Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: IEgdpDj7+QOfBzB6xi2V2h5IWWcjg/d6axfNnX91V9M=
Subject key identifier: 9F:62:69:1A:48:1C:8E:12:AB:CA:F9:E6:7F:EA:34:6C:4B:1D:BB:CE
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 0199FB0F3831D7CB4C2A0286D91F7FB9283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: hYOFhmYQSvjxFzYPfiPSvjxAUHWkHWGk4kP0ymo2cjw=)
2: aUKOJrnyNsDVraosl-1-341781M.roa (hash: omnP8BEQZ4v0uR+9FGHR3kGU8+xYRsRiJd27fBInyzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:38:31:d7:cb:4c:2a:02:86:d9:1f:7f:b9:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=9f62691a481c8e12abcaf9e67fea346c4b1dbbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:80:69:6b:6b:28:96:97:b6:ff:bf:8f:db:
9a:79:6e:20:67:0f:02:0d:9e:02:a7:6f:ff:c4:18:
6a:5b:71:0d:ab:2a:5d:9a:d3:7d:16:46:b6:b3:20:
d0:98:d5:36:f3:43:71:1d:e2:a2:fe:5d:7a:46:4c:
26:33:ad:a8:9e:8f:e1:4d:bd:bf:05:ff:6f:76:0e:
b3:50:5c:db:c4:b8:92:00:01:e5:4d:bb:98:65:e9:
c8:dd:1b:17:28:fc:42:aa:5c:77:fd:a6:f8:a4:3c:
96:bd:21:2d:b5:69:b6:a9:c2:b1:a6:64:b0:12:2a:
4b:b5:5f:ff:b2:83:40:32:c2:55:29:74:62:38:0f:
b9:da:9d:0f:7f:8c:e1:36:25:30:a8:7d:5e:13:e4:
92:d7:ed:bb:b3:a3:e2:2f:71:a2:b1:ec:34:99:ca:
dc:1c:f5:46:f1:fa:33:15:79:cf:ca:0f:dd:55:9d:
bc:30:5d:2a:c7:4f:70:20:a3:04:a8:c7:8f:3c:0f:
e7:37:0a:26:f8:e4:b5:94:6f:0e:f0:d2:9e:6a:47:
d2:f5:24:ef:cd:b9:06:98:c3:3a:91:46:fc:87:76:
eb:1c:b1:5c:98:6e:7c:c1:33:42:f9:0b:db:5e:03:
66:47:80:6b:7c:12:8f:b3:ef:f5:ab:f3:84:40:60:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:69:1A:48:1C:8E:12:AB:CA:F9:E6:7F:EA:34:6C:4B:1D:BB:CE
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:54:13:6b:09:16:f0:65:58:be:99:90:71:10:94:75:f7:
71:6a:64:1a:20:8d:48:d3:d4:41:13:da:3b:97:ca:64:b9:14:
c1:60:b0:a7:69:63:f4:fd:a6:72:f9:b2:60:4b:47:14:e3:d3:
c9:72:a5:dc:19:88:7f:f2:03:45:15:c6:40:24:f2:d5:f9:3b:
bf:2d:c6:26:81:1b:6a:69:b7:29:6e:86:c0:3e:85:5b:79:bc:
b4:a8:d7:15:b4:55:17:da:a3:9d:a0:5e:c5:f4:76:98:b0:9b:
bd:5f:c2:2a:c4:83:93:aa:80:e6:9f:02:d5:7e:40:81:f6:1f:
1d:2f:08:06:c2:d3:a8:0d:8b:ea:5d:53:da:84:4d:d6:93:44:
50:d6:40:d8:d1:f1:a1:43:50:c5:b9:04:90:2e:dd:fe:ff:12:
7d:74:c5:bf:b5:98:29:6c:99:4e:f8:e0:68:75:ed:2e:f5:c3:
2c:f8:51:af:b4:36:38:fe:ed:ef:30:16:57:da:0d:a4:be:fc:
f9:e6:18:45:7c:ab:ea:0c:c4:ce:5a:c1:b0:76:44:b9:91:da:
c2:97:17:6e:b7:88:32:59:f0:c2:89:23:55:75:bf:fe:f0:80:
13:0a:41:cf:9d:f9:15:85:f2:81:5c:2e:3f:73:b5:c9:44:07:
86:90:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client