Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: 1YfEPtsif/D1ls8CAXuOsxs8/3q6BUkf4L3pZMFnnCM=
Subject key identifier: 05:CF:BE:DC:0B:C6:8A:FA:85:85:A8:FA:1F:C9:FE:81:30:F0:DD:05
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 0199FFC751B9363D43DA589EF0650E8C8E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0D58
Signing time: Mon 20 Oct 2025 04:01:16 +0000
Manifest this update: Mon 20 Oct 2025 04:01:16 +0000
Manifest next update: Tue 21 Oct 2025 04:01:16 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: sVNeQt2m0wYPxpmupZereRl1xbtN8zC5v9xXLkfU8jw=)
2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:51:b9:36:3d:43:da:58:9e:f0:65:0e:8c:8e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Oct 20 04:01:16 2025 GMT
Not After : Oct 21 04:01:16 2025 GMT
Subject: CN=05cfbedc0bc68afa8585a8fa1fc9fe8130f0dd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:29:81:d2:9b:a8:2e:d2:bd:09:da:ad:eb:
0a:40:8b:ee:fe:db:6e:8c:40:7c:5e:5c:fb:ba:6f:
6f:f4:d9:83:bf:bb:24:20:16:1e:00:dd:de:7d:b5:
8a:3e:99:e2:f3:0d:5c:26:29:78:2c:a4:b9:70:70:
3b:4b:0c:0f:9b:e4:7e:7c:43:24:57:66:2f:ac:bf:
7e:0d:a4:90:d0:3c:86:65:c0:4a:42:0c:a3:0e:6c:
fa:1c:84:75:7b:25:5a:17:96:8c:61:3b:fe:62:fe:
5a:45:53:5d:71:21:2e:1e:34:6e:5a:7e:de:6c:f7:
5d:b5:c7:02:6d:a5:41:1d:5b:4b:fc:64:ef:fd:83:
ee:80:05:a3:d7:e6:58:92:b6:ca:63:02:e3:30:c5:
1e:36:cd:38:5d:5f:c7:0d:f3:66:f2:8c:64:db:07:
35:f3:b1:27:15:2d:2c:90:d8:f8:e8:ff:48:f3:a1:
0a:12:3a:5e:50:4f:0d:6b:5f:9d:8e:b0:16:0b:88:
44:d0:c9:d0:11:33:b3:07:09:34:d2:e6:7f:70:88:
96:13:7b:9a:c2:de:c9:a3:eb:4b:2c:fc:a6:9f:df:
37:a8:ab:d1:d2:6a:cc:26:c2:d6:d7:86:8c:81:67:
33:2d:9e:14:5d:c3:1c:35:9f:ab:c3:71:fc:25:31:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CF:BE:DC:0B:C6:8A:FA:85:85:A8:FA:1F:C9:FE:81:30:F0:DD:05
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:b6:d7:40:d4:6b:21:cb:8c:6c:fc:1d:39:07:98:43:7e:
3b:c0:bb:2f:b7:95:ee:a8:c4:18:89:69:65:99:ac:2d:ee:47:
68:75:10:83:7a:96:08:7c:6b:1e:94:a5:4b:52:fc:cd:df:34:
60:36:16:f3:b9:26:17:dd:e7:3f:1e:26:8e:23:16:c8:0d:0a:
cc:fa:71:8e:f0:89:ac:f0:bf:49:93:47:1b:86:b5:03:24:2c:
5f:e6:1c:f3:e6:53:b9:b1:43:78:8f:a1:b9:cc:59:17:93:9d:
3c:ff:b9:ad:17:2d:17:f3:43:e4:6f:5f:f2:f1:54:ff:f4:a3:
30:71:24:1c:46:db:88:14:fa:f5:26:00:cf:13:8e:95:75:ca:
d0:b5:2e:62:6b:f3:ac:5c:f8:64:40:a0:69:5c:f6:56:6c:f5:
21:bf:a9:c9:1a:09:42:08:d7:e9:3c:5f:34:64:59:12:e3:6f:
20:cb:23:ea:0e:bd:ac:31:3d:d7:e6:12:f7:3d:34:0d:0e:f9:
c1:83:ab:7f:13:a8:4a:38:80:84:38:d7:ec:88:20:e7:9a:5b:
b6:3c:61:f9:21:0a:84:05:03:13:5e:ed:da:b3:e9:c7:8a:1c:
e3:09:25:d5:cd:ca:24:f5:a0:11:ea:23:90:7c:44:46:d8:7d:
37:7a:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:17 2025 by rpki-client