Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: NaQzROw7GFhw1rqlzAR7yfuA4oPqDdmhwGiz2N+57Bc=
Subject key identifier: A6:11:AF:FD:C1:76:2B:CE:A7:1A:B3:B9:B1:10:19:6E:05:C8:F0:C5
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 0199FC8F41F25B4B8AB655550EAEBF93EE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 15E8
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: Y3/ztrczGpC2Yq+W9W/MArNLH/yZ5UXN6RsqUNDp11Y=)
2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:f2:5b:4b:8a:b6:55:55:0e:ae:bf:93:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=a611affdc1762bcea71ab3b9b110196e05c8f0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:62:25:f2:60:f4:29:63:cf:87:3a:32:63:
74:32:e9:6d:b2:7d:b8:44:0b:5f:ef:6d:80:e2:fc:
0c:50:be:50:a1:9a:33:ec:8a:c0:e5:a6:29:06:08:
37:96:a5:d5:14:d0:37:1a:3d:75:e8:79:a7:c0:6a:
42:41:ba:38:b2:16:75:66:0f:0a:93:f9:0f:8f:a3:
71:ee:f5:bc:51:86:05:df:2d:1d:f1:7e:ae:10:c5:
e4:80:55:64:9e:c4:23:e4:c5:a0:69:b4:b4:b8:5d:
cd:4d:f2:6f:d3:3d:ee:7a:30:3c:f0:c2:cd:44:c5:
16:3f:42:5c:39:4a:db:62:78:92:bd:c9:be:f2:ff:
64:e1:bf:2d:3a:3f:8d:7b:6d:8a:0c:c6:d1:72:03:
86:26:41:1e:24:a9:a6:54:33:f3:c2:a4:5d:d7:43:
9e:e5:81:f7:be:f1:5d:ec:a1:1c:aa:f6:51:df:27:
47:6d:5c:15:62:cc:c7:bf:72:6a:cc:25:08:0f:e6:
7f:af:05:75:df:14:1f:99:3e:e1:d0:f7:bb:07:f3:
29:20:05:87:4a:a8:c2:60:28:bd:b8:8c:21:3e:68:
ef:b0:8e:38:29:91:2f:e6:bb:3e:70:a1:8b:2d:43:
1b:94:49:31:a6:c0:fb:7a:89:b4:f0:91:76:6a:b0:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:AF:FD:C1:76:2B:CE:A7:1A:B3:B9:B1:10:19:6E:05:C8:F0:C5
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:da:61:bf:db:7c:73:d8:e8:e5:ac:19:2d:0b:b2:0c:c9:
ff:30:39:d1:6b:96:cf:41:ba:02:81:da:c3:03:2e:db:9c:59:
49:b1:b2:34:42:ac:6d:49:9b:91:7b:cb:50:7c:89:0b:d0:c7:
1b:25:18:70:e9:aa:f7:96:df:30:52:be:e3:7e:3a:e1:9c:2d:
8b:e9:83:5a:ac:3a:6d:8c:02:bf:b9:bf:15:fd:33:f1:93:95:
22:69:bf:8e:da:3a:93:cd:dd:64:76:34:5c:c6:79:3e:c3:18:
a0:ce:05:8c:31:a7:fa:97:85:c5:10:70:a4:50:54:ea:35:c1:
f7:38:be:68:65:51:b1:49:b7:d3:2f:59:74:1b:20:f2:18:a0:
34:0e:28:4e:fa:c9:9e:9d:ce:f4:d0:c1:3a:84:f0:e8:99:7a:
a9:e4:ab:3c:63:2b:b6:88:18:78:08:28:bd:9b:82:c9:30:cd:
2a:e4:b3:07:ed:5f:2a:af:9f:e2:22:ae:d6:0e:04:30:fd:e8:
d8:1e:ae:17:ba:99:1a:f1:ee:8e:40:a2:8a:75:19:24:f2:ef:
21:68:ed:77:01:2d:22:ce:06:92:32:1d:0f:af:d7:f5:d5:44:
8f:c4:3b:a2:79:5b:57:e1:fb:01:da:6e:ca:72:78:61:44:ee:
71:21:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:32 2025 by rpki-client