Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: PAXNo1SrLX4NqXGvq36cxx8zX8MFQ74kPt6l2qYqiVc=
Subject key identifier: 45:4E:B0:5F:80:C8:EC:2E:8A:8D:13:DD:F4:F3:2B:36:D8:BB:B9:3C
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 0199FBEAF3145B62A8181F1F021B8D2651DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0ADA
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: DYHn4XWDClLayXERpHFxg4fFddwpZXq/aYzdUuwk2uA=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f3:14:5b:62:a8:18:1f:1f:02:1b:8d:26:51:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=454eb05f80c8ec2e8a8d13ddf4f32b36d8bbb93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:20:da:e7:08:0b:52:de:f3:d0:52:f5:bb:
15:a3:7f:ab:51:44:57:6d:ee:65:da:5a:d7:6b:ab:
34:d9:bb:dc:04:d2:23:be:27:a7:9e:33:58:6e:e3:
c0:d2:49:57:51:11:cd:2d:23:9d:f8:85:f5:10:23:
de:48:d2:30:64:18:22:44:b3:4a:e7:03:b7:03:0f:
7a:a2:06:b3:32:d9:30:7c:17:ef:ac:bf:a1:be:07:
a4:93:9b:da:88:15:eb:5a:74:6d:6a:f4:b0:fd:10:
fe:92:d6:ea:e5:b0:55:64:72:df:c5:c2:3a:74:bb:
85:0a:b0:d7:87:d5:02:f1:b7:4e:82:57:77:5c:df:
6e:07:17:86:5c:20:64:66:b3:66:73:02:15:33:61:
60:1d:81:3c:b3:70:a9:fe:8d:8d:4b:27:da:e1:9d:
ff:64:f4:0a:0e:7b:9f:19:11:24:45:93:3b:fe:44:
78:3a:e7:aa:7d:a1:8b:c7:a5:0c:04:3a:7c:e7:35:
29:27:9b:ce:4a:33:73:b7:97:aa:95:1e:15:7b:41:
c3:64:d4:86:e6:3f:b8:09:91:cf:34:f6:f3:e2:59:
51:e1:01:2e:14:1c:99:3f:80:1f:27:b2:77:55:7d:
47:4f:81:93:ef:f7:25:d1:05:39:94:27:57:4a:c6:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:B0:5F:80:C8:EC:2E:8A:8D:13:DD:F4:F3:2B:36:D8:BB:B9:3C
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:dd:b3:40:01:62:cb:52:2d:dd:3f:4b:e5:d2:39:be:9e:
96:19:8e:40:93:0a:d3:0d:3d:e6:ea:a3:10:8e:e0:29:a8:2f:
c1:6d:7f:ba:a5:88:3a:1a:53:df:ae:c3:06:32:f5:f0:84:ee:
51:f3:08:be:b3:d8:d9:41:f5:92:1a:79:b2:3d:98:da:84:42:
97:1a:f9:88:71:6f:cb:a1:aa:51:6c:ee:8f:11:b9:71:e1:4c:
55:ca:dd:66:63:4c:13:82:27:ed:bf:b6:1c:3d:89:67:5f:04:
25:e5:2c:1a:3c:52:c8:59:fc:6d:8c:24:86:a8:6a:67:e4:bd:
15:f4:0d:0a:ba:b7:a2:eb:26:2d:ca:a6:91:91:b4:74:2d:69:
25:e6:e2:32:37:bb:dd:9e:6c:37:c3:7b:91:c9:b8:e5:7e:ae:
9c:3a:9d:e6:df:fa:7b:f6:dd:48:48:af:fa:f6:25:84:0b:81:
9d:76:ad:73:ca:ff:66:71:a6:42:af:01:65:20:e8:71:14:9e:
58:26:90:4d:b1:ad:11:ef:53:33:38:df:3b:67:f6:cb:cb:70:
99:49:d9:e5:43:96:0e:60:a2:14:76:e8:64:f6:9c:2d:4b:65:
ff:cd:6f:e1:bb:c8:d3:97:7b:88:83:91:bb:4a:8e:a4:31:08:
b2:7e:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:14 2025 by rpki-client