Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: 6cz15JR75cdJpjkJAReqQ5kLPfr4R/1KP28tGSJXbUI=
Subject key identifier: 2E:D8:FB:A4:61:21:EF:59:F7:45:77:FB:8D:B3:50:0B:E2:11:97:5B
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 0199FD341950ABA1CE079FEAF8A7C2EB9CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 07A9
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: NmKuidNKb6h5Jli4Vc5I7CI+ZJ93UoImHPWghFr0Brg=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:19:50:ab:a1:ce:07:9f:ea:f8:a7:c2:eb:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=2ed8fba46121ef59f74577fb8db3500be211975b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:7f:b9:42:68:fe:23:43:c5:29:02:f9:58:
d6:42:91:30:9a:de:e2:b5:15:5a:16:90:e8:18:74:
7a:47:c3:80:1b:f0:0c:a9:60:37:f1:f6:3e:b3:e8:
7d:5f:e5:5e:95:81:0a:a8:a4:ea:06:99:35:c8:33:
9e:5a:08:b3:86:29:53:84:af:9f:7b:21:26:cb:fa:
31:d8:47:d0:e2:2c:95:b0:28:79:44:d7:d3:27:67:
7d:42:07:61:d8:c9:e3:0d:62:f5:5a:24:03:bb:56:
0b:1e:e2:0f:ae:34:00:ad:78:78:26:3b:ed:3a:66:
b1:a1:ac:1e:4d:60:6b:f6:06:9c:f3:33:5f:38:9e:
18:7e:24:cb:51:41:d3:1d:08:8c:eb:c2:82:32:60:
f0:df:30:bc:e7:b3:2b:ab:3e:6a:c7:c1:c9:9d:ad:
19:65:81:12:b8:ef:40:b1:48:63:b1:5a:51:75:52:
a4:f4:5b:b9:f9:67:36:a9:ea:42:f2:c0:b9:53:37:
06:f5:b5:dc:b7:80:38:4d:c5:8e:f7:2a:a4:e8:18:
27:c4:6f:9d:a5:4e:73:e6:9c:47:16:dd:95:10:e1:
71:58:5c:d3:4e:aa:b8:e0:c5:60:9c:b6:bc:63:dc:
2f:d9:ac:fe:74:d3:02:bb:89:7d:ec:08:94:e2:38:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:FB:A4:61:21:EF:59:F7:45:77:FB:8D:B3:50:0B:E2:11:97:5B
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b9:c3:e8:70:5b:a1:00:66:52:2d:5d:1d:c0:2a:08:8f:52:
9f:3a:a0:00:39:a2:80:22:92:95:90:8b:94:44:18:f0:cc:c8:
05:f3:f9:86:6e:7b:53:4f:7e:a2:14:37:c6:89:6e:e4:d2:3d:
ab:b3:24:73:3a:57:71:98:ed:99:57:99:5d:2b:6d:a7:e0:eb:
57:15:dc:73:a1:6d:bc:de:b1:88:0b:79:54:57:34:a0:ca:75:
f9:a4:f8:6c:ec:41:99:18:c5:e0:5f:1b:bc:af:04:9e:f1:bf:
d1:30:5e:14:00:ad:6b:67:f8:03:ca:82:17:31:3d:3d:d3:58:
c5:0c:46:71:cf:35:dd:34:dd:2d:8b:bf:df:26:a2:6f:45:ac:
2d:b9:28:6c:d6:8a:63:6c:44:6c:1a:7e:aa:77:f6:f6:e4:ed:
d4:ea:c3:7a:41:5c:d1:04:d9:a7:a1:e7:5d:f9:8d:a1:c2:8a:
34:92:76:e1:da:cf:17:22:17:8f:77:26:38:92:8f:0a:75:30:
86:ad:f1:cc:b6:f3:5d:bb:42:4f:68:9c:55:4d:53:29:97:9f:
8e:cb:1a:a8:cf:58:cb:0f:c6:5a:05:c2:0d:6a:5b:a4:15:90:
42:a5:b7:c8:7e:57:dd:4f:da:13:9a:5a:9a:12:6b:6d:7d:a1:
58:12:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:42 2025 by rpki-client