Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: PQ84GxynWiritAa6elqycFNJhIxGHIsoOHKYovgytbw=
Subject key identifier: 67:68:0C:70:8E:87:FB:22:CC:83:B4:8F:09:FC:BC:30:5F:97:AF:71
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 0199FC213E08DAE71E84BF4E9A2752AC3CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 01C7
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: nICYSmMG5mLJtXEzoqEHlZwHPqtav7j9r5yC/ZmOQDY=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3e:08:da:e7:1e:84:bf:4e:9a:27:52:ac:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=67680c708e87fb22cc83b48f09fcbc305f97af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:ba:bc:46:76:47:e4:51:f3:f7:1a:86:e1:
62:82:e9:48:db:4b:9c:f5:48:b1:85:4b:f8:df:fe:
f4:c9:46:3c:cb:ba:f9:1e:3b:53:cf:c2:81:4d:c8:
f4:8b:bd:c4:ae:10:07:71:f8:6d:39:97:4c:0f:17:
d7:1e:32:2a:c6:1a:35:ce:1b:22:35:ef:da:3d:7d:
7c:bb:86:a2:f5:c9:22:ce:77:85:6a:70:5b:57:37:
64:45:7d:2d:cf:01:7c:d1:c3:50:31:e4:6a:21:ff:
a9:15:05:79:83:10:15:da:7e:59:8f:60:fc:61:c4:
af:98:78:7b:49:84:a4:00:51:79:cd:ab:fe:d0:6c:
0f:b4:a7:ff:ec:54:e1:a1:68:1f:a4:da:b3:54:a0:
0c:79:5c:12:43:e2:b1:1a:6b:5a:7e:fa:20:df:f5:
e5:88:ce:7a:bb:5e:69:f4:dd:40:86:c7:82:c8:86:
74:8c:84:2f:3d:a4:5e:20:e8:41:2f:c0:a0:44:37:
c7:8c:ff:03:ac:62:0b:00:2a:c3:33:76:46:97:74:
4a:a4:09:e9:c1:a5:16:e4:cd:3b:16:1f:43:d6:0d:
aa:e8:3f:ec:d4:a0:98:24:36:2f:d9:9f:ee:77:56:
77:2c:70:48:81:52:5e:c8:74:59:30:e7:da:ec:88:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:0C:70:8E:87:FB:22:CC:83:B4:8F:09:FC:BC:30:5F:97:AF:71
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:38:7d:c5:01:6c:35:91:c1:64:69:40:9d:09:a7:6c:ed:
3b:47:1e:12:7d:d2:9f:7f:ad:ab:54:c6:d0:9e:d5:bb:e6:6e:
d2:22:b8:64:cd:e3:86:89:d7:46:09:15:78:d7:a2:aa:22:b4:
0c:94:c7:5f:f5:62:ee:7f:4b:e7:e5:97:ae:30:86:f1:30:b0:
92:23:bf:da:7c:17:7e:38:f5:cf:f7:de:28:07:f1:b7:92:8b:
32:99:54:bd:34:3b:8d:4f:44:d1:69:b0:12:06:8e:fa:c2:00:
6d:9d:58:07:38:8c:f3:e9:4d:be:9a:55:1f:39:15:cd:c0:58:
a4:9f:ce:74:74:e0:2c:08:4f:e4:3d:f4:62:c0:02:fb:88:c7:
46:b5:a2:50:da:67:5e:48:c5:68:dc:03:33:d6:c2:26:3e:e7:
ef:81:ad:07:ba:c0:f1:d3:93:28:2b:a1:67:b7:1a:bb:90:c2:
ab:dd:00:3b:51:95:75:55:30:d4:6c:b2:6e:43:34:b1:8b:d1:
34:52:6b:5a:af:a5:ef:92:7e:d6:8e:4d:08:4b:e4:9a:72:33:
91:e3:99:8b:0d:53:e5:f4:7c:82:0c:21:38:cb:b9:92:00:96:
ab:ae:0c:91:fc:c0:e8:ea:61:9d:8c:9c:85:b6:ac:8b:72:2f:
df:a5:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:53 2025 by rpki-client