Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File: aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier: J9sBhl51x35SIPWO4YflH/9nWvwojL9AAfKu8C/yUmo=
Subject key identifier: 07:0E:AC:61:8E:43:B6:AA:B3:C6:B9:19:C4:17:34:34:B8:28:89:0F
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 0199FBEA8F2157523090D5F252A79B32A1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: PK7BcrFS0l5bnlZ0HAf0zsv4dRI.roa (hash: X0DXQ3bBNCzCj3LUePAQk7Zy5NXqPrKEOx5dW7kBo5M=)
2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: NtrzfIOihynvtltBrDJVff1AHEsVn2XIvIVdGE+s7hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8f:21:57:52:30:90:d5:f2:52:a7:9b:32:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=070eac618e43b6aab3c6b919c4173434b828890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:9c:37:35:3d:7c:f2:4e:89:f8:d7:5a:b9:
57:0a:f6:08:3a:9e:6b:20:92:ec:c5:dc:71:07:36:
1c:08:7a:2c:b6:62:38:9a:09:d7:0d:52:39:c3:b5:
77:54:8f:c2:a8:75:94:1c:f7:fd:bf:16:a3:c0:8a:
d8:2c:df:4b:81:ea:37:97:d7:ef:d7:06:35:b5:6e:
f1:d4:d6:5b:05:aa:49:e2:dd:21:30:f9:41:47:fe:
bc:79:b6:a3:e7:b5:70:b1:0b:22:69:3a:cb:75:26:
99:d2:74:51:78:11:3f:c9:e6:98:91:32:7f:e7:f4:
14:1f:f1:af:46:3e:60:3f:ea:bc:2a:98:eb:2c:46:
f2:b0:f7:cd:1a:9d:d6:66:f4:e1:1c:30:8d:08:8f:
14:a3:9f:6d:be:f6:42:7e:cc:c0:ea:ed:27:8a:f1:
8e:1a:fd:07:d9:2f:0d:66:68:1c:9f:04:aa:ff:0a:
ee:ce:ad:d5:fd:df:30:4d:2d:e9:7d:8d:84:f3:10:
cd:43:11:ed:8e:07:ff:c7:b0:29:72:17:0d:60:10:
8e:e0:70:0d:f8:d4:c0:71:ba:c2:0c:5b:66:ac:3a:
5f:7d:03:a5:1d:f2:ad:b2:42:d6:82:dd:b9:a7:1d:
ce:34:28:8a:5d:39:0f:48:63:a1:4b:2f:e9:61:73:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:AC:61:8E:43:B6:AA:B3:C6:B9:19:C4:17:34:34:B8:28:89:0F
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bc:84:5d:a3:f7:dd:76:37:25:bf:b4:b4:5c:cf:22:81:68:
e9:50:55:0f:01:62:5f:68:ca:71:b5:25:d9:c7:5a:81:44:bf:
4c:ee:66:fe:f5:ae:b5:4a:0b:33:57:3d:31:71:c8:45:96:8e:
aa:ef:50:d8:48:dc:df:79:7f:7c:fd:98:5f:ea:fe:b7:7e:54:
1d:f2:89:28:a9:cc:dd:55:e2:2f:e4:b5:42:6f:19:cb:51:07:
b3:b7:38:95:77:9a:0d:2a:80:af:c8:9e:ab:36:f4:99:aa:db:
c1:15:3d:ca:a3:3d:1e:23:5f:0e:9b:7b:bc:ac:f7:e3:03:8b:
c4:dd:f3:c9:93:3e:d3:a5:8b:6d:bf:6d:4d:e4:08:12:8e:bd:
5c:38:b0:ea:73:f1:c7:8f:96:6f:13:6a:90:91:90:eb:6a:4c:
dd:14:7d:9f:03:75:32:05:f2:41:75:09:5b:4d:5d:79:9a:94:
8b:9e:22:82:fd:98:bb:91:cc:85:2a:1f:d7:a5:3b:5b:0a:aa:
8f:bf:d0:e2:ae:9b:fd:8d:f7:a8:0a:83:59:39:df:a2:fe:c4:
85:ef:21:dc:15:2c:d4:07:fc:4c:fa:26:96:87:3d:27:d5:0c:
38:a4:a6:2c:83:8d:5e:b8:f8:d4:1a:69:35:c7:94:15:0d:0d:
07:ff:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:13 2025 by rpki-client