Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: tlz6ZU+PSwVmC9aA8INqnMx2Sz6z2maCm0jrX6cNWaE=
Subject key identifier: 59:CF:2D:2F:68:70:76:F2:5F:26:A4:2D:F6:27:AA:A9:8E:8E:13:EA
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 0199FBEBA8A9C62F5EDCB12642839DA7FCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: 3CZdAbAvBCG/fb8si2IjUJ2N6mnaeAevzHXBC2t2I7s=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:a9:c6:2f:5e:dc:b1:26:42:83:9d:a7:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=59cf2d2f687076f25f26a42df627aaa98e8e13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:b3:75:26:09:42:89:1b:85:14:46:42:a5:
d9:9b:88:14:60:da:6a:5d:0d:80:2e:69:c2:d2:9c:
bf:6b:a7:0d:25:0f:b8:c9:bb:bb:26:90:ca:ff:39:
09:77:ef:13:4c:1e:29:c8:6d:6a:12:0d:20:52:64:
2f:28:a3:08:cf:4e:d0:d6:b7:0d:76:d4:37:67:d3:
5b:d3:6c:4a:4a:51:fc:4f:19:6f:d7:59:d0:fc:dd:
59:13:71:c0:1f:7e:e3:bf:36:ed:a7:0a:a4:05:16:
a7:11:aa:c3:9f:4b:1b:06:f6:78:09:35:9b:56:58:
e5:27:8b:44:65:5b:9d:93:c9:21:5e:6b:2b:b8:aa:
72:e4:15:75:cf:53:c3:a2:d9:f6:44:12:ca:d6:e6:
90:32:27:fc:c5:4d:50:28:c7:36:4d:f1:1b:8b:d9:
0d:27:1e:a4:7d:f9:02:5b:47:e6:b7:62:8f:51:ae:
b5:29:03:94:f1:c2:20:45:cc:81:c3:7d:68:c0:66:
9e:cf:2c:6a:94:51:c5:6e:bf:da:1e:66:96:41:36:
7b:ce:7f:2c:f7:81:8f:0a:d3:fa:03:65:3b:cc:bb:
c9:76:13:b0:31:94:de:97:5b:bf:fc:fd:8a:4d:9f:
58:ed:44:dd:2d:09:6f:15:42:4c:85:0e:58:2f:d7:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:2D:2F:68:70:76:F2:5F:26:A4:2D:F6:27:AA:A9:8E:8E:13:EA
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7d:ae:ad:db:ea:70:38:7a:53:e6:4d:9a:be:63:19:a7:e8:
a2:9b:be:dd:75:25:b6:45:48:53:fe:a1:3a:23:78:2d:d7:2e:
1c:4d:a4:a8:ed:ee:35:12:0d:96:1e:3c:11:7e:7d:b8:5e:68:
12:c1:63:07:25:70:d3:c2:d6:21:b8:09:d8:f5:57:bb:41:d3:
a5:e0:a2:14:22:0a:68:c7:ec:0a:89:ff:10:ed:15:9d:d5:91:
22:07:8c:76:b4:39:90:61:8b:49:82:4b:fb:ce:83:8a:2f:b6:
69:57:fa:56:22:69:13:3c:ea:9a:bc:45:4d:54:c8:2a:47:fa:
02:bd:e9:da:3b:19:81:81:6a:b8:b1:ad:46:4b:8f:0b:a8:ff:
e2:27:5f:05:67:d0:79:5d:26:09:3c:ff:c1:97:52:a8:56:1a:
9f:48:dd:da:e7:5b:db:90:e3:cf:49:fb:0d:31:75:fc:23:70:
5a:7d:1c:f7:1f:4f:c3:eb:c7:9e:b8:79:bd:5e:43:40:bb:cc:
3a:30:b9:84:58:e4:50:a4:90:19:0b:77:22:a7:67:a2:10:5e:
97:13:4e:a5:57:92:33:a5:7e:c9:10:a5:6b:b5:71:d7:33:e1:
87:49:d0:b1:99:01:6f:fc:64:c2:8c:a0:0a:ee:00:b1:3a:5d:
b3:20:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:58 2025 by rpki-client