
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier: v3UkYu/SNJ13LYLRn5FCx9GZ7mfVvJEikI6U0t0IntM=
Subject key identifier: 1E:6E:B8:68:09:F0:68:1D:1E:A6:48:DD:A9:22:4D:40:27:8D:B4:50
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial: 0199FE46B1A7B356CB0D41F6601D4F0306E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:09 +0000
Manifest this update: Sun 19 Oct 2025 21:01:09 +0000
Manifest next update: Mon 20 Oct 2025 21:01:09 +0000
Files and hashes: 1: Atkr4h8_-iWKS-lQ1C-yvRl84ME.roa (hash: 2T7HRH5eHvmAemXfiDHO7EMODqi7SWlhFBBbiZ8y44c=)
2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: ctCGeoXC9EztppSQnqw89M7lu04BAII7Q+eXxovNUyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b1:a7:b3:56:cb:0d:41:f6:60:1d:4f:03:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Validity
Not Before: Oct 19 21:01:09 2025 GMT
Not After : Oct 20 21:01:09 2025 GMT
Subject: CN=1e6eb86809f0681d1ea648dda9224d40278db450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:f7:48:7d:23:d5:73:35:f1:fc:94:f0:53:
63:c2:a4:a8:d3:0f:e7:9b:6e:f2:f7:d9:c8:40:11:
a9:f5:be:08:39:ee:55:94:70:0b:6d:a7:ec:9c:be:
bf:05:df:f0:6f:97:0b:f8:45:bf:8b:a0:c0:84:a0:
3b:55:e0:3a:c7:68:c6:64:e9:3c:b2:9c:37:28:fd:
84:0a:2b:d7:93:fd:a5:9c:15:4e:19:fa:b6:2e:cd:
f9:19:b0:90:c9:38:02:5b:5f:04:de:01:f2:1c:c8:
72:69:f0:a7:61:e0:dd:a4:b2:10:d1:ec:fe:ac:ff:
1b:89:7c:32:b8:be:5a:15:c3:67:0a:4c:39:99:e7:
8b:68:f1:38:bd:c8:60:b2:6f:08:57:67:e4:09:f8:
fe:73:6a:29:6f:a3:87:a1:71:46:ad:a1:53:1a:17:
36:81:f1:7f:01:07:a0:2b:e5:37:0e:e4:cf:57:2b:
4a:72:47:dc:43:4c:71:83:6b:f4:b5:4b:e0:31:78:
d5:25:6f:8d:7a:db:09:35:36:50:8f:59:09:37:25:
0a:2f:14:d3:02:e8:b4:da:dd:d3:58:1c:09:09:7f:
84:b1:e1:59:b0:fb:93:54:30:75:f5:6e:81:73:ba:
fc:9b:fc:03:92:90:bc:01:a7:9b:10:79:ea:76:82:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:B8:68:09:F0:68:1D:1E:A6:48:DD:A9:22:4D:40:27:8D:B4:50
X509v3 Authority Key Identifier:
keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:ee:c7:75:55:c4:2e:b4:04:14:77:3a:c3:a3:96:0d:ee:
da:b1:d3:0e:d9:ab:34:73:8e:b0:38:6b:47:8b:2c:86:be:ba:
f1:10:b2:8c:2b:4e:f3:cf:a1:39:39:37:01:3c:e5:fb:a7:01:
cd:3e:0b:80:46:95:7c:98:2c:de:38:eb:58:5c:bb:db:ac:b7:
58:b6:ad:43:a0:c0:4d:3d:f4:d6:95:bb:b2:6a:6f:e4:d9:d3:
bc:93:6c:b6:35:bd:13:98:bd:9b:29:65:66:4b:0f:ae:f2:a6:
ee:88:ce:99:d9:61:8b:26:26:53:22:1c:aa:ad:7e:f4:3a:f5:
10:b3:07:6c:df:a9:79:ec:c7:f2:26:47:c1:6c:e4:09:9b:1f:
f3:b9:85:eb:f3:bc:58:4b:eb:a1:a4:85:c8:02:23:28:d7:a6:
56:58:28:4e:cf:5c:30:2a:fc:91:29:9f:6d:0e:66:7a:7f:8b:
34:e1:42:bf:95:24:62:a7:0e:ac:c2:4a:2c:7d:32:59:ca:f2:
0e:9a:03:f1:73:1e:be:c9:1b:f6:dd:d7:bc:77:36:b4:f5:d9:
52:1d:d1:8c:5d:09:ad:89:ac:3a:4e:49:d2:5d:8d:b1:2b:71:
2c:f0:9e:3c:ff:15:40:a6:8e:57:da:bb:b2:70:97:c6:b5:e2:
d4:88:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:35 2025 by rpki-client