Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: lVTp1jfmBr4FDcWxtJV4kDMGE7IAvczaZbeasRIZCRs=
Subject key identifier: 50:55:F7:98:06:9B:32:C3:4E:D9:92:5A:50:49:51:DD:38:BF:BC:13
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019A03A47CB63C3B245D6EB4DE73A7C6E28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 03C6
Signing time: Mon 20 Oct 2025 22:01:42 +0000
Manifest this update: Mon 20 Oct 2025 22:01:42 +0000
Manifest next update: Tue 21 Oct 2025 22:01:42 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: /EnIwFkG5q5ghZMd5E42VDmDEVDBCp3fg2H6vF9Eo38=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:7c:b6:3c:3b:24:5d:6e:b4:de:73:a7:c6:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Oct 20 22:01:42 2025 GMT
Not After : Oct 21 22:01:42 2025 GMT
Subject: CN=5055f798069b32c34ed9925a504951dd38bfbc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:c6:b3:43:df:a8:7d:df:44:f5:21:4e:f5:
89:26:be:07:45:cd:28:03:a4:33:c9:6e:e3:ec:d2:
f3:a6:24:38:f9:e4:b2:d1:55:f8:64:cf:79:3d:ea:
0e:fc:a6:c5:0c:48:22:8e:f8:34:7e:c0:b3:d1:86:
74:ec:6c:81:e5:ce:4a:36:5f:8b:a8:11:b7:14:42:
81:de:3c:d5:f6:23:16:0c:cc:ed:db:7a:a0:ef:96:
4e:e1:b2:10:e4:8f:73:67:2e:6d:c9:4a:05:3f:ca:
7f:22:95:27:da:1c:43:cc:49:05:80:c6:9f:d1:7e:
e8:81:52:4c:20:6c:63:eb:08:5c:2d:54:0b:af:93:
00:ec:79:20:60:48:24:61:2a:8f:91:87:c7:23:10:
8e:92:0b:d9:61:84:63:e3:aa:a9:46:d6:5a:34:bc:
b6:63:fb:16:4c:a5:46:d1:79:0d:73:8f:e8:01:0a:
0d:74:42:c2:9f:ad:0c:52:9d:d0:82:43:2e:89:d3:
fa:a4:cf:d4:8f:41:f6:a4:d2:e3:cc:cc:2d:f8:f4:
56:b3:be:26:be:70:66:09:54:6d:72:56:ed:89:e9:
2b:48:c3:4f:02:2e:e3:39:9f:51:f0:25:fb:d2:fb:
98:50:e8:09:eb:cd:bf:70:f9:e8:08:ff:79:d3:49:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:F7:98:06:9B:32:C3:4E:D9:92:5A:50:49:51:DD:38:BF:BC:13
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d3:54:ac:ba:8f:f8:79:d2:4c:63:3a:3f:06:ee:a9:e3:7a:
fb:64:64:3c:19:a7:c8:8e:61:1c:43:0e:81:64:05:6e:9a:10:
c8:d9:7a:cd:11:f5:ee:79:27:b7:23:82:55:91:a5:f0:b3:95:
39:e3:78:c7:c0:18:b7:f8:ef:76:48:8d:b7:ee:7d:55:dd:a8:
6f:54:b2:02:d5:53:41:19:60:70:0e:d8:d6:c8:18:3e:e9:64:
01:ea:83:c3:9b:26:ce:a2:9b:fa:39:f5:b2:a8:85:9a:90:a9:
f4:74:f7:9a:7a:cd:08:72:45:38:7d:fe:ab:7b:8c:e0:45:46:
a6:4d:11:81:8a:02:87:66:5c:57:93:f5:19:0b:bb:bf:fd:b2:
fb:75:bc:36:dd:35:dd:1c:94:99:9e:a3:fb:66:34:44:92:e2:
58:9d:53:2e:5a:40:17:b7:de:18:5c:ea:01:f0:3e:29:90:2e:
b8:40:57:19:2d:10:de:36:36:60:a9:eb:80:eb:27:57:7e:2b:
b5:09:42:94:e2:14:61:5a:a4:0b:aa:64:4f:44:58:49:27:9d:
66:47:ac:b5:32:20:85:19:51:d8:73:02:f5:da:bc:14:f7:7e:
46:0e:f6:a7:98:e0:26:0e:5a:ce:fb:85:d5:98:f6:8e:15:6e:
f9:1a:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:17 2025 by rpki-client