Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: LCioDHMNJx6GdQLurxY9gZtJJJtUITjWpm+J6PaZg48=
Subject key identifier: 8A:C0:52:48:12:5C:8E:BC:09:0F:A7:DB:A0:16:12:C2:D8:11:91:BB
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 0199239EBE800C5438E72D273B2E79348D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0B9D
Signing time: Sun 07 Sep 2025 10:00:29 +0000
Manifest this update: Sun 07 Sep 2025 10:00:29 +0000
Manifest next update: Mon 08 Sep 2025 10:00:29 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: FXvm/uJmAqyCmlejUlxgTP2iOpeSW3KL6awW0Os5lOU=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:be:80:0c:54:38:e7:2d:27:3b:2e:79:34:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Sep 7 10:00:29 2025 GMT
Not After : Sep 8 10:00:29 2025 GMT
Subject: CN=8ac05248125c8ebc090fa7dba01612c2d81191bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:89:b0:b1:dc:82:fd:d3:03:1d:48:40:77:
94:56:66:d3:3a:09:9e:67:b8:49:16:91:1b:f7:d2:
14:65:8d:6b:9d:1e:4b:95:d6:da:ea:dc:f5:12:9d:
85:7b:ff:92:05:1f:b3:8e:b4:bb:62:75:dd:f3:6f:
d4:a1:a5:7c:00:60:21:ba:48:5a:12:d8:11:10:cc:
d1:bb:5d:38:32:08:94:30:3c:9b:d3:d8:5a:61:e4:
35:06:70:94:09:03:fa:3c:9c:0e:10:46:96:09:0a:
a2:43:6a:57:30:5d:2a:f6:68:c3:b1:5c:21:83:07:
c5:19:2d:4a:cc:fc:fd:ea:f4:c2:95:1c:69:35:d3:
4d:fb:8a:26:ac:bb:08:98:19:f7:78:c0:3e:fc:33:
99:d8:b6:7c:b0:99:ea:35:dd:77:75:35:4f:39:b8:
c0:56:0d:ec:58:9f:bd:17:10:dc:11:e0:a5:a0:4a:
aa:ba:1e:72:8a:04:ea:65:52:bc:97:df:b7:b9:a8:
12:18:97:3e:c4:15:83:db:b3:81:45:29:27:3b:c9:
05:44:70:56:40:76:7a:eb:6a:d1:5d:51:c4:f4:d5:
08:97:73:a2:e5:a9:a0:b9:0b:1b:cd:6d:af:36:fb:
b7:9e:f4:4e:6d:9e:08:5f:47:de:0a:43:18:b8:97:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:52:48:12:5C:8E:BC:09:0F:A7:DB:A0:16:12:C2:D8:11:91:BB
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ed:f4:ac:5f:d5:b0:fa:38:62:f7:fe:97:e8:99:40:98:59:
56:2d:5a:75:3d:85:4a:21:0f:b7:cf:66:62:1d:52:67:19:50:
3f:30:86:22:64:69:3e:e0:a2:b9:47:a6:89:12:d2:7a:1c:5f:
ca:11:aa:bc:44:12:0c:ac:1a:cf:9e:b2:e4:a6:1e:13:ab:b9:
dd:49:49:d7:7e:66:46:3f:0e:d1:04:86:c6:f5:cd:ab:f3:fa:
bc:2a:75:f4:39:5a:ba:56:45:3f:35:60:e4:c8:72:8c:a3:5e:
98:13:e9:5b:73:94:d5:78:b6:78:cf:3d:d0:45:31:12:e8:dc:
f8:57:1c:58:b0:c6:51:7d:17:38:41:ae:5a:e6:77:79:13:16:
f9:67:2e:60:97:1e:d7:0c:05:93:8c:4c:26:b5:57:d5:cd:8b:
1a:4f:e2:31:f8:b4:84:e0:3d:42:ed:ef:c4:40:f6:05:e3:23:
49:e6:17:04:b5:59:a5:c6:68:b2:2f:60:d4:b6:fb:c8:b2:e0:
cb:d0:43:09:d7:5a:26:f2:98:9f:09:56:7b:af:6f:58:4e:c7:
0b:83:c5:25:95:ef:8f:f2:b4:5f:ea:a0:9d:03:ef:23:a5:4a:
1b:80:25:55:39:08:cf:24:10:23:3f:a2:b8:be:36:25:b8:09:
8d:97:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:23:07 2025 by rpki-client