Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: aP95XLnumAY8SSfLywXxqC175kNMIPnYaBKM6+Ovyi0=
Subject key identifier: 2F:66:09:FD:29:AB:A2:84:FB:71:F2:D9:DF:32:94:C6:73:49:7D:E7
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019A706E52C4C215DB18B933E2C0E99531BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 06C7
Signing time: Tue 11 Nov 2025 01:01:09 +0000
Manifest this update: Tue 11 Nov 2025 01:01:09 +0000
Manifest next update: Wed 12 Nov 2025 01:01:09 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: a8lWZZD4bXA28Aa9dmmTPlQ/X6kgPypvD+afHDMnQw0=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:52:c4:c2:15:db:18:b9:33:e2:c0:e9:95:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Nov 11 01:01:09 2025 GMT
Not After : Nov 12 01:01:09 2025 GMT
Subject: CN=2f6609fd29aba284fb71f2d9df3294c673497de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:10:17:35:e5:ef:73:54:44:2b:92:40:a7:
a7:9d:35:67:7a:19:70:62:70:22:3b:f0:01:db:7c:
ef:78:b9:bb:bf:5a:6e:66:79:26:52:99:82:cc:9a:
eb:b1:17:52:e6:2d:dc:17:e7:02:a2:71:67:1d:b4:
61:84:9b:c7:1c:c3:37:49:da:5e:68:6c:29:79:0d:
9b:72:c0:0b:94:3b:1d:6e:b7:4a:b9:2a:b0:2a:cd:
de:b3:61:50:41:6a:01:be:89:f0:31:c7:69:ca:a1:
2d:d3:3d:87:da:2a:e1:68:03:2e:dc:87:b3:12:ec:
33:41:3f:ee:fb:31:6a:0a:66:37:c6:d9:f0:13:8b:
c1:6b:20:76:7a:59:f6:e5:39:93:07:94:c7:65:68:
ba:63:f1:2c:87:11:a0:ba:16:83:50:26:84:e7:07:
7d:ef:b7:39:3d:87:f8:08:73:11:34:42:c2:aa:6c:
66:7f:b8:24:05:13:d8:85:f2:02:1d:03:9c:4a:39:
9a:89:b0:f2:3b:98:f4:a6:60:b5:bd:96:a4:ac:bc:
02:46:dd:09:7d:b7:de:40:63:39:f5:81:b0:63:9a:
a7:3b:cd:3e:3c:cb:c1:1b:f1:bb:7a:53:3c:4b:ae:
9a:e9:28:07:60:fa:72:d2:72:f4:c8:47:c6:de:4b:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:09:FD:29:AB:A2:84:FB:71:F2:D9:DF:32:94:C6:73:49:7D:E7
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:46:82:ba:e8:88:c6:db:a4:35:65:fb:1b:e1:87:46:a4:
42:4a:30:c2:cb:8c:0f:f9:34:54:ce:2a:77:e7:55:84:39:bb:
6c:b5:32:97:5a:5c:ab:6e:d7:fe:59:4a:8d:88:eb:3b:fd:12:
ca:d4:8d:8b:f7:37:c5:ea:74:ed:32:ea:cb:2f:93:0e:21:cf:
00:5d:82:87:ab:67:9d:2c:c9:aa:34:40:fb:fa:93:7b:ab:fa:
32:93:ab:70:9a:c3:d1:68:56:f8:38:d5:db:07:e8:05:4a:f2:
fa:cd:b3:de:e6:b0:c1:0e:ab:62:f3:4c:a5:57:02:eb:46:cf:
9d:3e:a5:24:36:d3:5d:b4:95:42:c6:17:85:d1:0f:f8:46:ae:
3d:2f:60:0d:02:da:60:7d:7b:22:d1:56:4c:58:9a:5c:af:2a:
73:08:02:4f:06:25:45:25:60:92:2d:d5:82:ba:fa:79:59:ec:
6d:a3:15:65:b3:43:59:1d:bc:4c:d6:71:c1:dd:58:99:14:b2:
af:a9:d9:6d:7a:35:aa:a6:ba:c6:8a:28:ee:0b:40:c5:0d:75:
52:cf:b9:d3:32:3a:12:f9:0d:f9:e3:36:13:6b:01:1d:32:2a:
75:f0:db:57:12:b6:30:3d:79:38:35:59:02:6d:a1:56:15:8b:
b9:45:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client