Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: Pm6fP/2RzuT7JPV00eO+7BH9L8vypjKP+0Kk7psuo/4=
Subject key identifier: B5:63:30:C2:7D:2F:62:45:97:C2:9B:88:BE:2F:E5:BB:0C:B3:C3:3F
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 019A0111633CB4AFE6C2467D1BC008F2C212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 064F
Signing time: Mon 20 Oct 2025 10:01:47 +0000
Manifest this update: Mon 20 Oct 2025 10:01:47 +0000
Manifest next update: Tue 21 Oct 2025 10:01:47 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: sw6gZAxoiqNetOA8lY6EQoNWlYlHPMUYN2I/lN/3uww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:63:3c:b4:af:e6:c2:46:7d:1b:c0:08:f2:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Oct 20 10:01:47 2025 GMT
Not After : Oct 21 10:01:47 2025 GMT
Subject: CN=b56330c27d2f624597c29b88be2fe5bb0cb3c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:72:f3:4c:63:b0:cc:fe:7b:7f:2e:1d:a7:
3f:ca:13:d3:91:72:a5:07:5b:6a:2e:0a:fa:5a:34:
a8:26:8b:72:a5:35:9b:27:a4:8b:73:0a:cb:6c:8a:
6d:3a:d3:75:3b:9f:7c:bc:bd:91:d7:a6:1e:cb:87:
54:98:a1:6d:f5:dc:52:70:eb:6f:07:e5:72:d8:52:
28:0e:a1:d3:4f:a4:ab:1a:2a:dd:ae:1d:b5:ea:0c:
a1:c8:63:0a:d5:a7:9e:6c:a5:47:70:df:01:7b:04:
0f:95:e2:e6:76:2d:1c:fa:f7:49:01:a5:fd:69:ce:
e7:f9:85:58:87:c2:32:c8:82:ab:49:5b:2c:15:9b:
10:a2:82:43:73:5d:15:7d:ad:f9:9a:28:a2:e8:66:
48:2a:7b:a5:84:be:2d:3b:89:ad:29:6b:83:f1:1f:
55:72:d2:8a:98:bb:f7:c1:89:cc:eb:4e:a8:35:fe:
ed:f4:aa:ec:d2:89:ad:cd:f1:be:e0:e5:08:0e:7c:
ed:6e:54:ab:9d:1d:d2:20:48:fd:63:d2:54:de:cb:
e5:ce:ae:9c:86:e7:83:22:6e:98:fa:95:53:6b:e7:
e6:81:8f:ac:23:5b:0b:1a:25:10:31:d6:74:85:28:
9e:2f:36:05:96:bc:12:15:19:b1:84:48:41:a1:fc:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:30:C2:7D:2F:62:45:97:C2:9B:88:BE:2F:E5:BB:0C:B3:C3:3F
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e1:69:ae:0b:0d:24:21:4a:22:a0:86:d1:76:1c:d8:c4:1d:
3f:f9:dd:45:1e:67:5c:81:1b:68:aa:00:31:e5:d0:a5:49:e4:
a1:0a:c2:ac:fe:5a:21:4e:c9:e8:49:95:13:99:a9:5f:d9:f4:
27:eb:cf:0d:0b:73:b8:b1:20:04:c9:53:93:29:24:23:d1:33:
5b:9e:06:76:6a:32:95:bc:15:a8:3b:17:0f:a0:2e:31:04:bd:
7e:f2:e2:53:c6:f2:e6:5d:86:7a:fe:93:20:f6:49:03:99:0f:
c0:a1:58:3b:aa:cc:fb:be:17:52:17:0c:74:15:ef:3e:8d:e1:
69:a7:85:85:24:0e:10:52:fa:79:6a:2c:d4:11:40:b8:54:99:
43:7b:6d:18:22:ba:e4:4f:fb:32:cf:7e:f6:1e:24:3a:aa:96:
78:97:90:0b:92:a5:d4:ae:32:e6:ad:d7:55:6e:89:53:53:f4:
a0:93:7c:b7:f7:b2:fd:ef:3b:be:f1:51:a8:92:33:1d:de:bc:
41:3e:41:d6:c0:e4:0b:55:21:dd:d1:c3:18:4f:10:4c:37:8e:
69:2a:8f:a5:0d:8b:ed:58:12:0f:82:14:5f:ea:9d:2a:c1:94:
23:14:05:3d:a8:79:6f:10:c7:c3:8a:69:b3:88:bd:42:12:6b:
e3:95:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:21 2025 by rpki-client