Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: Nof0ETzYUfeNS0aorublQEA85dDORC8B7L3KcgjC4qw=
Subject key identifier: 91:9C:12:7D:08:FC:22:8A:14:A1:3F:17:47:6F:6C:D3:DF:8F:C0:38
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 0199FD340F5BDBFE49EA31DA16B33F0B1470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 10D4
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: q4/VclrGqs5RSaw0tD7JZYiaSKSlG59FtBYPGu/WXoo=)
2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0f:5b:db:fe:49:ea:31:da:16:b3:3f:0b:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=919c127d08fc228a14a13f17476f6cd3df8fc038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:a2:40:f8:7c:7d:d5:54:de:3d:20:4d:da:
ba:e3:f4:08:65:85:74:60:a6:de:73:da:84:fc:28:
62:67:11:81:10:97:3d:72:64:0e:d3:28:a6:ee:1c:
f6:c4:07:ca:0e:fc:ac:0d:17:9d:31:81:04:d2:c9:
86:3d:94:96:6a:2d:75:e4:49:74:77:7d:8d:c6:8f:
14:e5:2f:cb:d4:80:1d:3a:dc:3e:4f:a0:60:79:24:
af:8c:5c:2d:cd:c3:ed:23:9d:c0:3c:82:7b:81:72:
81:ec:4a:81:c1:65:a2:4c:a9:04:58:b1:a1:2c:de:
25:29:1d:1e:f2:3c:b7:24:51:66:c3:68:db:7e:97:
dc:fc:11:dd:5f:c3:2e:05:10:f8:85:61:9e:4f:69:
a8:3b:66:9b:c2:fb:8c:57:3c:51:d6:e6:30:10:e8:
0a:23:c2:d3:ad:27:49:75:83:b4:e1:68:43:80:d8:
7e:8c:18:e6:6c:74:72:89:8c:b5:70:d7:0a:34:43:
56:77:5e:c0:a5:2e:72:39:8f:3e:f1:1b:99:6d:23:
52:01:c2:bb:ae:67:60:fb:2e:1e:6b:65:bb:1b:d2:
df:28:3a:0e:ae:ac:c2:40:72:43:8f:d7:a2:88:bc:
af:cd:36:62:e3:20:b4:4b:fe:00:19:5d:34:6c:a0:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:12:7D:08:FC:22:8A:14:A1:3F:17:47:6F:6C:D3:DF:8F:C0:38
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:bf:1c:7c:56:24:cf:47:1a:fc:03:27:48:da:aa:74:bd:
cf:a6:9f:3d:a8:21:8c:7d:81:23:9e:18:de:d9:51:a8:4e:d9:
e8:76:08:72:9f:e1:39:16:f9:79:ba:19:a9:1e:13:5d:34:76:
c8:cb:4d:3d:25:ed:98:2c:33:5c:d5:85:db:31:f6:bc:1f:db:
71:18:be:b5:87:d9:62:81:df:21:0d:47:fa:17:7e:47:92:d7:
38:2e:99:de:1c:04:f8:03:e3:91:11:f5:55:a5:d1:33:ad:78:
31:2b:8a:b3:77:3a:0f:40:70:f5:73:44:c1:27:4a:fa:17:1a:
69:0d:36:b4:17:7b:4a:f7:a6:3b:dd:ad:0c:38:c7:cf:96:1d:
d4:b9:36:b8:7e:70:99:6b:83:80:1b:42:5a:99:24:34:3e:a0:
5e:e6:d8:c8:59:cf:86:78:c9:f3:16:94:ab:5a:a3:93:37:42:
81:18:3e:23:5c:02:44:ae:fa:4c:22:46:ea:f8:93:3c:24:f3:
8c:20:71:de:b5:78:c0:d0:f3:2d:d1:99:f8:cf:2a:23:b5:26:
ad:26:4f:b3:95:e0:e5:f0:6f:e6:f4:4e:ea:22:d6:5e:fb:7f:
56:b6:ad:6b:5d:e4:4a:e9:cd:73:46:df:17:7e:64:e8:6a:08:
51:07:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:01 2025 by rpki-client