Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: Fu0h9c34k27EqL6YwyEZi8Cun9rFTzmbtAgxo5w5ksI=
Subject key identifier: C8:55:4E:51:0D:BC:42:A1:ED:94:5F:C6:C9:53:5E:EC:97:C1:EB:BC
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 0199FBEAE5695A55AFB7DCCA5E7F75E6CDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: IBEGMLxJXxwtqjycmgS/1DJ0g1TJ/ht/RWZge5Eo24w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e5:69:5a:55:af:b7:dc:ca:5e:7f:75:e6:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=c8554e510dbc42a1ed945fc6c9535eec97c1ebbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:8b:dd:5f:34:f8:0a:9a:b1:ca:50:8c:60:
33:83:7a:1a:73:84:34:88:5b:bb:f6:62:d3:13:b7:
7d:37:57:41:ca:ec:01:d5:7c:7d:50:bd:98:d4:87:
96:63:5f:ef:ac:a2:2a:e6:81:68:5c:3b:9b:21:e8:
9e:29:c2:c9:c5:f2:cd:7d:f7:09:88:9a:3e:da:6f:
3c:84:57:09:81:92:58:83:c7:88:7a:14:2a:61:22:
68:ba:db:9f:3a:5a:cf:fa:21:df:8a:ca:f7:a3:22:
e6:7d:dd:28:d7:aa:2d:70:36:c0:5f:95:2f:cc:63:
dc:48:23:f4:0c:a4:21:1f:da:95:cf:3f:a1:c5:e6:
ec:12:8d:27:fa:5e:a3:c0:5e:32:3e:76:03:e0:72:
fe:e0:6a:bd:28:d4:2d:8f:49:cd:7e:f0:8f:14:82:
2d:34:96:8f:eb:37:59:01:fa:92:fb:1f:a6:c7:7d:
0e:81:11:1d:d7:6f:1a:a1:c2:17:e8:fa:d6:5e:c9:
c9:cc:f1:e4:92:47:6b:c6:49:76:4c:7e:e9:e1:56:
d8:c2:a0:64:0a:e0:66:09:95:6a:87:44:0b:f4:23:
5e:29:76:87:7d:7e:39:66:e2:17:fb:da:de:83:be:
5e:f2:7b:47:a0:e2:bf:ae:cf:03:83:e9:5e:75:ff:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:4E:51:0D:BC:42:A1:ED:94:5F:C6:C9:53:5E:EC:97:C1:EB:BC
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:a3:58:8e:eb:80:03:b2:8f:6d:a9:c6:1b:0c:67:97:1e:
49:6d:35:3e:b0:82:de:5b:f9:ba:25:70:e9:ed:b9:a4:dd:f1:
fd:e5:c5:d4:5e:e3:17:58:a3:7d:11:a5:29:14:eb:ca:16:8e:
17:8c:58:7a:7a:21:87:2e:6b:e3:82:5c:37:a5:ab:9c:52:fa:
34:dc:19:04:de:a0:00:cc:91:2e:15:77:fb:7e:02:ab:50:f8:
b9:40:ad:01:f3:73:e5:3c:db:6c:1b:2c:68:b0:da:ad:cf:f4:
f9:2b:80:88:ec:6c:2d:e0:8b:e0:8b:0e:0e:b9:fc:32:2c:7c:
df:74:90:ca:98:e7:bc:c3:44:cf:e3:90:f9:15:ae:28:4e:09:
9c:f1:5f:65:23:af:98:f8:e4:4f:e9:d5:fc:f1:4c:aa:a5:7d:
ce:ba:a3:23:1f:6b:54:b6:b2:96:f9:a5:b4:0c:6f:95:5a:a9:
7f:01:0e:e9:a5:4e:a0:92:3b:b1:94:55:11:5c:02:a7:6b:37:
c9:77:c1:c6:4e:33:6e:90:11:0c:00:56:10:86:32:6a:02:2d:
12:1b:5f:38:b9:b3:b2:6d:8d:65:fb:04:cd:25:0f:a6:3e:ef:
b8:81:15:d5:cb:78:e6:52:dd:58:fa:28:bc:fb:98:87:5c:59:
d8:68:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:29 2025 by rpki-client