Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: vB3uySaw0ws/prgD/4u9I+iuKf+QWBl9uH/AKZUvrgw=
Subject key identifier: BF:9D:53:7E:0A:3F:74:BC:7A:AC:02:53:82:E5:B8:4B:E8:E0:DB:6C
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 0199FBB36ACDA2BF4DEC20DDDF50599D9A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 0F8F
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: WvHhXnSuylVym3XltiFSkJpzFSTyM/SwYMIJzlCLAAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6a:cd:a2:bf:4d:ec:20:dd:df:50:59:9d:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=bf9d537e0a3f74bc7aac025382e5b84be8e0db6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:21:78:8f:e1:e2:af:38:87:c5:33:ba:0f:
6f:e7:99:51:27:46:9d:ce:55:48:48:31:f9:bd:88:
3e:20:f1:8f:b9:cb:4d:de:e8:fc:68:2f:32:3f:ac:
91:06:81:8b:53:d0:71:04:84:c0:28:56:d6:e9:d9:
6e:66:39:9e:d3:60:84:67:dd:08:33:75:02:b4:a9:
8a:b2:95:8e:c8:90:a4:80:3a:3d:7a:a8:b2:34:11:
0c:c5:34:eb:8a:b0:5f:d7:9c:6d:b6:ea:b0:56:b8:
be:7d:61:43:f8:51:7e:09:cc:88:e3:3e:3a:82:d8:
d3:23:16:df:03:0e:15:68:88:66:8c:2b:c2:24:18:
d9:39:2a:a8:46:04:09:43:7d:07:5b:87:3e:08:1d:
1b:70:9d:f0:2c:5d:fa:b6:8f:fe:f2:e0:21:94:94:
af:f0:97:62:56:79:92:b8:bf:0e:16:10:7d:44:a3:
d0:7b:f8:22:3f:a2:e0:e4:02:ce:ad:5c:94:23:d5:
e4:5c:f3:21:ab:91:62:61:44:b4:54:37:7d:f8:9b:
cf:39:07:27:51:0a:54:3f:99:c9:68:b0:c8:60:c2:
7a:23:2c:72:d2:50:15:05:3e:b8:bd:1a:0c:50:32:
5f:28:f8:f7:3d:4d:57:5c:c8:ad:3d:e5:36:45:c0:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:53:7E:0A:3F:74:BC:7A:AC:02:53:82:E5:B8:4B:E8:E0:DB:6C
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:a8:5d:35:50:f7:63:c1:03:e9:a2:7a:24:2e:e9:ba:c9:
ce:cd:00:34:10:15:e0:d1:d6:1c:5e:fe:00:b9:f2:2e:ed:6f:
7d:c4:ef:67:5b:0c:9e:5b:54:80:7e:12:80:e7:99:0f:ad:4d:
10:88:de:b2:4c:8b:1d:46:41:5b:1e:b7:71:9b:d4:08:e0:6e:
80:74:b8:77:5f:7e:b0:4a:8c:3e:79:87:f3:0c:9b:fd:20:fa:
14:39:99:9a:3e:fc:ab:dc:c8:3d:28:3b:ec:ba:7b:53:45:ac:
7b:60:05:a6:28:fc:d6:c5:b8:5d:38:32:81:f3:e1:6a:27:0a:
81:f6:a5:78:8e:88:58:df:f2:00:85:93:05:bc:ee:19:74:01:
f1:3b:c0:f4:f2:40:f4:4f:69:6a:f7:d1:6d:17:d8:a9:8d:ef:
8d:26:25:35:81:68:c2:25:05:9c:55:c2:de:48:10:97:73:84:
4b:a4:e5:12:4e:8d:d6:48:0d:8e:b1:ea:72:b6:9a:77:99:59:
b7:01:99:d1:2c:ce:ba:4d:ae:a8:61:3f:b9:4a:68:0c:9b:18:
f7:de:0b:a8:ba:1f:d2:e1:06:36:93:4d:80:27:94:23:8c:f0:
41:bb:0d:c1:ec:b3:98:e8:95:db:4b:de:dd:bb:59:e7:93:5d:
d2:f6:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:16 2025 by rpki-client