Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: 16TdTV5aub8j1fdYOQbzxKTuOwkgx5vzqmtCU6eeGHo=
Subject key identifier: 6D:A6:A3:34:D9:6E:50:1C:C5:CA:C8:44:10:AF:8E:C3:3C:25:7E:FD
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 0199FDD8F06CC778C508E04AC53CFA95B68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0D87
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: b0j5cRZwSGedy7uSA+kRnwbnPivRsJiilTZLOThEyXg=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f0:6c:c7:78:c5:08:e0:4a:c5:3c:fa:95:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=6da6a334d96e501cc5cac84410af8ec33c257efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:6b:0e:93:4b:f5:da:fc:cd:9a:f9:ea:21:
75:f1:c1:75:c1:72:e2:0c:21:93:fc:18:d4:e6:37:
57:47:7c:2e:0c:ac:f7:54:88:17:75:8a:c9:ad:25:
e6:a8:6b:dd:f9:90:ad:48:ca:e3:a2:78:8a:eb:82:
26:4a:1e:7c:5b:e1:d2:b7:88:f6:4d:51:d2:b2:ed:
55:26:bb:8c:b4:c1:28:eb:7e:e7:0c:9e:46:41:4f:
e3:45:bc:2e:94:a0:93:60:c6:75:e8:8c:98:07:42:
42:10:b2:f4:53:d6:c8:f0:83:32:9d:fb:aa:93:84:
a7:ae:a4:2c:b8:0a:cf:0f:d8:b1:fb:ea:3f:4f:52:
47:17:7b:bf:dc:3d:80:20:52:39:2e:48:73:90:25:
b0:49:55:72:00:60:c4:14:34:73:7d:17:2d:7f:88:
38:78:84:b0:83:96:8e:3a:3b:b5:93:a1:c2:c8:1a:
bc:87:d4:6d:73:81:ce:22:50:34:a5:cd:e4:19:0c:
9c:1f:2e:5b:2b:74:a4:cf:88:f6:6b:7f:17:ee:a9:
17:8e:36:76:77:28:03:68:4d:b0:6f:42:2d:2b:72:
2d:ed:c6:d6:d7:d9:76:62:af:e0:1c:f4:ff:3e:e4:
5f:59:57:ec:7c:b7:ec:5e:ca:31:74:a1:79:3c:64:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:A3:34:D9:6E:50:1C:C5:CA:C8:44:10:AF:8E:C3:3C:25:7E:FD
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:af:7c:a3:fa:b6:ab:7b:d8:07:05:9b:5d:f9:56:c5:39:01:
2f:f0:94:be:ae:e4:7b:76:9d:9f:2a:3b:23:5c:30:1f:ca:2d:
68:c1:e5:fb:7e:4f:49:dc:e6:b7:ad:d2:d3:3f:f4:80:f9:ad:
c6:a6:4b:69:41:e2:56:51:ff:da:aa:52:32:dc:88:2a:d8:a0:
5d:4e:8c:c0:df:4c:52:04:ce:f8:dd:fa:55:fc:ac:e9:bb:f5:
bf:5d:b3:b8:33:a2:da:83:56:2b:20:b7:ad:ee:cd:29:ab:bb:
e5:12:d0:4f:34:4c:d4:6e:34:93:af:56:96:dd:81:25:e7:6b:
c9:92:b6:8f:53:61:7f:61:89:7f:57:fb:b2:b7:74:84:2a:c5:
f5:50:1b:4f:7a:91:52:f5:a8:ef:6c:b9:3b:c2:f9:ab:03:6d:
bd:c0:b5:cb:ce:7c:51:8e:2f:53:0f:75:0e:89:d4:8a:54:e2:
06:91:75:51:4d:06:91:fc:70:92:95:f8:cb:2b:7c:1d:b8:24:
cc:35:4f:a1:6b:6b:8e:5a:e1:b6:38:c3:9f:d4:f1:82:0f:ae:
d9:cb:25:03:2b:39:5d:68:04:34:66:fe:0f:b2:f7:65:4c:8e:
63:40:1f:38:1d:1b:37:7c:06:18:09:68:1e:f2:8f:20:f7:4c:
ee:96:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:37 2025 by rpki-client