Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: 51ceq7AlRVn3Q81yDX1xuGh7vt5oel5w5sxb95keRR0=
Subject key identifier: FF:3E:37:32:B5:05:A2:A3:61:CE:A2:F0:0E:00:F9:F9:C5:8E:F3:02
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0199FAD7E54AB21C95F61582A63CCE1C213D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:16 +0000
Manifest this update: Sun 19 Oct 2025 05:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:01:16 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: 2Qf9ntVXxeC92Yztz1YsdcZVmC6qVl2tgBotT/06nas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e5:4a:b2:1c:95:f6:15:82:a6:3c:ce:1c:21:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Oct 19 05:01:16 2025 GMT
Not After : Oct 20 05:01:16 2025 GMT
Subject: CN=ff3e3732b505a2a361cea2f00e00f9f9c58ef302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:96:86:7f:2a:49:96:2a:f7:4c:a9:83:ec:
56:bd:36:b4:36:57:6b:93:23:1d:8e:ce:27:f3:26:
e8:73:e1:93:d3:ea:15:d8:f6:cc:2e:c9:51:f8:aa:
e4:9e:4c:e2:7f:a0:62:35:76:63:32:33:98:4d:26:
f9:61:21:e3:fc:08:c4:e4:f7:89:65:d6:e7:4e:00:
85:a0:4d:5f:76:cd:fc:17:f2:79:93:91:ed:10:7f:
8f:b4:16:36:ea:d4:38:ef:63:ca:0a:33:a4:c3:3a:
10:79:ab:c4:ec:d1:85:d0:3c:02:91:f2:ce:70:ce:
07:87:c5:d6:97:8c:5f:30:24:be:b6:35:44:6c:cf:
e7:70:03:ec:7f:2b:97:d0:2c:27:56:67:cc:49:ea:
de:2b:53:e4:78:23:0b:00:e4:37:32:64:c9:dd:75:
ad:45:6e:0c:4d:84:ba:4f:29:be:96:c6:03:44:2e:
be:3f:d7:54:8a:31:15:4b:ba:b0:27:c7:df:c0:92:
45:14:f1:86:e2:34:f1:64:8f:2c:25:20:cb:6f:9c:
90:89:cd:fd:b7:90:c2:31:a3:ba:2c:74:de:d5:29:
da:e8:c6:a4:68:cc:68:9c:37:91:c6:9b:40:c4:a6:
51:76:b6:39:e5:88:34:ed:70:5e:f5:73:ba:44:43:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:37:32:B5:05:A2:A3:61:CE:A2:F0:0E:00:F9:F9:C5:8E:F3:02
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0a:10:e8:06:20:6d:c0:36:6e:50:2e:79:bc:c2:32:81:39:
7b:df:2a:b5:71:6f:51:dc:ab:e7:e8:cb:a8:9a:2e:74:fd:60:
92:f4:6b:ff:bc:b1:ac:e0:70:50:9a:db:23:58:b6:36:87:32:
81:8c:91:a2:96:85:03:df:a6:92:db:f2:b6:05:f2:a0:2e:a6:
a4:bf:ca:07:c0:0c:24:a7:3e:2e:62:17:09:4f:1d:4f:e4:0e:
40:cb:37:62:0c:69:ce:0b:fc:62:6f:9d:71:41:75:02:a2:73:
27:e2:7c:c5:72:64:b5:a0:0d:0a:53:bf:1b:b6:69:c4:31:61:
45:be:03:38:b4:0d:3a:ce:71:7f:4d:de:12:27:f7:3d:76:06:
20:87:77:07:1e:0a:5e:16:ca:4b:72:e6:53:4b:44:59:32:dd:
df:4f:8a:a5:56:00:fe:64:0c:ae:3f:ea:d0:41:75:59:e5:53:
b1:65:18:d6:53:49:13:6a:f0:82:0b:a5:1a:10:8b:18:31:28:
a9:53:d0:01:9b:b9:8a:dc:17:56:ea:9b:ac:fe:55:c4:c0:ea:
4b:ac:26:f1:98:09:1a:e9:91:49:88:8a:4c:55:d6:8d:5c:76:
2f:91:4f:7a:bc:1c:f7:21:1f:4b:a5:81:91:64:54:c0:c7:ab:
cc:e7:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:34 2025 by rpki-client