Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: N0W6RX46rGcLm2W3MZ08vsIUeeBwLBR9G4vXgXoCT0o=
Subject key identifier: 14:8A:EA:14:0C:67:AE:49:27:52:0D:04:8E:B9:DC:AD:75:2A:20:CA
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 019A2553F15C969C4143BC63B9131741F4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 0BA9
Signing time: Mon 27 Oct 2025 11:00:49 +0000
Manifest this update: Mon 27 Oct 2025 11:00:49 +0000
Manifest next update: Tue 28 Oct 2025 11:00:49 +0000
Files and hashes: 1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: rKTyxTLRcmNzO2Aw/vgeEjtJtpWY6ZbJ3lFWoFcIy3Q=)
2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:f1:5c:96:9c:41:43:bc:63:b9:13:17:41:f4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Oct 27 11:00:49 2025 GMT
Not After : Oct 28 11:00:49 2025 GMT
Subject: CN=148aea140c67ae4927520d048eb9dcad752a20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:00:96:07:07:13:8f:a1:65:75:bc:e6:ae:
ca:74:b9:92:2b:8b:cf:57:3e:e2:4e:b2:e8:37:2d:
95:ed:f2:ff:71:a2:23:13:d1:fa:1e:29:87:c5:92:
9d:f8:6d:2b:e6:5c:77:10:77:a5:3e:a0:3f:42:99:
ec:a5:af:5d:72:4c:ce:6a:95:0c:af:de:1b:b0:15:
aa:f4:29:c0:e6:2f:c0:36:15:49:3f:f3:b9:c4:d3:
fe:f7:49:fd:fe:e1:b9:0f:21:b4:1e:88:7d:08:99:
a9:54:2a:f2:25:84:c7:30:a8:a5:df:52:f3:f1:15:
ec:7f:01:4d:86:23:ef:5f:02:90:d3:74:f9:76:5b:
60:eb:f0:65:3d:c8:57:cf:20:7e:f9:8c:53:b6:35:
ae:7d:09:17:5a:82:6a:52:4a:90:20:98:97:0d:a1:
15:c8:5e:ba:1e:8e:4f:22:e6:a1:d8:b5:f1:68:0c:
ae:71:30:4b:cf:3e:de:f4:ed:ca:15:3c:6a:20:eb:
cb:63:8e:79:9f:2a:bb:8d:e9:e0:84:18:6c:52:d4:
d0:0f:3d:cf:a9:00:37:de:06:87:28:18:e0:3c:2e:
ee:aa:dc:31:2f:f0:74:65:c0:a1:ee:a2:39:cd:33:
86:df:ee:d2:de:24:ce:45:73:19:00:37:ac:7c:f8:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:EA:14:0C:67:AE:49:27:52:0D:04:8E:B9:DC:AD:75:2A:20:CA
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c0:37:36:6c:9d:af:d5:a2:38:20:f3:73:47:a6:9f:8a:8f:
1b:a4:3e:b6:56:c6:84:07:bd:36:23:8c:89:30:f5:e5:de:8e:
44:84:23:f2:d3:0f:ee:c0:3c:8a:8a:18:cf:83:77:5a:63:76:
c4:fa:29:ab:4c:f3:d5:13:18:e8:4b:3e:4c:e5:c2:b5:c9:79:
ff:67:09:09:c6:d3:e1:96:4a:34:83:f0:5c:89:c5:b7:87:8f:
5b:08:61:2a:61:dd:04:21:6c:6f:0e:0f:28:2c:5d:26:45:f1:
80:2e:19:5d:89:b7:71:88:89:4d:ae:d6:e5:1d:dd:57:fd:18:
1a:a4:c4:b2:0c:23:5b:ff:e8:32:90:4c:d8:2e:a5:cd:2e:22:
67:31:80:8a:36:4a:27:b2:5b:bc:c7:a3:d5:52:19:59:53:b7:
c6:26:32:bc:7c:18:f5:1a:ee:a3:a6:0b:1d:3c:b9:66:f4:c7:
3e:76:9a:31:e9:2a:dd:55:37:a5:e8:d8:7c:f5:d0:91:1d:9a:
9c:8f:cf:18:2f:9d:4c:4a:d9:48:0b:e7:61:d2:fc:55:f6:c3:
0b:3c:5f:94:20:b6:3b:27:d9:d6:e5:82:4b:7e:d5:84:a2:44:
23:a2:42:56:4b:24:bd:e6:f3:43:97:b0:da:e5:92:a7:82:b4:
7d:56:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:08:38 2025 by rpki-client