
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: /CVBs/sv/NEcjE65DjbBefZgJJ3gt9CKrMwIh2STSdE=
Subject key identifier: 2B:8C:43:24:35:E7:D6:4B:2D:07:7C:4C:A5:18:3E:23:03:13:EB:88
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0198D6607B1061ABD15781705B4AD9BDAF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 032A
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: tJO1ZXJBuJfDZfitM32E7LZOG+qUqaezUZjDBR9EOJA=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7b:10:61:ab:d1:57:81:70:5b:4a:d9:bd:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=2b8c432435e7d64b2d077c4ca5183e230313eb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:14:8b:e7:54:df:b7:ad:a1:85:0d:45:53:
d8:1a:23:14:af:95:b2:b1:cf:43:00:3a:bd:f3:9f:
60:88:8f:07:3d:b5:77:cf:4e:54:db:48:5e:61:b9:
ee:69:1d:14:88:d6:ee:6d:74:01:91:f8:2d:f7:ef:
d4:45:10:25:be:f0:33:c2:48:91:27:32:27:4d:91:
7f:22:14:bc:cc:0e:f7:24:32:cb:19:b7:11:6c:70:
1f:c7:4f:84:f7:3f:a5:8e:ad:24:0b:52:a3:b1:86:
6f:19:e2:a6:7a:e5:69:8d:3b:19:20:38:6a:51:1f:
21:2a:40:03:92:74:5a:d6:17:cb:1f:3c:d5:65:7e:
92:82:6d:23:02:61:16:05:67:0d:27:19:94:63:8c:
00:88:c0:06:41:7b:bf:5a:54:2a:17:86:cc:ee:a6:
94:2e:19:9d:28:d4:b6:f5:b6:cf:bd:8d:fd:63:7d:
a0:76:1b:41:73:24:73:a2:4f:ef:94:b7:28:1a:fa:
57:a6:83:51:c4:a1:5e:11:dc:8c:5d:64:ce:57:0a:
32:4f:1d:97:6b:99:8c:96:c7:46:3e:06:1b:c4:9b:
7a:d2:38:ab:9b:a5:2c:d2:8a:f0:08:59:17:2d:9c:
23:82:1a:03:2f:a5:0d:a2:b0:34:6e:05:4a:46:4a:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:43:24:35:E7:D6:4B:2D:07:7C:4C:A5:18:3E:23:03:13:EB:88
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c7:98:a0:d2:32:15:bf:b6:e5:56:9a:e1:3b:51:84:8c:73:
70:7e:29:d7:f3:a0:e0:5d:5d:d4:08:34:18:a9:aa:d1:12:65:
5a:30:fd:04:ff:e3:a5:19:fd:7d:5c:9b:7a:b5:83:5b:75:ef:
2e:85:38:3f:a1:f2:56:24:6d:e4:01:98:06:16:56:60:fd:ec:
fe:ab:d8:71:01:85:96:e6:ac:37:68:cd:7d:b7:72:d8:47:c7:
08:2c:8a:f6:34:a8:b4:f3:91:f6:1f:5a:56:5b:f7:c8:50:3a:
07:c4:30:d3:91:a1:b2:bc:91:9d:7d:ce:83:2b:2a:6c:f5:07:
a5:a4:e0:17:0c:cc:51:ec:e8:bf:a0:74:e5:42:64:87:47:75:
d4:fc:5b:3f:03:de:75:29:e8:41:83:94:ad:7a:24:a6:78:25:
b6:39:4b:3c:0d:c3:79:3c:bb:56:48:17:b2:0a:4c:2c:7d:5f:
25:5c:15:d3:48:f1:a3:8f:d5:a1:72:29:7c:19:f5:04:21:6f:
38:5f:7e:22:ac:b8:94:12:b1:ff:b5:ca:b6:69:6e:99:b2:8c:
e1:02:9a:72:00:79:ed:d5:91:2c:dd:f5:91:72:ed:c6:1a:09:
c8:9d:28:cb:15:b5:6c:5a:36:2b:4b:db:fe:1d:2c:89:37:93:
e3:82:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:55 2025 by rpki-client