Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: /ed5pjGEIfSxQrAfy0y7nox5vPFQ9ApJmhrebRyKTwQ=
Subject key identifier: 25:54:71:16:BD:4F:88:4D:49:43:EE:F8:70:A6:92:63:3D:8B:EA:AC
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019A1CBF3C44DFC73E2D46C1ECE3B770C323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0C1E
Signing time: Sat 25 Oct 2025 19:01:26 +0000
Manifest this update: Sat 25 Oct 2025 19:01:26 +0000
Manifest next update: Sun 26 Oct 2025 19:01:26 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: 1P6Y8E5LO0dzdvyLLYRbJbJpMGRZIPuQZGLsPwL0/20=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:3c:44:df:c7:3e:2d:46:c1:ec:e3:b7:70:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Oct 25 19:01:26 2025 GMT
Not After : Oct 26 19:01:26 2025 GMT
Subject: CN=25547116bd4f884d4943eef870a692633d8beaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:02:43:de:eb:a7:1e:cf:25:fb:14:ca:6c:
88:a7:aa:be:06:01:85:8e:e1:58:3d:b3:77:b1:c5:
5b:9c:ea:fb:64:c0:7e:d0:32:13:a5:87:48:bc:de:
58:61:36:a5:86:fa:0f:25:31:bc:d4:70:bb:b8:1a:
b3:d0:45:f6:6e:55:6c:22:87:dd:e3:fe:ee:cc:3d:
de:77:c5:23:e4:08:4a:0c:94:74:4c:aa:0e:22:08:
33:9b:39:a1:21:f2:45:d0:76:77:89:84:a3:8e:63:
7c:a1:db:94:24:d0:c6:ca:38:1b:7f:ac:3b:a9:ed:
59:a4:be:28:76:fb:82:a6:ac:6d:bc:fa:c1:46:19:
9b:30:88:ea:d8:c7:b3:b1:02:d8:5e:86:93:5b:78:
26:52:ce:60:c3:32:9f:e9:3d:25:b4:a6:5c:43:7e:
58:d9:0a:e3:a0:cc:ba:bf:cb:93:07:c0:11:9d:62:
22:bc:c2:7f:e2:d9:e5:20:78:6b:5c:f8:9b:35:a6:
8e:4c:3d:32:e2:10:83:95:5b:61:94:72:16:3e:ba:
72:da:20:42:c8:9e:13:23:61:8b:81:a9:cb:4d:e9:
c5:69:e5:1f:43:7d:63:05:c1:e6:24:8f:55:58:e2:
27:1c:a2:40:f4:f1:48:98:2d:ab:6c:0d:ea:b8:03:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:71:16:BD:4F:88:4D:49:43:EE:F8:70:A6:92:63:3D:8B:EA:AC
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f8:42:a8:19:e9:c5:ab:ff:51:53:68:5a:e4:13:e4:80:3d:
98:b6:bd:d9:6b:e8:10:5b:a8:e8:65:99:03:69:e9:7f:d0:a0:
b1:c2:59:20:6c:f8:59:fe:72:e6:6e:11:8d:27:4b:2e:9b:11:
e2:57:f8:c8:75:b8:79:fa:ed:9b:70:45:4b:81:2c:d7:28:07:
bc:fa:a4:da:74:a4:ce:6f:72:88:cf:24:ad:4d:dd:e3:0b:4a:
88:1d:f5:50:96:e6:ea:45:1e:01:8d:4c:6f:59:b6:15:0e:46:
7c:d2:76:56:e4:7a:bd:b5:35:7a:59:3f:ff:43:f2:0e:b1:04:
19:e3:a0:f0:e5:91:83:2f:cb:60:03:c3:c5:14:67:e0:66:52:
79:b1:56:92:d5:55:7f:6d:1e:e0:1a:b4:c7:d6:de:0f:5f:19:
18:65:a6:eb:6e:1d:48:cf:a0:01:57:26:fe:8f:fb:a7:c8:c0:
7e:e8:c6:a7:d9:ba:86:af:26:48:20:27:07:74:74:71:78:8c:
e5:58:de:f8:d6:07:3c:cd:05:1a:89:dc:c6:5d:62:6b:c9:ae:
9f:28:37:d2:86:c5:ec:ca:be:78:a5:c7:f1:7e:6a:ff:75:26:
16:d7:68:d9:1f:66:ee:f3:ce:28:3c:96:32:73:6b:15:a0:fd:
c9:b9:58:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvzxE38c+LUbB7OO3cMMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi
YTQ2MWEwHhcNMjUxMDI1MTkwMTI2WhcNMjUxMDI2MTkwMTI2WjAzMTEwLwYDVQQD
EygyNTU0NzExNmJkNGY4ODRkNDk0M2VlZjg3MGE2OTI2MzNkOGJlYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM4CQ97rpx7PJfsUymyIp6q+BgGF
juFYPbN3scVbnOr7ZMB+0DITpYdIvN5YYTalhvoPJTG81HC7uBqz0EX2blVsIofd
4/7uzD3ed8Uj5AhKDJR0TKoOIggzmzmhIfJF0HZ3iYSjjmN8oduUJNDGyjgbf6w7
qe1ZpL4odvuCpqxtvPrBRhmbMIjq2MezsQLYXoaTW3gmUs5gwzKf6T0ltKZcQ35Y
2QrjoMy6v8uTB8ARnWIivMJ/4tnlIHhrXPibNaaOTD0y4hCDlVthlHIWPrpy2iBC
yJ4TI2GLganLTenFaeUfQ31jBcHmJI9VWOInHKJA9PFImC2rbA3quAOF2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVUcRa9T4hNSUPu+HCmkmM9i+qsMB8GA1UdIwQY
MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt
OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl
LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/hCqBnp
xav/UVNoWuQT5IA9mLa92WvoEFuo6GWZA2npf9CgscJZIGz4Wf5y5m4RjSdLLpsR
4lf4yHW4efrtm3BFS4Es1ygHvPqk2nSkzm9yiM8krU3d4wtKiB31UJbm6kUeAY1M
b1m2FQ5GfNJ2VuR6vbU1elk//0PyDrEEGeOg8OWRgy/LYAPDxRRn4GZSebFWktVV
f20e4Bq0x9beD18ZGGWm624dSM+gAVcm/o/7p8jAfujGp9m6hq8mSCAnB3R0cXiM
5Vje+NYHPM0FGoncxl1ia8munyg30obF7Mq+eKXH8X5q/3UmFtdo2R9m7vPOKDyW
MnNrFaD9yblY0g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:42:21 2025 by rpki-client