Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: Gib7pedMGzx1xsmUQxUnx8zUlxncDgtJK315VXVX/ZE=
Subject key identifier: 59:A8:80:AE:FC:46:46:10:80:5E:36:2C:28:81:0E:DA:DC:5B:86:3E
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0199FB0F242BD3EE6A3E907EE23EB73CA30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0BD6
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: XjDyyxi7TH2T1HA2JuBPUQC0hetuYTp3M03frOnXxug=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:24:2b:d3:ee:6a:3e:90:7e:e2:3e:b7:3c:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=59a880aefc464610805e362c28810edadc5b863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:07:aa:2c:ce:4c:f6:48:df:fb:35:ab:64:
0d:e7:0f:08:e6:38:37:83:e0:a9:2c:c8:38:c4:4a:
b4:4d:09:62:e0:d3:5f:ad:73:6c:78:c1:88:9b:7c:
0b:be:f0:85:b4:12:ed:49:53:95:6d:2d:be:15:c5:
27:12:f0:5f:87:8d:ee:29:ff:25:7a:c3:d7:12:4b:
c3:95:88:bb:77:97:d7:c9:0c:d1:6a:0c:a9:a1:81:
1f:f0:85:d6:c4:6d:e0:b9:6d:71:77:b7:85:a5:c2:
87:f1:70:37:4a:1b:9d:19:ae:7a:6c:a9:56:00:f2:
13:1a:49:5a:0d:19:10:c0:de:90:88:78:21:b3:36:
64:e3:80:e9:db:07:63:05:c2:5f:a4:e4:e1:1c:d4:
66:8b:9d:bf:79:3a:18:53:03:1b:50:36:e2:91:07:
ab:af:b2:d0:c3:d6:a3:50:2b:9e:8b:7f:f3:a3:08:
d0:b7:79:43:d5:21:f1:ba:84:ce:cb:72:92:e1:f0:
06:8c:b8:fe:16:03:4c:7f:16:7d:7f:b8:22:fc:0f:
78:1a:10:96:b7:8a:b4:4d:83:ba:b7:2f:4d:6e:32:
bc:6a:d8:d1:f5:81:1b:e0:eb:5c:16:03:77:a2:0c:
19:6d:a3:83:17:2f:7c:ad:bb:93:bb:12:85:be:55:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:80:AE:FC:46:46:10:80:5E:36:2C:28:81:0E:DA:DC:5B:86:3E
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:50:79:a5:e7:86:3a:e7:34:ed:02:5d:0e:c8:2b:37:0e:
ea:c5:c3:80:cb:f3:61:c4:26:12:9c:54:eb:56:a0:40:99:e8:
2c:a2:19:b3:0d:ae:60:71:72:60:99:a2:a3:67:b6:b2:ba:be:
93:71:dd:1a:b4:5f:80:70:a3:b7:d9:e1:49:99:36:ec:08:5a:
e4:76:fe:14:b9:d4:5b:d4:a8:7b:a7:65:13:f4:bd:ca:da:05:
1c:d0:0c:b6:1a:53:ce:37:4a:f6:78:fd:7b:f2:ff:6a:a8:35:
f9:20:aa:f6:56:38:e8:a2:22:01:3d:99:ee:92:e4:60:97:4d:
21:9a:7f:78:68:8f:85:73:38:ad:c3:ed:46:dc:5a:57:95:07:
02:4e:76:13:2a:bb:64:2b:71:0f:90:1f:bc:5d:9b:f4:31:bc:
db:ed:54:65:4c:5d:7f:63:ac:f1:a0:be:e9:1c:19:d5:21:4d:
1b:6f:4e:c8:9f:41:96:59:d1:4a:49:d0:20:02:64:16:59:71:
d3:39:a6:88:55:82:c1:b1:57:16:1b:f7:17:18:b9:e1:d6:bb:
e4:94:4d:74:b7:29:ce:fa:80:d6:08:58:8b:be:be:09:59:e8:
ac:00:5a:e2:31:84:05:49:76:47:44:05:a5:76:2b:6f:7a:45:
c1:f4:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:22 2025 by rpki-client