Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: hNaU84SXvByO30ZBBYors4qOr1aifEdtinlQz4R1Uaw=
Subject key identifier: BB:E5:E5:79:42:B4:20:12:32:DB:7E:CB:F7:EE:3C:78:64:41:FF:F9
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0199FBEC0304F9E7ABE1DE13D4B752C894C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1061
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: m4Qy4LeVGCriti7kq6MoaS328QxcmShEaFlE/oDfm8U=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:04:f9:e7:ab:e1:de:13:d4:b7:52:c8:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=bbe5e57942b4201232db7ecbf7ee3c786441fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:02:fd:b8:ec:ec:c4:9b:85:a2:37:f2:35:
ce:6b:5d:3a:d0:94:88:ab:0e:33:8b:04:6a:12:3f:
75:20:e0:6b:20:81:5a:52:70:2c:ec:77:b5:c3:de:
83:af:6c:3c:25:ff:57:76:55:74:28:6a:fc:1e:0a:
c5:f5:e5:04:59:50:89:00:b9:7f:f1:01:ab:86:f2:
9b:1d:81:b7:22:8a:df:ae:db:2d:44:fc:92:10:d8:
72:a3:85:ee:ab:c5:18:a6:7d:f5:56:97:a7:d0:72:
65:2b:3d:34:2c:fe:4b:88:09:16:ba:0c:f5:79:df:
7f:47:3f:a9:53:83:bd:77:87:53:5b:77:fb:13:b1:
6a:e3:84:1e:a4:3e:8b:f1:4a:65:c1:43:96:1b:b9:
c5:64:f9:47:eb:7b:04:3e:9a:12:c3:a3:d4:b0:80:
35:24:10:f6:c7:3f:3d:69:7e:f1:38:22:92:4a:e3:
11:37:63:09:0c:bf:76:0b:1f:9d:f1:5c:3e:57:aa:
85:23:06:47:bc:e5:6a:75:ed:ad:c6:66:fa:9d:3d:
db:e0:af:ee:23:79:ad:da:da:59:13:9e:2d:9d:a4:
5a:8e:33:1b:dd:ae:eb:c4:0e:7b:c6:f9:32:79:1b:
98:45:e2:02:fa:e0:03:fb:22:bb:63:55:23:3c:3c:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:E5:79:42:B4:20:12:32:DB:7E:CB:F7:EE:3C:78:64:41:FF:F9
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:92:91:e7:bf:cc:79:ba:c3:b7:7a:13:3e:83:06:7f:e4:
e9:0d:74:31:5e:a7:a5:fa:38:d8:ba:5d:c0:9a:af:44:aa:d0:
7e:8c:13:69:6e:53:06:77:ab:0b:03:6e:d2:18:61:ef:66:69:
44:42:7a:99:f7:ed:b5:94:59:f0:f7:6d:c3:bb:52:6c:e1:b2:
cc:74:c9:48:c3:0e:db:b9:f6:c8:d8:12:af:77:b4:f2:12:98:
97:ad:2a:d9:33:b3:22:bf:56:a8:1c:74:4f:c0:5f:58:7b:ea:
15:41:5a:72:3d:9b:53:b9:a4:bb:15:6f:4a:31:55:31:55:ec:
44:13:8e:c0:d5:82:7c:9c:b2:c9:d8:76:dd:71:1e:66:6c:a8:
3a:ed:d0:6e:3d:28:e1:68:35:88:1e:56:1d:5a:f4:2a:b1:71:
5a:ef:f4:7e:d1:7a:b9:42:f9:1f:14:77:9f:fc:7f:55:18:da:
d2:4c:17:de:8d:fa:e0:e1:23:0c:7a:09:2c:52:b6:08:13:bd:
56:30:1c:87:14:d3:42:57:79:8c:b2:e6:4c:22:d4:f5:dc:59:
6c:83:d6:18:84:b5:ac:42:3b:b3:fb:70:cf:ce:2e:22:e1:eb:
75:83:d0:71:06:d2:2a:ea:c2:87:fd:83:4c:38:2f:66:f4:87:
f9:ea:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:52 2025 by rpki-client