Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: blvNjnKKLCcFl1xDSDNb048NkKGKzORU6/JxPEcC2KM=
Subject key identifier: F5:2C:D2:86:2A:BD:00:8D:66:F4:DE:45:72:09:33:E7:41:86:32:A7
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 0199FE7DD284C44803D3681F95FDC07C58C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 137A
Signing time: Sun 19 Oct 2025 22:01:22 +0000
Manifest this update: Sun 19 Oct 2025 22:01:22 +0000
Manifest next update: Mon 20 Oct 2025 22:01:22 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: LPG05Y++JgCVfaQtxkG3+qi2j/6a/VLSIb0SJlWMqyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d2:84:c4:48:03:d3:68:1f:95:fd:c0:7c:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Oct 19 22:01:22 2025 GMT
Not After : Oct 20 22:01:22 2025 GMT
Subject: CN=f52cd2862abd008d66f4de45720933e7418632a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:f7:19:93:ae:eb:24:ca:80:a0:11:44:21:
da:38:de:a3:b4:14:f0:3a:32:e5:76:7b:26:d3:a7:
b6:13:7c:97:6d:2f:1b:13:2b:62:72:ec:39:fb:ef:
e1:b2:e4:35:bb:4f:c9:49:ff:e1:cc:3e:3c:b3:d7:
2f:03:99:84:c0:49:5e:96:f7:81:ad:e0:70:83:6c:
a6:05:17:94:23:da:ad:da:d6:d2:df:e1:3d:d4:6f:
d8:78:1b:54:d3:73:fc:42:10:4c:b8:dd:e6:8d:35:
d6:94:92:4d:5d:89:c0:32:2a:ca:3c:34:19:00:b8:
aa:25:94:d9:e5:75:23:69:93:84:b2:fc:c1:e5:bd:
44:e0:46:1f:d6:3c:b8:b2:1b:47:35:1b:43:71:76:
ff:eb:5c:e2:b8:1f:c8:13:85:ff:5b:dc:90:3c:ce:
e1:77:9e:e8:c2:99:fe:ff:51:b4:9d:c0:dc:0f:19:
7c:f7:9a:0c:04:18:c4:2d:f9:5c:10:05:1f:cb:bd:
ae:d7:de:12:40:0c:ba:a7:fc:6f:04:4b:72:d7:bd:
d7:f7:64:17:5c:c3:89:05:40:4e:df:dc:02:1e:9e:
41:64:4e:49:42:f3:bb:3b:50:44:32:d4:18:7a:c9:
c8:7e:5b:4d:84:e2:56:81:30:bb:4e:61:4a:a0:b5:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:D2:86:2A:BD:00:8D:66:F4:DE:45:72:09:33:E7:41:86:32:A7
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7d:53:e2:92:f9:57:a7:55:27:88:65:e5:2d:e8:5e:df:2b:
f3:d0:bd:db:cf:5d:73:c2:b0:bc:f2:90:67:9a:9e:34:fa:7c:
9d:10:0e:82:63:e5:8a:60:e4:75:22:3a:fe:ed:44:d2:59:a0:
98:c8:a9:b0:08:db:81:95:5b:f6:9d:b4:35:ab:54:75:8f:86:
95:14:59:9c:02:4d:2a:40:24:82:b6:cc:45:42:43:75:6e:2d:
8b:c4:af:ad:22:3a:76:9c:db:9d:ed:07:d1:e3:ba:cc:09:be:
08:be:18:33:a5:f5:d2:fd:85:1f:ff:f3:3d:18:ea:dc:45:1f:
08:2f:e3:17:b9:26:96:e0:e3:07:00:f0:b1:6a:49:64:89:ad:
05:74:c8:2a:dd:fd:34:a1:7c:7e:18:bd:3f:9b:c5:a4:ff:ca:
c4:03:63:a5:d9:e6:da:bf:18:e5:64:07:41:b3:76:6b:b7:43:
7c:e0:d8:7b:b8:7b:88:cb:54:7c:b2:31:0a:18:4e:be:b1:ed:
29:22:a8:06:4d:eb:c4:95:a0:cb:9b:a7:85:e9:f3:b3:32:ce:
22:1a:2a:ce:1f:7c:7f:e9:9c:c9:75:a2:65:2d:9d:eb:7e:ad:
9f:a8:85:a2:56:6f:0c:3a:a2:3e:cc:26:71:d5:0d:bd:a7:af:
4e:7a:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:52 2025 by rpki-client