Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: A65ky17OPtPFUZdPlOxtk8Im+ArS78VqQuGV5Pt6N3w=
Subject key identifier: 34:2E:51:8A:57:1B:14:C1:BF:B9:28:E9:A0:1B:7C:D4:D5:59:F1:DC
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019A00A3522EA62EB7D47D59BC888AB7E40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0D85
Signing time: Mon 20 Oct 2025 08:01:34 +0000
Manifest this update: Mon 20 Oct 2025 08:01:34 +0000
Manifest next update: Tue 21 Oct 2025 08:01:34 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: oTzuBb8Jt4JnbFWlKl37jhw5vW1KS4So0jhODpto3sM=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:52:2e:a6:2e:b7:d4:7d:59:bc:88:8a:b7:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Oct 20 08:01:34 2025 GMT
Not After : Oct 21 08:01:34 2025 GMT
Subject: CN=342e518a571b14c1bfb928e9a01b7cd4d559f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:ac:6f:5b:a7:b0:03:62:35:22:ac:b8:07:
3a:91:35:12:66:ae:ed:0e:da:80:ed:e7:c0:6d:8e:
26:89:be:2f:f9:94:98:2e:2d:9a:64:8b:d7:dd:3c:
87:64:ec:81:75:8e:96:90:bf:b1:6f:79:90:ee:d4:
0c:c9:04:cb:aa:92:34:25:da:a3:16:a6:f5:97:2f:
f6:3a:4c:6c:a1:ad:97:0d:64:55:8f:55:63:f4:9f:
eb:09:a0:5b:87:87:cc:04:42:0a:52:29:3c:23:d1:
de:97:38:d9:00:25:f1:52:26:a6:11:da:e9:99:86:
2c:0b:2c:4a:1c:e8:b5:a4:d9:85:2e:4c:55:ca:53:
6e:38:4c:4d:31:15:91:01:da:d4:85:94:7a:70:20:
fc:ee:a5:76:b7:31:db:49:fb:91:98:7b:c4:45:f6:
78:51:e0:f8:3c:29:82:d8:07:4b:9d:0a:27:a0:d5:
90:f9:a5:83:fe:87:26:73:28:c9:13:61:16:a2:bd:
f9:07:cd:98:7a:39:a1:2e:96:b4:b3:ca:0d:75:a5:
10:8c:05:ee:aa:f6:c4:f4:74:d4:b8:d5:63:12:27:
c1:e9:8c:c7:7b:7c:f8:36:2d:90:68:f0:46:21:92:
17:4a:dd:12:02:87:45:a0:3f:a9:ff:45:59:6d:69:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:51:8A:57:1B:14:C1:BF:B9:28:E9:A0:1B:7C:D4:D5:59:F1:DC
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:99:97:87:24:9b:e8:8a:b0:ad:ee:90:9b:4e:a5:70:d3:94:
39:fe:cb:e7:e8:6d:54:6d:85:d7:b9:84:e4:43:db:ec:f1:14:
53:ca:38:49:f8:bc:cb:8f:4e:72:c8:f5:83:35:04:73:0c:71:
ec:f4:a5:99:e8:b3:3f:64:d6:e7:ff:79:83:91:22:00:33:ed:
47:b3:3a:d8:06:05:94:c6:ee:9f:45:74:92:e1:61:cf:6f:c1:
9d:6b:2d:31:b2:fa:f3:53:02:58:47:6f:ca:e9:39:5d:ee:27:
11:40:c2:aa:bb:b5:cf:ef:1b:a0:f9:bb:ee:7b:46:03:23:5d:
87:20:32:41:6c:f3:76:c1:60:69:e2:61:95:cf:8e:2f:cf:3b:
ff:3f:d7:3c:1d:39:4e:16:eb:2a:03:8d:3b:c7:fd:6d:58:88:
53:bf:05:d1:98:fa:7d:25:63:48:ee:15:5b:60:01:8a:ab:51:
72:85:9b:b2:38:58:64:25:e2:bb:f8:8d:87:86:f7:b1:43:61:
09:4b:18:34:91:15:52:52:b3:1c:53:cd:c8:96:52:ac:71:8f:
f8:a0:33:02:f2:1a:49:86:8d:af:30:27:35:1a:f0:c8:d5:a9:
34:a0:cb:16:e8:95:4e:c6:09:cc:b6:96:32:55:c6:04:f9:4d:
e5:d2:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:48 2025 by rpki-client