
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: +fhKiG+Fu5gH05gDrSJXL3UjaZghOkkgtcnn33li+QA=
Subject key identifier: E2:8D:6E:E7:7B:71:DE:F8:2D:0F:26:23:5C:09:88:B7:6C:6F:5C:B2
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 0199FBEB1DB16CFF5D3A185C6BC2E6F7765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 01CE
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: pbwVYSgdU+dgU/nWEtNcO3TTwgmWc5Pr1LOR3ykkF70=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1d:b1:6c:ff:5d:3a:18:5c:6b:c2:e6:f7:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=e28d6ee77b71def82d0f26235c0988b76c6f5cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:30:8c:6c:c5:50:36:61:5d:72:c9:25:f1:
ae:24:af:4c:d0:25:09:85:34:88:46:34:64:a9:8a:
29:35:9c:06:7f:82:6a:76:f8:38:d3:b8:6f:89:9a:
45:0f:5e:20:00:0e:03:90:82:6f:36:cb:1d:8e:af:
e7:43:a9:1f:31:66:78:de:66:f0:be:00:02:ca:d3:
50:ba:b8:75:4a:ab:f8:f7:1e:86:71:c4:67:c2:11:
10:77:c5:55:37:b7:e3:7a:a0:94:2e:15:3d:82:5b:
6d:73:e4:00:c2:86:da:5d:54:60:b2:fa:48:3f:9f:
fd:9a:ef:76:08:b2:16:c2:6d:87:19:dc:bd:56:69:
d2:9e:09:97:b3:cd:d7:17:a8:39:f9:00:60:55:a5:
42:87:fd:0e:b6:e1:ce:4e:4a:1f:b0:fe:f0:97:96:
f2:ac:66:54:2c:fa:2c:71:be:3e:be:c1:16:a5:fb:
7b:4e:c3:c1:65:ef:aa:61:bd:23:a4:55:8a:cd:28:
bb:b2:82:68:41:3a:e4:d3:6a:f4:c1:59:bf:6f:00:
03:62:09:64:4e:f6:66:d0:cc:e6:11:65:e4:8b:b6:
f1:c3:1e:73:ca:4e:b4:d3:73:ec:32:6e:ea:94:12:
98:5d:e2:93:ea:91:ac:f4:c3:74:3f:c8:98:ea:09:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:6E:E7:7B:71:DE:F8:2D:0F:26:23:5C:09:88:B7:6C:6F:5C:B2
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:06:46:15:f9:25:c9:fa:09:77:87:1f:7d:b1:f9:51:2a:
3f:bb:8f:d6:9f:47:0d:c2:9a:86:7d:56:42:ad:6d:c2:a8:dd:
73:4a:8a:61:cb:ee:59:4b:c2:05:42:06:7f:9a:a4:62:7f:ea:
3b:a3:3f:a0:ad:a0:5f:9d:a1:27:33:4d:6e:42:79:c0:5a:eb:
70:01:32:2a:35:63:0c:38:1a:32:04:cb:45:9d:59:78:f7:3d:
e9:56:12:41:41:53:75:01:f2:0e:be:eb:e3:a6:79:15:89:67:
4b:df:41:df:66:68:df:99:ce:08:db:c0:1c:7b:8a:a3:46:89:
bd:35:08:a4:d8:5d:f7:e1:13:32:da:97:23:17:c7:28:04:fd:
2a:20:c1:a8:75:42:6e:9a:3a:d4:d9:d9:1c:c1:30:1a:e5:5d:
ea:06:55:b1:47:14:22:c4:42:c6:ac:31:0a:5d:e9:17:60:35:
5b:a7:7d:b1:f3:b6:41:f5:09:ed:a8:6c:0a:fd:18:48:90:c7:
0a:40:3c:c4:eb:62:ef:54:65:c4:10:17:47:75:8f:2b:b3:5e:
cc:2b:8d:96:4f:60:e6:9e:f0:d7:36:b5:53:0d:ef:52:42:6c:
12:7e:b9:54:a7:e4:9b:c5:c0:33:1f:c1:b9:20:b6:87:ec:08:
d8:59:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:51 2025 by rpki-client