Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: N4+gj0R25jq/yWLvear1bn99HK0BqLBg2mgEB8EpR40=
Subject key identifier: 02:5D:1D:CA:86:FB:CF:A3:5F:4F:5C:E2:E4:46:13:E3:03:CC:27:B0
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 0199FC5853D16BAC41543FF0C0282EA5C978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: F2
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: Z5+hyULPABT2d1XBaVVG2xqljobv60WwlCOI/Ltxtos=)
2: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (hash: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:53:d1:6b:ac:41:54:3f:f0:c0:28:2e:a5:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=025d1dca86fbcfa35f4f5ce2e44613e303cc27b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:e4:02:88:70:a3:d7:77:ad:f2:c8:b0:85:
af:69:ab:50:28:5e:e8:f4:1a:5e:46:33:4a:5b:48:
fc:88:ae:68:fc:31:63:0f:68:d7:3c:bd:2e:71:c2:
a3:1d:c2:d5:ec:df:5a:8c:da:b5:80:62:41:66:8f:
7e:64:d3:23:61:c0:a4:46:18:6a:6b:42:35:7e:50:
11:9a:af:1b:6e:fe:ce:6d:6b:28:1f:3b:2b:a8:a4:
5e:04:5f:65:5b:f5:ef:64:a7:d5:ae:24:32:61:ac:
5d:52:7a:eb:71:25:36:4b:41:10:9f:f6:83:7c:9a:
3f:2e:bf:e4:53:bf:7d:7e:8b:f6:03:42:0c:04:ca:
56:1d:19:80:fc:2e:06:28:bf:2d:65:7b:7e:0f:bf:
9c:63:ec:27:55:20:63:64:0f:11:5f:67:27:46:9d:
c5:7c:88:1a:5c:4f:bc:8e:7a:a5:5d:da:6f:12:60:
7d:17:b2:da:4d:2a:c1:2e:6b:69:53:86:4d:d3:ea:
af:50:ea:19:b2:a1:e8:6e:4d:b8:4d:60:ee:7f:76:
25:0a:cb:3b:2e:93:c8:23:c2:07:8d:da:13:79:4a:
9e:2a:c0:dd:2b:a8:f2:aa:4e:76:c1:83:09:e6:a2:
6b:0b:39:da:7f:3c:7e:cc:2d:6e:43:43:1c:55:9d:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:1D:CA:86:FB:CF:A3:5F:4F:5C:E2:E4:46:13:E3:03:CC:27:B0
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:9f:ca:b5:1f:c6:9c:bd:d0:98:3d:f7:a0:c0:db:60:73:
96:eb:be:00:1d:93:f1:90:c3:eb:b6:2e:fc:ba:1f:d8:81:84:
9b:12:b6:0b:99:28:1c:56:d1:a2:db:c7:cd:4b:87:d0:88:64:
1c:f8:35:e3:53:30:34:77:98:60:ba:dd:c6:b1:2e:ee:85:38:
95:2c:e0:30:3d:57:55:91:47:a4:d4:eb:20:4a:be:66:a1:2d:
31:a9:0e:2d:ae:85:55:c2:75:0c:c6:d3:c4:3f:0d:76:94:68:
f4:d5:95:0d:87:61:32:9d:f8:a6:85:23:69:f4:d3:2e:d6:c9:
8c:26:2f:0d:ba:c2:d0:c2:9a:0c:e5:36:bc:50:18:fa:ad:4f:
3b:92:aa:37:e2:28:41:4e:49:b8:25:53:a0:26:1a:79:ab:48:
ca:80:19:94:e5:4d:6a:8a:23:16:04:58:b3:9b:2e:29:c8:62:
c9:fd:e9:16:82:a3:b5:86:8d:7b:27:79:1c:79:d9:77:14:50:
f2:35:c7:2a:1b:1c:d2:a9:3c:2a:dc:0c:be:bb:e3:5d:a6:9e:
f9:a5:48:b0:3b:8b:a5:b6:ff:52:e6:ae:7e:4c:0c:46:81:7e:
c8:4a:9e:31:48:56:92:1a:26:4a:a6:02:ba:cd:78:a5:2e:d8:
7b:2d:91:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client