Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: gpHg9TCbjFcsjl9W3UEK5omTe3+4/yaJ/6EgbY0CTec=
Subject key identifier: BA:D6:CB:B8:D3:0B:4B:4A:47:C8:64:87:5E:73:2F:AA:E5:6A:17:38
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 0199FC21CC204AF4836BA2B6FDBD3390EE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 11AA
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: TBGpVFI2lLvyIH4AY_XvgasXlhQ.roa (hash: tvFeHcNNfQ4t5ATDiY+/Dak2Xl/WexRzcSGHjDplBZM=)
2: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: PsidVRNBRBI1YeoVQ/cpXwk520lsE2ON34xnB6Bug3Y=)
3: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (hash: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cc:20:4a:f4:83:6b:a2:b6:fd:bd:33:90:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=bad6cbb8d30b4b4a47c864875e732faae56a1738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:96:01:c8:3b:9e:fa:db:4e:3a:65:f7:0e:
fc:c9:53:e1:cf:55:6d:77:4e:3e:01:20:58:5c:df:
9b:05:78:a7:ff:54:5f:c7:6f:59:83:0f:94:04:2e:
97:fc:d3:03:fa:d1:eb:25:f9:a7:f9:7b:b2:61:b5:
6b:e4:5f:82:41:73:9b:f6:bb:e5:d6:b1:43:e7:96:
7c:e6:20:e7:9f:61:e3:8b:b2:e4:0d:0d:b1:bb:6e:
40:ae:9d:7b:98:9b:42:f6:da:1a:4a:9b:aa:4d:98:
81:e2:2c:4c:94:7b:51:26:15:4a:28:a5:cd:24:33:
3f:1c:76:cb:f5:79:b1:13:35:e2:68:5a:77:35:2d:
b8:9d:56:61:18:c5:9f:a6:70:fb:cd:72:23:00:d6:
0b:9d:0d:e2:09:7a:2a:12:d7:11:cf:83:59:59:00:
6f:56:a5:76:d9:9f:52:25:b5:07:db:dd:8c:98:1b:
c0:a8:b2:44:4c:f1:6c:39:01:6d:0d:b8:1a:a6:cb:
fa:40:d2:1f:71:bb:c2:75:3b:75:61:37:15:ef:fd:
f2:5a:0a:bf:03:e8:ac:b3:e4:90:cc:94:8a:25:96:
dd:2e:0f:23:4b:7b:c7:95:44:dc:7a:ac:b4:9c:43:
79:36:bd:a7:d7:59:ce:32:d2:97:e0:de:0a:c2:08:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D6:CB:B8:D3:0B:4B:4A:47:C8:64:87:5E:73:2F:AA:E5:6A:17:38
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:7b:4f:f4:06:da:72:97:46:b8:e4:eb:87:2e:b6:2a:8e:
15:51:59:68:07:6e:e7:b6:aa:71:00:82:a5:05:59:a1:53:7e:
87:ba:5c:8c:8b:36:c0:51:ff:31:70:4b:09:69:2c:f0:7d:1f:
ee:ef:c1:af:60:87:8b:b8:eb:61:58:97:fb:54:94:f1:a8:7e:
94:99:af:8d:df:3c:80:f7:78:f9:b5:39:e5:e3:34:81:e1:f9:
dd:93:c8:51:4b:69:48:29:18:ab:15:97:e6:3b:b1:31:27:79:
0c:07:65:8d:28:2c:08:6c:ad:25:49:9f:77:7c:ca:17:e4:98:
38:5c:7b:33:fd:bd:aa:f9:a8:98:99:a2:6b:51:0b:54:fc:f3:
92:ba:10:9f:60:ae:83:8b:38:10:18:9f:0c:12:17:96:51:a4:
c0:4f:b1:7d:2d:f8:91:b7:d3:76:f8:81:c7:84:4b:29:72:ac:
26:a6:8f:28:1a:45:09:d5:3c:5f:18:e4:aa:5f:1c:f8:b0:91:
e7:c9:3d:3a:6f:aa:d4:31:6b:78:ef:28:43:07:ad:ef:66:05:
45:c6:a1:35:a5:16:e9:ca:86:e2:1c:78:4b:74:8d:fe:44:88:
fe:cd:a4:a1:5b:e8:9e:fb:07:43:3f:49:85:fc:2d:93:d2:5f:
06:3c:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:14 2025 by rpki-client