:3a:7d:2d:63:0a:
fe:28:ab:3a:29:6e:20:28:94:84:fa:f3:ef:06:94:3f:3e:d2:
8c:da:9c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4k1FYg/ouu+8MeI63nBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjUxMDE5MTMwMTI5WhcNMjUxMDIwMTMwMTI5WjAzMTEwLwYDVQQD
Eyg3NzA4YTVjZTg2YWM4NjQzMzIxNzA3NWY3YmFiOWYwMGFmNjNkODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrp933ThXy8IHXQfwy8KJ9t8SyfR
gaAihJ7dHd57/2UckKuE2yl4wHCKf5zzXPMdTQDoet6gjtRR9MZMfK/TwP79sgRR
5rgRfam4PYJ5SFtSw3yYS611e3Sd3HWdX+ZMQN+/+7i/wUu+qL5zDHVMkwNeTd1F
Ta2DMDM0AXNQejPPWrNbVOGSAAU5e1mL6fHY/rx9HqjVZ0d2fYImSpEAoMjh7kKb
dtR2hD4yFxLDeHOR7IbHchZjIOhxu2/EF3oLS3qUfauklHkpo/i9baXXoy/BnKzx
koRE41tmjGqwYD1c1uxXMM3Iw+o8jZOhVrQPGpGc2vtPg+SNOUB2puLDKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcIpc6GrIZDMhcHX3urnwCvY9g7MB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo7VvRhE
j+na25PXdPMY6tH0CvuLA4pnzg7vUR4kEVKL6shZHS9DQX8uv/OOBJkb9IwKY1lQ
ARG58saUs5z9sTIgoKJRHZ/rmsfheLhkZTMm7wodW5PPVJTUsKoSdVxqOby6+PD2
KBia5EyYoSj7hKyOd4rIlB3hNEG9hZcfIRNlaRUXA362MCPt2XZ94bV0UMYdgq/F
tOp3top6oZBscc7U13fDrHBSCWVi8KGExuVMu/HhDejSN5/40emCUAVZ1tZd/LM7
SIDvb5R+XgsG8EpC3MkxDtw8FLT7UszCpbdadjJDrDp9LWMK/iirOiluICiUhPrz
7waUPz7SjNqcow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:14 2025 by rpki-client