Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: 7+nlGAaMowSVi1vtHJYfcFiOZhvWweNqP+oaVlXqiak=
Subject key identifier: E0:06:3F:B6:42:49:90:83:85:08:65:74:5D:8B:B4:DD:FB:9A:22:FA
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 0199FC587EA3971A549CF7C0BE2AFD8A01A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 02B2
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: mmYfCos0rbDIZreMeORnkzt7TyjDkw8s7IEgpseCJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7e:a3:97:1a:54:9c:f7:c0:be:2a:fd:8a:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=e0063fb642499083850865745d8bb4ddfb9a22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:08:ba:5d:53:54:4f:31:86:2f:88:2f:a3:
fe:54:a2:ae:4f:ef:87:f8:0a:0f:e1:ce:05:c5:a0:
7e:03:67:f3:ae:fc:d8:06:f7:e4:53:9f:58:1f:b3:
43:66:4e:8d:70:a2:45:22:2b:07:78:0a:82:1c:c5:
72:79:05:49:95:d0:0d:d2:82:41:c8:6f:23:6b:bc:
9e:6f:ee:4e:88:02:6c:5e:a2:78:12:c5:5b:9b:10:
2d:92:54:b5:7e:9f:ac:f7:fd:fe:61:52:45:54:a5:
8b:f6:51:5f:4f:ed:ab:bc:f7:dd:76:23:c6:42:07:
a9:fe:ee:60:bd:c7:23:6f:f6:1a:bf:2e:72:3b:45:
4b:4d:64:d1:1b:28:2d:67:dd:a8:fa:cd:78:4e:98:
05:41:2e:69:57:37:eb:82:2c:a2:f5:19:ec:74:82:
3c:28:12:2a:b8:5e:4b:98:19:0b:d5:bb:81:bf:0e:
73:98:8f:76:9f:bc:ce:b5:40:c2:4c:1f:6c:2e:37:
3c:27:44:e1:e4:a2:ce:84:1b:e6:f7:67:95:1b:bf:
0e:de:93:2a:b3:e1:ec:57:21:15:10:0c:68:ed:d5:
ee:09:99:ed:38:36:8c:c2:24:07:c8:28:7b:88:68:
aa:f3:2b:fa:a0:01:ba:23:90:7b:7f:cf:31:20:e3:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:3F:B6:42:49:90:83:85:08:65:74:5D:8B:B4:DD:FB:9A:22:FA
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:8b:2e:e4:32:2c:65:3a:29:a4:2f:c6:bd:38:64:8f:11:
ac:d7:7b:2c:86:9f:1d:8f:e2:ba:19:b8:35:4e:39:60:12:cd:
2a:e7:6a:b8:f6:a3:2d:20:c4:c5:3a:c0:e5:d4:c9:b0:96:e1:
e0:1f:3d:83:27:24:18:2c:2b:64:52:51:a6:83:c5:0f:88:1d:
e1:dd:50:bb:09:65:b4:5c:8c:9b:3c:e6:b4:63:de:cf:87:bf:
66:b7:d1:d0:a5:08:94:51:2c:93:da:df:bd:7d:26:05:57:76:
11:f3:af:66:79:a3:98:21:cd:97:f2:9f:7f:84:b2:e2:17:12:
2b:dc:75:f5:47:b2:3d:5e:f7:97:0b:a8:40:9d:fd:00:6f:9e:
13:bd:50:94:e1:2d:57:4c:71:c4:97:09:2b:ec:eb:f2:d1:16:
4b:db:f5:3f:cb:1c:d3:fd:35:1f:90:78:3b:dd:0d:63:1e:75:
a0:41:5f:44:81:66:84:b5:44:6a:0f:8e:a8:15:a3:03:41:74:
e6:3c:1c:d0:0b:3a:78:af:f4:06:87:47:05:91:b2:0e:a7:6c:
c8:68:fb:d5:a1:63:ea:c9:45:35:82:f1:95:8d:77:a1:1d:ee:
72:37:b2:79:9d:0a:6f:05:d6:66:59:4f:d9:0f:36:ac:5e:cc:
52:8d:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:22 2025 by rpki-client