Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: rqEJ9DYsKzvLEwB4Tnm/fgI16pnoYxKLHRjO8JpbLHM=
Subject key identifier: 6C:AF:B1:BF:6A:47:93:48:1A:38:66:75:25:19:70:6D:C9:82:6C:1A
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 0199FC8F2CFF1B544E39400BEFF905BA531E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: hTJZ1lpKtdsE85w9NAqWcafBbMj8hLQP9QQQHQy6KIc=)
2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:ff:1b:54:4e:39:40:0b:ef:f9:05:ba:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=6cafb1bf6a4793481a3866752519706dc9826c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:f8:14:54:89:74:4e:f5:14:97:16:d9:46:
bf:54:4b:b2:e6:4c:03:b9:8a:8a:6d:88:07:b9:bc:
1f:86:4d:87:17:fd:a3:07:85:9c:38:15:5b:55:4a:
f0:56:1b:15:e5:51:aa:04:e4:cd:3c:46:ae:30:33:
b8:e4:31:aa:22:b7:56:59:67:33:6d:fa:4c:c0:d7:
5f:a8:d4:fe:ea:96:b0:44:5f:3f:42:e9:30:71:e0:
d4:ef:8d:ac:fc:19:25:ac:47:31:35:3d:ed:f2:e1:
81:ae:bc:d0:5a:2d:46:d6:e0:04:48:16:47:29:3b:
28:00:21:d7:fc:64:61:8c:b3:5d:53:66:a9:06:fd:
ea:e1:42:e4:d4:8c:e1:1b:8f:28:98:98:2d:ee:9c:
9e:6d:5a:35:c6:2f:cb:2b:2e:0d:1a:52:dd:0a:e5:
cc:9f:e3:c1:ad:be:6a:a6:b3:0c:a5:17:06:df:83:
74:9f:81:48:26:6e:e3:b0:08:85:5b:9d:f0:bf:26:
09:77:e5:e6:72:cb:20:7b:12:fa:d7:d2:e4:5c:af:
6e:94:82:27:21:78:b8:b4:12:c0:a1:70:80:1d:21:
37:e7:0b:83:a3:1e:08:dd:4a:36:e1:11:5b:f3:02:
c0:f7:a7:05:07:4d:89:05:84:d1:7f:6f:27:25:f1:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:B1:BF:6A:47:93:48:1A:38:66:75:25:19:70:6D:C9:82:6C:1A
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:fa:20:0c:2c:da:80:12:a8:f5:bf:07:6b:15:0b:bd:af:
21:26:8b:29:78:77:03:6a:65:7d:ab:75:72:96:a8:7d:15:28:
bd:da:f7:78:4c:11:f5:21:bf:ab:1e:81:58:3e:7b:0e:04:3b:
fc:19:41:53:92:5e:8f:35:7c:f4:ff:42:82:4a:16:94:19:00:
6d:c3:59:a4:fa:1c:0d:c6:c8:8e:2c:da:66:3e:c0:01:15:95:
5f:73:f6:f9:64:fe:3d:fb:10:0a:98:ad:07:33:02:cc:10:5c:
31:f1:58:ee:97:9a:f4:1f:9d:a2:98:7d:1d:5c:d3:54:c1:d8:
b8:30:66:78:f8:a5:c9:e3:77:66:14:60:6c:56:81:40:3a:4e:
71:84:94:db:04:59:0a:cc:2f:d8:72:cd:72:da:5f:88:19:5c:
6f:6c:ec:22:39:af:02:6b:88:95:6a:77:e8:50:0a:8c:36:14:
c3:2f:ca:cc:97:83:35:c1:16:85:40:02:6f:f0:a2:b8:79:1f:
50:98:8f:06:40:6b:f6:e3:f9:34:e3:62:1b:d5:b8:d2:81:a9:
67:5e:c9:cc:c8:1f:2e:b9:44:05:fd:f6:d7:95:82:04:eb:08:
fd:32:78:57:65:44:ed:75:0d:c7:00:02:d6:c5:c2:22:3c:cf:
1d:8f:89:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyz/G1ROOUAL7/kFulMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw
ZTljMDYwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg2Y2FmYjFiZjZhNDc5MzQ4MWEzODY2NzUyNTE5NzA2ZGM5ODI2YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq34FFSJdE71FJcW2Ua/VEuy5kwD
uYqKbYgHubwfhk2HF/2jB4WcOBVbVUrwVhsV5VGqBOTNPEauMDO45DGqIrdWWWcz
bfpMwNdfqNT+6pawRF8/QukwceDU742s/BklrEcxNT3t8uGBrrzQWi1G1uAESBZH
KTsoACHX/GRhjLNdU2apBv3q4ULk1IzhG48omJgt7pyebVo1xi/LKy4NGlLdCuXM
n+PBrb5qprMMpRcG34N0n4FIJm7jsAiFW53wvyYJd+XmcssgexL619LkXK9ulIIn
IXi4tBLAoXCAHSE35wuDox4I3Uo24RFb8wLA96cFB02JBYTRf28nJfHrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyvsb9qR5NIGjhmdSUZcG3JgmwaMB8GA1UdIwQY
MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt
MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm
LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyb6IAws
2oASqPW/B2sVC72vISaLKXh3A2plfat1cpaofRUovdr3eEwR9SG/qx6BWD57DgQ7
/BlBU5JejzV89P9CgkoWlBkAbcNZpPocDcbIjizaZj7AARWVX3P2+WT+PfsQCpit
BzMCzBBcMfFY7pea9B+doph9HVzTVMHYuDBmePilyeN3ZhRgbFaBQDpOcYSU2wRZ
Cswv2HLNctpfiBlcb2zsIjmvAmuIlWp36FAKjDYUwy/KzJeDNcEWhUACb/CiuHkf
UJiPBkBr9uP5NONiG9W40oGpZ17JzMgfLrlEBf3215WCBOsI/TJ4V2VE7XUNxwAC
1sXCIjzPHY+JYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:15 2025 by rpki-client