Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: PkJNcoPYQ5NOG46i5YmrWrIo8IGJdKO3ks+FYwSO41k=
Subject key identifier: 24:04:7E:FD:4E:34:B5:24:8B:E6:A0:AE:E9:42:18:EA:22:00:6D:C8
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019A2667133C2CC8ACE525A7FC0CB678330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 16:01:20 +0000
Manifest this update: Mon 27 Oct 2025 16:01:20 +0000
Manifest next update: Tue 28 Oct 2025 16:01:20 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: nwMflO5FPBo5CsYJ259bN2v/+O1mfd+LNI5x2vx2ic8=)
2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:13:3c:2c:c8:ac:e5:25:a7:fc:0c:b6:78:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Oct 27 16:01:20 2025 GMT
Not After : Oct 28 16:01:20 2025 GMT
Subject: CN=24047efd4e34b5248be6a0aee94218ea22006dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:3f:2d:65:c1:65:21:f9:5f:72:17:87:e8:
30:c5:8b:87:c5:16:b3:9c:70:fb:2a:32:95:3f:7e:
c7:08:34:e5:61:88:8a:10:b6:95:e6:32:ca:3b:1d:
3d:fe:ad:a0:4e:2c:52:17:a4:8c:01:48:54:2b:9a:
53:de:50:b2:7b:67:14:df:b9:c7:2c:96:b4:21:16:
b0:53:0d:6d:bc:6a:65:c5:ff:81:18:8c:8a:4c:4d:
a3:68:cd:3a:96:9d:2d:d5:6e:97:42:e6:fd:65:3f:
f1:15:81:25:02:51:95:44:b8:ea:ba:d1:08:c1:e2:
db:00:15:00:27:fb:0a:11:e6:69:fd:ab:b5:e6:a3:
da:9d:a1:c8:c3:35:d6:d2:ce:bc:8e:fe:4d:b2:5d:
2c:3d:8f:2f:7a:06:d3:73:3d:18:9c:99:f0:b6:5b:
fb:7d:35:ed:88:51:f0:38:8d:19:f4:fa:a2:0f:14:
25:d0:94:67:72:18:0c:eb:6f:e0:bd:6f:4c:04:66:
85:0a:a3:b7:d5:1d:b8:b8:d9:8f:6c:a5:dc:75:9c:
94:3f:a3:c5:7b:17:93:7d:78:57:68:bb:39:6a:cf:
fb:67:0f:24:0c:d3:d3:31:15:a1:b3:85:b4:87:d3:
93:43:a3:09:3e:3e:35:cb:cd:67:e8:9b:38:d5:a2:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:7E:FD:4E:34:B5:24:8B:E6:A0:AE:E9:42:18:EA:22:00:6D:C8
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:22:44:0c:39:96:10:84:5e:fb:a3:ec:a4:2b:dd:f9:75:
35:ef:f4:c9:04:7b:1d:fd:75:03:b0:4b:63:e2:92:ba:e1:04:
53:d3:97:4f:54:99:c9:f9:ca:56:97:76:64:43:b8:00:0e:99:
cf:85:af:5c:ce:28:19:c9:7a:61:bc:7a:eb:82:39:90:af:f2:
32:33:f8:5b:59:70:9a:a8:82:5c:35:28:f3:e0:63:ac:cd:98:
dd:a6:8d:97:9f:f0:15:c4:97:44:df:e0:a8:81:3a:7c:f1:20:
b9:a6:5f:17:be:62:9b:38:c7:2a:25:ff:ec:82:b5:df:69:f8:
14:6e:7f:3a:cc:ed:e2:ff:16:d4:23:9c:2f:3f:51:68:6e:39:
00:b0:7c:c8:16:68:06:c3:b1:a0:90:a6:0b:4e:63:eb:40:b0:
27:94:cd:16:fc:fd:e8:83:57:35:3d:9d:fe:a4:c9:2e:32:e3:
97:76:a5:b2:95:c0:df:02:de:12:e3:eb:4e:e5:05:4a:7e:8e:
9e:de:b0:ab:ad:67:2e:ec:9b:1e:cb:68:31:c7:92:dd:5d:d5:
81:ba:b6:1b:80:ee:e1:70:bf:22:35:a6:e9:15:74:bd:13:8a:
c0:12:5e:d2:a8:67:cc:8a:27:09:aa:92:95:1e:47:d8:32:a8:
e9:2b:ed:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZxM8LMis5SWn/Ay2eDMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjUxMDI3MTYwMTIwWhcNMjUxMDI4MTYwMTIwWjAzMTEwLwYDVQQD
EygyNDA0N2VmZDRlMzRiNTI0OGJlNmEwYWVlOTQyMThlYTIyMDA2ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jg/LWXBZSH5X3IXh+gwxYuHxRaz
nHD7KjKVP37HCDTlYYiKELaV5jLKOx09/q2gTixSF6SMAUhUK5pT3lCye2cU37nH
LJa0IRawUw1tvGplxf+BGIyKTE2jaM06lp0t1W6XQub9ZT/xFYElAlGVRLjqutEI
weLbABUAJ/sKEeZp/au15qPanaHIwzXW0s68jv5Nsl0sPY8vegbTcz0YnJnwtlv7
fTXtiFHwOI0Z9PqiDxQl0JRnchgM62/gvW9MBGaFCqO31R24uNmPbKXcdZyUP6PF
exeTfXhXaLs5as/7Zw8kDNPTMRWhs4W0h9OTQ6MJPj41y81n6Js41aIUiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQEfv1ONLUki+agrulCGOoiAG3IMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8giRAw5
lhCEXvuj7KQr3fl1Ne/0yQR7Hf11A7BLY+KSuuEEU9OXT1SZyfnKVpd2ZEO4AA6Z
z4WvXM4oGcl6Ybx664I5kK/yMjP4W1lwmqiCXDUo8+BjrM2Y3aaNl5/wFcSXRN/g
qIE6fPEguaZfF75imzjHKiX/7IK132n4FG5/Oszt4v8W1COcLz9RaG45ALB8yBZo
BsOxoJCmC05j60CwJ5TNFvz96INXNT2d/qTJLjLjl3alspXA3wLeEuPrTuUFSn6O
nt6wq61nLuybHstoMceS3V3Vgbq2G4Du4XC/IjWm6RV0vROKwBJe0qhnzIonCaqS
lR5H2DKo6SvtCQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:11:08 2025 by rpki-client