Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: vqpYUwBQagdSbgEl8lohaE3U6MlTJ+7ARxVbvhFsvQw=
Subject key identifier: 43:E2:66:8D:29:23:7C:6C:15:46:E1:45:20:B7:FC:AC:F6:0B:E2:E3
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019A0110F6D76E032E4E2F50DF7C091321E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 040B
Signing time: Mon 20 Oct 2025 10:01:20 +0000
Manifest this update: Mon 20 Oct 2025 10:01:20 +0000
Manifest next update: Tue 21 Oct 2025 10:01:20 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: 3EizeopAtUSgqKhQ06SURfS4LPZ/CQWrJi60cyoOnZU=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f6:d7:6e:03:2e:4e:2f:50:df:7c:09:13:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Oct 20 10:01:20 2025 GMT
Not After : Oct 21 10:01:20 2025 GMT
Subject: CN=43e2668d29237c6c1546e14520b7fcacf60be2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:7b:55:fb:15:a4:3a:ef:3e:97:bc:14:da:
0d:3e:61:fe:d7:39:ed:2b:b4:f2:ad:54:dc:a8:bb:
a3:62:a2:6c:f2:02:4e:88:cb:1a:fc:e9:b1:07:dd:
7a:50:2e:62:36:f2:f5:35:d4:41:99:d3:02:3d:bb:
80:d2:f6:17:36:c9:71:bd:da:16:5c:cd:50:21:fa:
b2:22:ee:b3:a6:08:61:2c:ad:9c:7d:96:48:09:c3:
34:e4:5b:a1:fb:f6:73:cb:c8:0d:56:2d:a1:99:18:
d8:70:69:f8:f9:4b:14:d8:7e:8a:fa:26:6c:61:37:
04:eb:20:76:11:17:73:71:62:bc:06:9b:41:1b:ad:
e6:3e:8b:88:ad:4a:00:98:0f:56:68:01:24:d4:b9:
8e:cf:69:01:15:cd:f6:84:48:f3:53:4f:ac:a3:80:
4f:a0:5f:c9:c9:cb:5f:16:a4:19:b5:09:fe:68:3f:
01:d2:ba:35:35:6f:86:cf:48:15:ef:1b:27:98:4f:
93:4f:f9:b3:50:f3:ed:45:b0:2a:92:b9:a1:53:71:
7e:d1:01:0e:61:62:59:2c:28:84:2b:a7:15:ba:4b:
7c:6d:a4:94:d4:3e:ec:e5:8a:1f:d6:dc:bd:d3:04:
cf:1f:db:dc:1d:6c:c5:2a:3f:dd:e3:cb:01:be:f1:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:66:8D:29:23:7C:6C:15:46:E1:45:20:B7:FC:AC:F6:0B:E2:E3
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:41:7d:83:68:b5:d8:c3:c9:d7:09:ec:ff:06:5b:66:92:
dd:be:0c:df:ba:f3:1a:0e:31:2c:d3:ef:4a:eb:96:f8:cf:15:
84:4a:d2:a1:b0:0f:41:f6:16:35:92:8c:a9:d2:f4:8c:de:e3:
a9:1a:eb:78:b2:6e:e6:8b:6d:38:da:c2:e2:30:89:6f:45:d7:
6a:ff:a1:e3:bc:cd:6b:75:3e:4d:e9:f0:5f:ad:c7:7f:53:49:
85:32:1d:e7:0d:c8:b7:c1:e2:f3:bb:fa:6b:71:47:f6:dd:7f:
4b:6d:b5:dc:5a:2d:70:6a:f3:46:9a:be:33:fd:a6:63:07:1a:
c5:aa:a1:31:9e:9b:fa:0e:99:af:1b:25:85:83:ec:4f:cf:cf:
34:52:52:89:c7:4f:e6:e2:4f:ed:88:1c:f4:35:27:dc:77:5b:
f9:59:29:92:d6:a8:5c:d8:a8:64:7c:0f:1c:e1:c7:41:39:ae:
a6:7f:ee:8d:5b:84:96:ef:11:83:ac:1c:f0:ce:a4:fc:37:35:
9d:bc:df:0d:95:94:c2:73:f0:4f:93:f3:13:84:e9:d0:cc:16:
a6:70:f3:4a:31:0c:b4:1a:17:3b:05:a1:48:c8:5d:c0:70:2e:
0e:53:b8:7d:43:72:96:92:e0:f9:c5:ca:01:ce:3c:f2:e1:c5:
87:31:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:24 2025 by rpki-client