Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: 4fEB+lEZ6QjeGJpg/cAqcSXBSTvLD5UaMeLrEpqAp38=
Subject key identifier: 18:0D:32:71:F7:02:EA:D1:F9:D5:3C:A6:2B:B3:DF:82:D6:FC:C1:31
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 019923A0E76AE14982C3419142924CA941F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 03D4
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: HZReBQyYbkkyex8vZu34S7UuChBqUIbksAB6qfixHRE=)
2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e7:6a:e1:49:82:c3:41:91:42:92:4c:a9:41:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=180d3271f702ead1f9d53ca62bb3df82d6fcc131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:14:a0:a3:29:1b:c9:d5:91:e6:46:94:c8:
16:e6:fa:04:97:80:bd:9a:23:d1:85:ff:1a:27:75:
fe:a1:3b:c0:44:b7:79:a8:49:41:05:71:0a:9e:aa:
ef:ac:49:1d:f9:15:30:ac:5f:69:f4:d0:3b:3c:2e:
7c:0d:3d:b0:ff:d9:06:2c:89:6a:8d:1c:10:e6:4b:
06:ed:e0:3b:42:ce:94:4c:0b:84:66:dd:27:3f:1c:
56:14:8c:de:ea:8f:47:4c:87:e3:40:0a:2b:cf:2b:
ef:b8:6d:a7:ca:6e:cc:c2:1b:0f:ec:75:ae:da:f5:
7a:f8:c9:f4:85:7f:42:09:43:47:05:01:01:f2:1f:
02:15:53:a2:ef:60:e2:30:0f:03:09:91:c4:1b:89:
06:46:4a:2c:93:1b:3d:96:2f:29:a0:57:f6:3a:1b:
21:68:93:e6:6f:ec:c3:63:c0:7a:bf:96:77:61:10:
d9:78:b4:cf:49:83:0d:9d:07:9d:8a:06:03:61:d1:
d6:c1:35:4b:c1:6a:be:f6:28:cf:f6:65:58:68:af:
f8:63:dc:7e:b7:df:d4:44:68:33:b3:b0:bf:97:9a:
20:c5:71:31:35:ea:39:a4:23:1c:01:5d:a6:21:9a:
a9:af:84:46:a0:ec:95:5e:f2:4b:62:36:01:ec:19:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:32:71:F7:02:EA:D1:F9:D5:3C:A6:2B:B3:DF:82:D6:FC:C1:31
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c7:82:39:fb:2c:81:d3:d4:c1:a0:de:55:b8:14:b9:dd:b9:
59:ab:3e:c9:d6:d4:34:59:d0:e7:d1:90:53:11:9a:37:88:bd:
2f:a9:1f:7c:38:ca:99:1b:60:87:06:c1:1b:13:3d:2b:04:a6:
6a:63:62:a1:e1:fa:85:11:3e:de:07:c8:e6:ea:ca:23:a6:c9:
0c:9c:70:e3:34:f8:a3:f6:e4:b6:d4:f6:40:b8:aa:72:0c:0c:
61:82:f3:a6:53:b1:7b:b1:14:ac:09:82:24:a0:d5:2d:85:80:
1c:d5:2f:20:f7:15:dc:17:8a:93:12:96:b7:fe:c3:21:9d:40:
1f:30:f3:43:c0:a6:36:e9:c4:8d:45:46:20:61:d0:01:32:29:
ae:85:ba:d1:2a:f9:49:0c:b5:2e:e9:5d:73:d8:64:1b:0b:35:
3d:57:9c:09:29:ef:fd:48:8e:1d:c9:f6:aa:65:df:c1:91:91:
d5:66:8a:85:3c:3b:64:29:78:b2:9c:f5:b5:82:73:1f:1a:22:
47:82:7a:28:5c:e2:3d:c4:48:6b:26:de:19:fa:aa:d8:37:0e:
3d:b5:96:7e:fe:26:f5:a1:08:97:5d:1f:9b:c9:b4:b6:71:c2:
1d:3c:dd:6c:ba:9d:df:9e:37:24:4a:74:10:56:8c:c4:6c:fa:
32:0d:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client