Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: 1aEEWcrIhNwvGNiB6iw+4LPx121vDQUz09YX5Y5AbOg=
Subject key identifier: 46:11:1A:B7:7F:A4:98:92:50:53:40:11:38:34:C2:38:EC:AC:B1:68
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019A247835BA128BEFDAE439C08B5431CE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 163C
Signing time: Mon 27 Oct 2025 07:00:49 +0000
Manifest this update: Mon 27 Oct 2025 07:00:49 +0000
Manifest next update: Tue 28 Oct 2025 07:00:49 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: oauZJcF38mWYcDOhhKne8dkChyzWWZ8ZMpJMiMKFgyg=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:35:ba:12:8b:ef:da:e4:39:c0:8b:54:31:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Oct 27 07:00:49 2025 GMT
Not After : Oct 28 07:00:49 2025 GMT
Subject: CN=46111ab77fa49892505340113834c238ecacb168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:00:37:a7:14:fe:8a:f9:3c:fd:a0:87:f7:
86:df:45:9f:f5:96:51:ac:3f:59:d0:c7:cf:85:36:
0d:c0:e0:ff:d1:00:68:cf:da:07:5b:70:da:39:ec:
45:7f:c2:f0:12:6f:15:ad:aa:70:7d:84:ca:67:05:
8e:b4:3d:a4:16:b7:65:de:10:30:bb:84:25:6b:88:
83:ba:ce:b8:f9:3b:0e:fd:62:0c:e6:c4:ac:06:a3:
05:f8:e1:6a:c0:69:66:e0:2c:72:49:4c:b4:74:69:
e0:44:78:d0:cd:01:23:f7:7c:e4:ec:de:bd:75:a1:
f3:57:db:c5:de:07:80:60:30:87:41:0e:9f:67:39:
1d:d1:de:45:ff:1b:a7:9f:c9:71:75:12:a4:d5:8f:
1c:67:74:24:b3:fa:14:6c:a7:80:ba:67:7e:50:67:
2e:ca:8a:c9:cb:80:94:02:cc:99:21:03:e9:d0:28:
01:f5:75:70:7b:c1:19:a5:2d:e6:95:f8:1b:c3:89:
b3:f0:a4:a7:45:fa:b0:fb:65:74:39:e4:7e:36:ca:
98:5a:47:3d:3f:d7:9e:2e:7b:46:45:6e:be:ed:cb:
99:bf:aa:b3:5d:11:e4:e1:63:c4:0f:e8:2d:ae:4e:
ce:ad:fc:06:54:9a:e3:50:01:83:97:7e:cf:f3:22:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:1A:B7:7F:A4:98:92:50:53:40:11:38:34:C2:38:EC:AC:B1:68
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2f:b8:b8:3c:6a:4a:43:25:28:99:96:ea:4b:93:5b:5d:c8:
b9:07:06:c6:a4:4b:48:b0:57:0b:e4:07:21:05:67:3f:0c:5a:
4b:e0:8d:f8:ae:6b:6d:de:d3:4c:f1:fc:3c:ff:5e:87:ab:6b:
0a:66:0b:11:af:10:27:fa:51:08:f8:7a:2a:a4:ea:a2:67:32:
63:4e:5c:37:f6:ee:95:2a:a9:6d:44:40:f3:b6:7d:ec:c6:f8:
59:2c:b2:30:ea:9e:b4:f9:e4:e9:9e:af:24:61:9b:b9:fd:e0:
00:ad:32:95:5a:f3:a0:4d:66:ae:d2:aa:b5:7f:d7:44:01:bc:
f5:2a:4c:92:7a:28:9b:8a:81:39:cc:65:b3:c4:42:98:26:b9:
ba:29:2d:df:d5:dd:d5:78:11:58:0d:3f:d5:98:50:88:0b:ce:
a2:00:7a:c9:3d:e5:8d:eb:49:6b:22:2b:9a:18:5f:ab:d5:d1:
83:38:ef:50:16:b4:86:51:0d:ea:c7:3b:60:e5:0c:af:27:90:
76:02:ea:d1:cd:65:82:ae:13:d5:de:e9:4c:0d:31:31:9f:33:
09:e6:af:a0:d7:ad:de:e3:38:67:84:85:38:a9:60:70:af:dc:
e0:0b:27:0e:35:fb:40:77:73:a9:56:f3:2f:4d:d9:84:fc:e6:
e1:1e:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:26:39 2025 by rpki-client