
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: 74ZaDdu4dKSgvwovt9qKJdBcJ+uDKpt1Yv26KCS2xdU=
Subject key identifier: 12:6D:9C:DC:B0:B0:83:39:25:39:49:48:26:BD:48:08:7E:41:E1:EC
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0199FFFE47DFD61AE0989695637EDBBE5384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0EA9
Signing time: Mon 20 Oct 2025 05:01:18 +0000
Manifest this update: Mon 20 Oct 2025 05:01:18 +0000
Manifest next update: Tue 21 Oct 2025 05:01:18 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: fLzQGiY371Bn1/1+eGe1JwEIPakNqhLHyFaomvmEYzY=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:47:df:d6:1a:e0:98:96:95:63:7e:db:be:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Oct 20 05:01:18 2025 GMT
Not After : Oct 21 05:01:18 2025 GMT
Subject: CN=126d9cdcb0b083392539494826bd48087e41e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:df:d5:2b:7c:a3:28:e9:43:30:09:cd:24:
b8:05:aa:ff:f6:3a:0c:85:a6:18:8c:0a:1c:f7:e6:
0b:dc:5a:22:4d:70:53:57:3a:dc:ad:78:88:9b:30:
65:0b:d5:20:d6:15:18:ea:04:29:f6:95:96:9a:f3:
96:c8:69:51:2d:ff:c6:8e:6b:99:0d:a4:86:62:96:
53:94:f6:81:41:3b:5d:9c:d2:74:24:c6:bb:0f:42:
e6:79:5a:cc:68:2c:a8:f6:2d:59:36:67:79:74:05:
c6:d1:ba:22:23:13:41:6c:e7:b6:bd:c3:2b:f9:79:
9f:e5:82:8c:df:3a:79:c1:7e:cb:cd:49:72:6b:d7:
ff:bd:e8:dd:ce:5d:39:c8:c5:0f:0c:b0:36:ae:55:
3f:8c:0f:d8:51:ff:1e:cb:bf:5b:b7:4a:d6:8d:ab:
81:76:c5:58:1c:25:22:f2:37:21:fe:e8:eb:81:12:
1c:60:fc:3d:63:00:91:43:d3:58:3a:61:40:22:87:
aa:83:1f:9b:85:9e:57:d1:16:90:2d:d3:c2:ee:b3:
11:8a:85:fa:f2:09:79:f6:cc:94:7f:be:08:f2:1f:
64:e1:24:82:73:75:79:64:e4:fb:de:95:77:7d:2a:
05:05:a5:5a:69:f8:4a:cc:85:35:8d:46:da:ae:3f:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:9C:DC:B0:B0:83:39:25:39:49:48:26:BD:48:08:7E:41:E1:EC
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b0:4d:fd:48:ed:8c:58:49:40:9f:6f:b8:35:89:9f:b3:5c:
b9:29:76:2f:72:f4:86:64:05:bf:51:6e:4a:6c:4c:09:c5:f1:
46:44:24:db:9b:cb:60:37:1d:cb:91:14:db:c8:3f:d0:1f:20:
78:5c:39:ea:70:74:8b:93:4a:f8:2b:74:63:a4:c2:ff:62:00:
cf:4e:d3:aa:43:d6:90:39:35:7c:de:4d:b2:2f:ba:39:44:c0:
78:39:80:7e:2e:49:f2:ea:14:00:a7:ca:43:0d:c9:03:e1:1a:
90:c1:44:68:ac:60:4e:e8:2f:95:31:d3:d7:c0:9d:20:f1:29:
c4:82:fe:73:c6:e7:bb:a2:58:42:ad:bc:d4:5e:40:b4:40:b9:
9e:e1:9b:b0:9b:06:ca:b1:b4:d8:d7:47:79:b3:81:e5:9d:56:
ad:27:a4:c4:17:23:c2:d9:95:61:85:86:c5:c7:ab:c9:fc:7e:
5a:eb:67:7b:a8:49:bd:6f:81:a0:1a:2f:a8:f2:e5:44:75:db:
94:8f:bf:b2:ec:64:2f:41:22:ad:3f:aa:f3:fc:dc:ac:21:88:
e6:60:b1:87:de:3c:03:de:4e:d1:0a:62:77:20:fe:67:97:a1:
21:11:71:62:3f:8b:aa:c6:97:14:82:d0:e9:a1:0e:05:e1:0a:
0f:61:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:22 2025 by rpki-client