Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: +SCGmkQqM9VyPM1SKP61jTHtFj3tcOHu8y8sQdnuDHs=
Subject key identifier: 50:27:CA:32:F9:30:D3:83:6B:39:BC:29:60:10:18:91:62:17:35:CC
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 019A72261E55C290D558ADAAB24285F9D98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 154C
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: pjQ86Ine8acQUihD2wuQVqNCHC+LF/LnahpFaHLHBYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1e:55:c2:90:d5:58:ad:aa:b2:42:85:f9:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=5027ca32f930d3836b39bc2960101891621735cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:25:2a:8a:2c:59:86:8d:b9:88:94:09:bf:
f3:82:dd:39:9a:7b:ae:5b:81:6c:57:64:98:a3:4e:
1f:f7:4a:cf:e8:38:dd:5a:76:e3:e3:e4:77:15:4a:
a3:48:7f:27:b2:7d:e5:96:66:bb:ed:2c:96:67:8a:
54:19:77:14:15:ba:ce:8a:92:bf:3b:00:db:b0:e2:
df:73:74:4e:ca:90:7f:36:2f:1c:07:e1:6f:4d:a5:
45:16:a0:ae:41:19:03:ca:a4:19:d5:b9:e9:48:db:
f3:61:e7:07:5a:22:18:66:2c:1a:c3:83:16:5b:4b:
68:5a:8b:69:c7:9f:0a:b5:29:db:a4:83:ec:15:2d:
de:3a:2b:d4:f3:e0:67:99:77:08:32:41:10:54:49:
2c:1a:c0:b2:e4:f0:3d:48:a5:c9:3e:86:49:29:c0:
74:bd:2c:dd:18:c5:72:15:4f:dd:4c:a9:d4:bd:3a:
47:dc:6a:fc:92:51:95:da:6b:34:07:8b:ad:a9:d2:
c4:d9:59:f6:b1:5e:32:21:24:c8:82:13:54:bd:35:
46:8e:1c:fb:4b:7e:02:86:ba:3d:28:7c:2e:ad:bc:
bf:fe:af:af:a3:b1:9b:3e:4c:7c:90:37:39:b9:d8:
90:af:5d:87:f7:63:f1:7f:0d:e9:2d:56:6d:8a:12:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:CA:32:F9:30:D3:83:6B:39:BC:29:60:10:18:91:62:17:35:CC
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cc:15:84:9a:e8:eb:c2:d2:13:a7:c2:21:48:9d:f1:42:d8:
db:83:1e:92:7a:a9:70:04:4a:7e:6c:eb:02:71:34:09:2d:a8:
e3:fa:93:1a:b3:c2:2e:3c:55:a8:48:b4:54:41:ac:49:b4:08:
22:f5:27:d1:43:98:9e:9f:f2:6e:50:a6:bc:52:93:ad:d0:4c:
1b:a2:05:f7:24:88:01:88:b1:26:f4:08:72:38:ca:a5:b4:55:
45:3c:59:bb:da:a4:9c:f6:d6:9f:b3:d1:52:9b:a0:cf:70:cb:
3c:b2:d5:ea:62:8c:86:67:a1:36:ef:78:b0:f7:31:e0:79:e9:
53:7e:9b:26:5e:25:50:ee:f0:a3:8b:c6:b2:1b:24:64:e5:f3:
6d:1b:fd:50:f5:74:a3:7a:98:b7:63:a1:f5:60:2d:1e:e3:bc:
8f:aa:d6:1c:05:0b:8c:81:b8:fd:b9:17:27:5a:0a:24:a3:1a:
d6:81:c9:8c:84:e6:77:d7:69:04:c7:28:26:2f:b5:4f:fd:3d:
bb:10:8b:5d:70:6b:0a:3f:6e:9f:07:ef:4f:41:a6:48:d3:7b:
be:a3:ed:14:8d:0d:fe:32:40:c5:b9:19:81:94:eb:87:dc:76:
ee:b0:ff:58:fd:f7:2f:9e:52:b0:da:8b:91:56:78:3d:6a:72:
ed:cc:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:05 2025 by rpki-client