Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: X1FcDNN2Xn7wCRkB8lTxBLYl9ORVM5OGMI13JCTih8Q=
Subject key identifier: 00:D8:5B:CE:94:20:06:25:CB:D5:B5:74:57:DB:18:21:63:72:51:AF
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 0199CA590A4DA8E6DC83B8A9E0BA24034113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 15CE
Signing time: Thu 09 Oct 2025 19:00:56 +0000
Manifest this update: Thu 09 Oct 2025 19:00:56 +0000
Manifest next update: Fri 10 Oct 2025 19:00:56 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: 9i1+8YppgDL/wrvWFLUQJt1/UPcSl7zuQ+0VcZBkW2Q=)
2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:59:0a:4d:a8:e6:dc:83:b8:a9:e0:ba:24:03:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Oct 9 19:00:56 2025 GMT
Not After : Oct 10 19:00:56 2025 GMT
Subject: CN=00d85bce94200625cbd5b57457db1821637251af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:81:9b:3c:26:22:c2:e3:23:20:26:6f:96:
26:bd:06:ae:4d:b5:17:fb:8f:5d:7a:c9:e1:99:ab:
c8:c6:21:d4:f3:6c:b2:bb:df:e2:b0:2a:a8:fb:bb:
b5:2b:de:d6:29:60:0a:b7:45:3a:e9:0c:b1:e8:20:
49:4e:33:8f:a9:f3:48:29:1e:55:50:af:81:a5:d0:
3b:71:32:9d:53:b2:5a:ec:97:27:bb:72:e8:e4:19:
93:f2:e5:ec:12:44:c2:3f:87:56:c3:24:1a:5d:ee:
8c:9c:70:ef:1f:78:3f:5a:23:2a:6d:19:fe:25:f4:
ae:23:a8:51:c8:20:5d:3b:6b:05:12:21:0a:fd:eb:
f1:13:b7:2c:8a:57:2a:33:7d:1b:18:84:0d:2d:cd:
00:76:7a:d4:aa:b5:d7:ed:4b:47:7d:75:c9:2e:a7:
75:43:e5:ed:08:c8:97:8e:cf:74:60:e8:bb:bd:5e:
2e:94:39:51:77:01:be:0b:8c:d3:88:c1:bd:59:4a:
d9:fb:38:25:56:b6:9a:d4:76:ea:67:a4:85:74:bb:
ae:88:eb:81:a5:84:f1:0e:9a:0f:46:b7:85:0a:52:
69:a3:79:91:52:8a:49:14:f8:fe:1b:30:22:3b:cb:
94:34:86:99:b3:63:53:6c:fc:d6:ae:2c:49:00:a9:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:5B:CE:94:20:06:25:CB:D5:B5:74:57:DB:18:21:63:72:51:AF
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dc:e4:54:bc:41:65:6c:8c:c2:08:0b:7f:00:31:2c:f2:0e:
68:2f:dd:e1:ec:1b:0d:a0:d4:70:cc:11:25:51:b8:bb:35:ee:
d7:94:2b:2e:7a:14:35:ca:d1:02:37:46:d3:c4:c5:0e:e1:0d:
61:21:85:b9:fd:f7:97:f5:b8:8a:0b:c6:47:98:94:73:37:ee:
c9:c8:d6:34:f1:68:1c:f8:19:fa:cd:0e:98:19:d9:4a:39:28:
fc:d0:05:db:5d:a8:b4:0d:cd:5c:c0:ed:41:dd:9f:e6:8f:de:
a7:7e:25:ea:22:4b:23:f7:ca:a6:27:4b:41:ba:ae:61:29:57:
41:95:5b:de:e3:ea:fd:f2:e3:80:65:d2:d0:e1:f1:c1:be:a0:
ee:62:a0:09:cc:ce:09:37:16:c6:bc:ec:1d:fe:89:b1:96:a5:
0c:ad:1f:e7:14:db:e3:e9:a8:1f:d4:76:07:91:17:c6:c2:ec:
81:56:31:1c:07:36:f9:d4:d7:65:f7:c0:8f:3f:e6:96:39:07:
74:ec:7f:4e:8a:60:c0:39:6e:65:86:b1:fa:d9:c5:90:32:0c:
fd:22:5d:dd:b3:74:6d:78:3b:dd:22:e8:08:9f:ec:8b:69:01:
53:04:f3:7d:d2:b0:93:a9:c8:f3:af:e1:e0:5f:26:53:7e:c4:
e6:91:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 04:02:49 2025 by rpki-client