Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: bRf0/rMXG28/524okfu5/JoIGDlxLz1Ybfs40/MjBhU=
Subject key identifier: A0:2D:99:DA:ED:0F:DE:56:0F:5E:15:3E:E2:CB:53:9A:78:4C:9A:DE
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 0199FDDA0F1D01ACDEDD21F2B0151F854E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: 022B
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: VRVS7Aod9i65RbOtk2/OzsWAxusHg/izN1bcUos+ELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0f:1d:01:ac:de:dd:21:f2:b0:15:1f:85:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=a02d99daed0fde560f5e153ee2cb539a784c9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:d8:45:e1:e5:b9:c8:0b:79:b8:d1:ac:8a:
14:43:0f:33:21:8d:79:51:9e:44:af:9d:29:fe:77:
eb:40:75:7d:16:e6:c7:39:26:74:8e:ae:02:aa:d2:
d9:5b:a9:71:53:94:c9:4e:7f:c6:82:34:c9:81:da:
7e:70:e8:5e:23:2f:80:9e:0f:41:df:e1:5f:9d:76:
36:52:11:9e:b6:eb:84:c3:06:a5:0e:33:a6:6c:0e:
86:a7:bd:fa:0d:53:9d:24:67:c8:4a:34:fc:f9:8e:
a4:cc:92:85:cd:b0:44:71:fd:bc:f4:c1:d2:b1:5c:
22:b4:ce:69:51:4f:a0:2d:7f:11:bb:77:9f:c1:4a:
f6:c1:18:e2:e4:54:59:25:0a:00:b4:29:c0:0c:ab:
5b:c2:96:98:8a:b1:e5:1f:1f:97:6b:1c:1e:fd:dd:
ff:d3:b2:7f:40:7f:d7:66:09:2b:aa:f4:4f:c3:2d:
7b:75:e0:28:e3:09:c1:05:35:4e:6c:05:b2:3b:0b:
e8:b2:04:e0:67:90:92:a5:ff:1e:9b:62:ab:e8:5f:
94:a9:52:5d:53:18:9d:c5:21:e1:ce:89:fe:8f:d6:
02:56:10:03:8b:f3:87:0c:43:03:42:6f:c8:dd:bb:
c4:cc:e5:c5:cc:23:28:d4:62:4c:b8:50:5b:86:77:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:99:DA:ED:0F:DE:56:0F:5E:15:3E:E2:CB:53:9A:78:4C:9A:DE
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a8:71:30:54:86:8f:d7:29:3c:b3:bc:77:6d:b8:d5:d6:b4:
c5:4e:79:6a:ce:7c:79:a3:a3:b3:c9:04:ee:06:2c:98:1a:98:
24:8f:f9:9c:18:02:17:d1:45:2d:74:3b:96:d5:37:90:96:0d:
95:b4:91:7b:ea:c0:42:30:47:b5:e2:d1:37:e8:1d:8e:b1:f2:
71:f3:f7:f8:fb:8f:0a:38:71:b0:7b:7f:b5:2a:6b:54:a4:86:
48:a5:7b:d2:76:dc:1d:1c:6d:99:00:73:76:ae:34:df:51:84:
1e:a7:7f:d8:90:b3:22:a7:83:3b:31:97:a7:cc:5c:e9:dc:34:
b8:4a:64:b7:70:37:c2:23:5d:06:38:4f:50:94:b2:04:8c:40:
11:dd:05:67:3a:e2:4f:fb:60:f8:1f:2b:0b:df:48:30:9b:33:
e5:ee:45:25:f9:ed:49:a1:17:fd:3d:f0:95:f7:e8:18:d2:76:
68:e0:49:8f:ee:ff:65:0d:56:6c:b0:8a:f6:80:a0:3a:dc:45:
81:2b:8b:6c:b6:ff:72:ef:b2:f4:df:8d:88:a0:ef:d1:c7:93:
53:d1:15:c2:42:82:06:32:60:75:02:69:b9:09:8a:82:5d:50:
e4:6b:c6:6d:21:0d:fd:00:92:77:b5:84:ae:d2:be:46:57:74:
c9:5e:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:01 2025 by rpki-client