Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: VVFw3sZFfpLm7TrEMYu2eTseK4qq6LsQpIql8xj+vQI=
Subject key identifier: F5:8A:2A:DF:23:B0:80:9A:05:97:77:50:9C:D6:96:23:53:A4:E5:B8
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 0199FBEC00DCA526325C84BDEF9FF8963833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 0209
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: Q4GBQSSjTprRXchi99BnYrbhMRt6e25uSnwWcpdo7OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:00:dc:a5:26:32:5c:84:bd:ef:9f:f8:96:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=f58a2adf23b0809a059777509cd6962353a4e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:ed:5f:01:f9:48:ee:82:aa:d4:5b:06:0f:
ee:6e:37:f7:c2:1f:b1:ff:05:a7:9d:a6:bd:dc:7f:
d3:d5:07:50:46:a7:59:4d:59:22:0b:ba:6a:13:50:
12:8c:89:59:5a:59:32:ad:27:c9:1e:0f:c2:e8:81:
57:78:d1:68:ab:21:2d:49:3e:a7:23:1e:2b:a3:d6:
0d:9c:30:a8:7d:dd:53:77:2a:66:df:81:df:aa:e1:
3a:ce:c1:8e:cd:ed:2f:5d:30:cf:7e:20:2e:0a:d3:
8d:1a:33:4f:24:e4:44:eb:b7:73:77:16:81:0f:30:
e0:b8:ac:2f:98:08:ad:c3:0f:52:ab:41:52:ef:85:
16:fb:37:2d:56:3e:88:fa:a9:50:15:d5:3a:19:51:
82:fe:6f:37:fa:5b:be:e5:9d:c5:0d:f3:de:9b:f7:
4c:af:d5:f0:c5:c1:68:9b:6e:30:13:97:81:5b:c6:
5d:75:a6:96:22:12:0c:9e:64:d9:a1:92:75:4a:6b:
90:2a:d8:0d:b8:03:8e:12:9f:57:a4:e5:17:7e:16:
ec:1a:7c:93:c0:2e:7c:1e:aa:9b:fb:d3:80:8b:1c:
9d:a7:ca:2d:af:cd:c7:9d:10:25:e7:80:ac:8a:17:
c5:7f:6f:f4:29:fd:ab:31:9a:96:a6:43:9a:be:25:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:2A:DF:23:B0:80:9A:05:97:77:50:9C:D6:96:23:53:A4:E5:B8
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c5:59:0c:61:99:e9:00:2c:bb:8b:c0:ae:a0:d0:6e:f0:50:
ce:49:b1:22:eb:ee:21:20:e4:44:02:b9:c9:93:d5:07:29:94:
31:e3:b6:1b:15:62:08:54:f5:1e:82:9c:66:3c:5f:1d:ed:51:
52:d5:30:d9:4a:7c:cf:08:33:02:76:80:e0:64:cd:cd:8f:96:
9d:1d:5a:6c:28:46:12:25:53:f2:79:33:4a:32:47:88:64:ab:
b5:9c:48:4c:e1:b8:97:04:41:df:3c:40:bf:15:bf:f8:70:7e:
81:62:44:fd:8a:7e:2b:ce:86:28:51:82:ab:8e:78:b8:3a:47:
2f:74:d5:1a:47:5e:d7:0f:68:88:aa:a4:06:79:8a:68:f6:6b:
0c:00:ed:95:bc:06:28:e2:95:0f:6c:b1:4c:fd:9f:43:bb:bb:
28:bb:04:e1:c0:ee:fa:3c:ad:e6:64:01:ef:37:cf:a2:09:da:
3e:45:44:db:5b:22:22:9b:60:16:6c:e8:4f:a7:dc:20:77:40:
07:7a:f6:96:94:56:22:9a:0c:07:39:5b:a9:34:9e:1f:0e:90:
d0:5c:d5:31:10:69:a4:8a:2a:65:36:71:95:94:11:32:70:db:
af:52:fd:99:7b:15:39:18:1d:cd:10:e4:57:b2:95:60:87:00:
90:26:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:23 2025 by rpki-client