Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: ke4aetyWQvkW9AAzGpVCCJNUEra6Kh1a2AJvkNxsHL8=
Subject key identifier: 2D:AF:99:DA:D0:12:2D:B9:BC:80:8E:A3:12:94:4C:1B:6C:75:47:A1
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 0199FB0F34B638AEF589BEFA1F92A9FA7D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 0861
Signing time: Sun 19 Oct 2025 06:01:41 +0000
Manifest this update: Sun 19 Oct 2025 06:01:41 +0000
Manifest next update: Mon 20 Oct 2025 06:01:41 +0000
Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: Oy0B6D13OmUfobDaV1G6qJukpfLKv87+eJkd5nBqoqQ=)
2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:34:b6:38:ae:f5:89:be:fa:1f:92:a9:fa:7d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Oct 19 06:01:41 2025 GMT
Not After : Oct 20 06:01:41 2025 GMT
Subject: CN=2daf99dad0122db9bc808ea312944c1b6c7547a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:d1:fe:bc:5e:5d:75:58:4f:7b:45:44:43:
70:61:90:80:d0:bf:3c:67:51:a9:10:39:39:93:5e:
5d:c1:e9:9a:19:01:ec:3f:fd:9e:e5:1c:65:b5:35:
21:f5:b9:99:6d:c6:34:35:aa:05:12:78:47:61:90:
8c:c2:44:b0:f7:b9:93:cb:c9:55:34:6b:d2:37:b3:
16:70:27:4d:09:7a:36:85:8d:57:b4:96:af:db:a8:
8c:0c:73:1f:29:3a:48:10:86:59:03:d2:25:71:e6:
00:57:ca:48:4d:e5:8f:05:f8:2d:41:f5:7b:af:91:
91:3b:00:f9:98:c7:45:a9:f4:52:74:00:3f:fa:7c:
ce:82:46:c6:de:c0:1c:c0:2a:9c:f1:de:21:2d:d3:
5e:0f:4b:a1:d6:bb:4f:4f:5e:d9:e0:1a:4d:c3:b5:
d6:06:95:f2:90:7e:e3:ad:dd:dd:e8:7f:fa:bc:42:
5c:a9:01:be:7b:84:4c:1d:90:5e:27:44:40:14:2a:
34:08:eb:f0:45:33:fe:6e:7f:53:cb:18:16:dc:aa:
77:bc:36:55:8f:38:a3:5e:6a:f7:17:20:cd:83:86:
07:ee:4a:76:c2:b0:e3:f0:0b:2b:e3:85:33:eb:c8:
d7:4b:00:a1:12:62:18:3b:96:00:62:02:fd:a1:ef:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:99:DA:D0:12:2D:B9:BC:80:8E:A3:12:94:4C:1B:6C:75:47:A1
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:ce:99:69:73:36:b1:2a:70:ea:d3:7b:72:2d:c7:47:28:
0f:52:15:88:68:c9:72:d7:45:3d:af:2a:d0:b4:80:9e:15:82:
61:e6:c2:84:59:f3:55:11:10:98:ef:fe:a7:95:8a:2b:29:d3:
54:c3:04:fe:a3:bc:5c:0e:ca:46:e1:ce:e3:42:39:59:fc:9c:
1f:8b:d3:79:41:0d:3b:ce:9a:c0:06:c3:46:fe:ca:d1:40:d3:
cf:30:22:0d:7a:c9:c7:4b:35:f7:14:8b:f9:fd:23:b4:12:ff:
18:a9:ca:5c:b1:30:0a:78:a4:e5:18:7c:17:3b:67:3b:22:3f:
d3:d5:0c:05:4b:73:b7:3f:9d:24:8c:c7:9b:59:3e:7e:bc:99:
9f:a8:25:22:1b:30:56:0a:00:a4:0d:c2:aa:1b:d6:93:b6:15:
bf:d6:e1:e9:e4:ed:13:32:48:41:25:83:20:fb:cc:a4:da:ac:
4b:7e:f9:78:d8:20:c1:0c:44:bd:4a:f9:06:5c:5a:4e:64:6d:
f1:c0:41:bb:8e:33:2e:00:1e:d0:93:c6:41:63:48:87:1d:84:
78:dd:d7:67:cd:51:c3:9a:a6:5e:f6:da:81:72:4d:cf:ea:bb:
e0:62:5a:d6:ec:a6:3a:4a:fe:e7:11:fd:52:4c:e7:69:3f:d4:
0c:49:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:06 2025 by rpki-client