
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: go3yDqzNB5uo0kxTlv9kt+gH2arhBJF5S9px7ig7/TA=
Subject key identifier: 0A:04:5B:FB:57:60:FD:63:3A:81:C4:19:A6:4C:13:A1:29:E7:C4:8C
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 0199FC58E7899ABBA08F574779FFC3198626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 0B58
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: ne1pfDEp+BI2K4Ai1SziwK1lCWXWWTpSTWAizv3xfCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e7:89:9a:bb:a0:8f:57:47:79:ff:c3:19:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=0a045bfb5760fd633a81c419a64c13a129e7c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:4e:b0:65:31:d5:74:07:db:de:b7:37:c0:
1d:46:30:6a:01:87:74:ca:a0:a2:eb:30:df:ba:7d:
ca:f7:09:50:de:c2:8d:fd:d6:e3:72:eb:12:c8:58:
32:db:90:d2:82:4e:2c:64:ac:98:db:6c:8e:ea:33:
e6:f7:b6:4a:23:51:f3:ab:9a:6d:b2:ef:06:83:c2:
38:3e:89:7f:a1:70:fe:64:bf:5e:df:d1:52:49:01:
31:ad:cd:62:f4:40:a2:49:f6:bc:1c:b8:b9:dd:91:
66:4f:1d:55:bc:bb:73:c9:61:4b:90:1c:6a:92:c3:
6a:7e:65:45:bf:f1:ba:19:b3:8f:28:30:d0:8f:4c:
87:44:3d:e7:95:bb:97:73:e5:e2:73:21:eb:00:cb:
f7:6b:29:de:ac:ad:ac:6f:24:f9:2b:9d:73:19:31:
57:b2:7f:3c:98:81:82:31:90:39:17:c5:aa:89:15:
de:8e:40:bc:ac:50:f1:35:5f:2e:a5:11:aa:d4:d2:
0c:c7:f2:c0:05:be:f3:33:b9:b9:bc:eb:d6:8f:8a:
ea:dc:8c:ac:af:33:b9:5e:1e:93:6e:39:66:2e:8f:
a6:07:a8:7b:3f:ea:13:0d:d0:82:6c:c2:d4:d5:08:
6d:22:ee:42:58:bd:53:2e:0e:5b:38:3f:14:41:be:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:5B:FB:57:60:FD:63:3A:81:C4:19:A6:4C:13:A1:29:E7:C4:8C
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:f2:07:ad:b9:01:86:a0:18:d8:98:35:33:26:c6:8d:70:
fa:08:f1:b5:7d:f6:42:0b:dd:04:70:2e:19:ac:a4:5b:69:bf:
d0:b1:84:bb:fa:a9:7c:41:17:ad:c2:46:b9:87:bd:84:7a:73:
0a:11:44:91:5f:8d:c1:be:cc:b0:b5:3c:54:d1:fc:9e:8c:1e:
68:c5:7c:68:ac:d1:16:90:e9:59:5d:e0:73:63:56:eb:8d:36:
40:e4:ad:58:f4:b6:98:77:41:75:6b:d6:2b:5a:88:db:fb:9d:
03:25:9e:44:69:6b:13:c8:4e:89:c5:9b:20:db:18:e8:89:72:
40:eb:9d:d8:3a:ec:8b:05:ce:e9:18:b8:97:dd:e2:52:87:67:
c5:4f:58:e3:4d:bd:7d:9f:67:9a:01:8f:de:23:46:ee:8d:f3:
b0:14:15:ee:e6:a0:78:28:4a:09:25:5e:80:7e:3b:ff:93:58:
37:e6:f1:f7:3d:3b:cc:90:3b:9d:b8:12:95:b5:27:11:5c:73:
57:19:3a:9f:8a:1d:09:12:71:4d:c4:2e:87:e7:b8:37:a5:c6:
1f:fb:76:9b:dc:d4:ce:5d:e8:14:43:79:38:7b:4a:eb:2b:61:
8f:89:19:fe:f3:4e:d4:1a:1a:e5:3c:3c:bf:8d:50:69:d2:ed:
57:d9:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:16 2025 by rpki-client