Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File: aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier: O1zUWrR6ZzH7jZwTvW8D/ci7BsW6xFw0Fu+FkvavojY=
Subject key identifier: C6:A1:A9:36:BB:0E:60:EE:5E:4A:F4:C0:D1:F6:08:DD:A8:0D:70:A3
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 0199FC8F79B96C03A262F0393DE9C6FDBEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number: 0DEC
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=)
2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: lkheqOkH/aD/vp11mojtAkAUhl/EbqGdkio/lhgqxe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:79:b9:6c:03:a2:62:f0:39:3d:e9:c6:fd:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=c6a1a936bb0e60ee5e4af4c0d1f608dda80d70a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:49:dc:12:d1:19:2d:98:85:3e:b5:66:03:
41:57:aa:ba:61:28:1b:d7:7b:39:8d:d1:d6:94:1a:
7f:dc:52:84:21:f2:2b:f2:89:ce:63:29:70:d3:ca:
a6:0f:7c:50:17:59:51:55:77:e9:3c:a0:d4:b3:7b:
02:20:68:c2:2f:ac:bb:17:22:79:eb:09:fa:b0:14:
22:87:79:41:e6:29:f1:85:92:66:48:be:a0:86:c6:
ab:55:44:64:bf:9a:f1:ca:72:e7:f8:b9:bc:ff:2a:
65:9a:a1:34:50:9a:b1:2b:af:72:c7:eb:52:c1:07:
66:06:03:1b:ee:d0:97:68:20:e0:27:20:87:05:61:
1d:6b:aa:0b:b0:44:56:ad:c0:ec:59:6d:6c:de:00:
27:49:73:7d:1b:1e:40:5e:39:6c:20:d8:56:4f:2c:
3f:62:ca:d0:59:c8:2b:53:93:31:d2:4b:b3:f9:37:
05:ef:f4:be:92:56:61:1c:c8:db:9b:93:14:b7:06:
b4:61:c0:de:26:b9:36:95:0d:81:80:3e:0c:11:56:
63:ed:8d:f8:82:2c:5d:15:7c:a6:fc:b8:73:ec:18:
17:cb:c6:2a:05:96:33:eb:12:8d:e8:f5:cb:a9:a4:
37:5d:66:f2:d9:d0:2a:c6:e6:6c:4e:d3:bb:2a:2b:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:A9:36:BB:0E:60:EE:5E:4A:F4:C0:D1:F6:08:DD:A8:0D:70:A3
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:4e:c1:3d:9a:c7:77:74:ee:5c:82:fb:74:83:eb:8d:d7:
0e:54:32:67:0e:d1:c0:21:05:4c:1c:bf:d4:9c:36:93:09:d7:
53:93:50:58:80:b7:74:72:03:7c:8e:b0:37:2d:48:40:36:ff:
91:87:37:3b:da:23:da:4c:2e:cc:0f:69:c1:b0:77:4d:50:80:
e0:e8:fb:ac:36:c8:ed:9f:18:bd:8e:7e:72:b9:4a:cf:03:b3:
7c:da:7f:0e:b4:f2:e4:58:24:fa:94:8e:10:40:8c:57:00:8a:
6d:9c:7e:9f:94:b5:22:dd:55:57:c2:60:fe:fb:54:93:ea:25:
76:fa:77:6d:1e:71:08:2d:e6:60:8b:5e:55:21:4c:d3:92:f4:
a3:da:22:3b:3d:44:9c:bd:07:be:84:00:9f:99:71:5b:f7:ba:
2c:20:91:95:92:47:11:5b:38:7f:73:8a:6d:32:d4:23:2b:37:
c2:91:98:20:31:1d:6f:5c:0b:5f:df:70:db:c8:6d:b5:2f:e7:
cc:0a:0e:a3:38:86:63:9b:2e:8e:e5:19:13:bf:36:a2:29:2e:
ef:6f:e3:f9:6f:a9:73:93:52:76:91:32:0b:75:3d:2a:8a:d1:
52:01:c4:db:07:41:8a:41:80:86:a0:f8:bd:e9:07:d6:a7:e5:
64:ff:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:23 2025 by rpki-client