Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: uKqw2K/pUlF6SHbZwOAVSDSN+XBeoNstErLsbccryNo=
Subject key identifier: 6E:98:EF:9A:B0:F9:8A:9E:1F:DF:0B:38:8E:53:3C:B9:4D:CF:4B:33
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 019A71B8E5C6BBE88D546BD74807D024839A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 0608
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: jDRNdgC7SjyA0u9lrRYIDTkqamXR8Wmhoo5vSOa07dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e5:c6:bb:e8:8d:54:6b:d7:48:07:d0:24:83:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=6e98ef9ab0f98a9e1fdf0b388e533cb94dcf4b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:1b:0d:77:47:08:f3:27:df:2b:35:4e:5f:
04:8c:72:af:a5:15:4b:d2:92:4e:00:86:0a:87:1b:
1d:62:60:d7:ac:c7:f6:60:90:f2:bb:cd:88:e4:22:
ef:9b:f7:6e:20:cb:d7:77:8c:f5:ed:24:6f:b1:c8:
e7:03:64:9b:c5:7d:e7:16:ab:64:10:bc:1c:00:54:
b2:5a:c8:dc:f7:df:40:07:96:d7:f8:53:de:67:b7:
7c:72:c4:d1:26:9c:b8:96:9c:c1:e1:e1:76:d9:29:
7f:20:d1:df:8f:fa:02:40:0e:3f:94:f1:1b:5d:9f:
25:82:fa:2b:42:8f:c0:b5:c8:6d:13:4e:8c:7c:38:
d7:ef:ba:2b:3f:fa:e8:dc:4c:ef:00:ae:e3:45:0d:
1b:05:57:aa:88:c3:73:2e:24:64:a1:f9:a6:f7:66:
79:39:e5:35:90:fc:bc:bb:b2:98:7e:65:5a:39:bd:
a2:fd:73:32:64:4f:6d:c0:cc:a2:d7:12:c6:47:f7:
4f:71:4e:6b:94:8d:7f:f6:81:07:b3:65:8d:87:41:
91:40:10:f2:83:77:38:d2:8b:19:54:4b:dc:7b:d4:
14:63:03:c2:ed:b7:50:b1:a5:2c:d6:d0:6e:8b:17:
1f:92:21:8f:e5:dd:76:87:a2:32:fa:04:9f:c6:c9:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:98:EF:9A:B0:F9:8A:9E:1F:DF:0B:38:8E:53:3C:B9:4D:CF:4B:33
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:3a:49:05:33:69:c1:e1:3f:ea:17:6a:bb:b4:40:2a:98:
e8:fe:54:96:c0:3c:ab:ec:f3:a7:de:eb:6b:aa:a9:3b:29:5f:
6a:c8:9a:59:1d:e3:a8:51:34:8e:99:2f:32:41:cc:54:52:82:
83:64:b6:77:55:68:15:fe:c9:e1:79:5c:16:24:bb:b2:62:43:
51:39:17:8f:35:03:ac:f9:69:ff:7c:f8:32:d1:ca:f9:4c:19:
77:2a:28:15:df:43:e4:f4:7a:4a:3d:ed:c3:61:3a:49:70:bf:
33:11:ee:f2:da:83:30:f2:2c:4a:25:8d:ca:0f:36:92:c5:ef:
e0:1a:2d:f1:a6:ec:da:d8:29:6a:a3:22:60:ee:d1:2a:ca:b9:
c4:2d:1f:b5:83:6c:2c:73:61:7e:85:c8:f6:0d:a1:55:74:b5:
e8:9b:f5:c7:31:25:da:b2:4a:52:5f:56:2b:97:2c:06:ec:79:
6e:35:eb:4c:54:60:42:f1:90:18:b4:54:c3:c2:f9:d7:a7:e0:
8e:55:65:29:e8:c7:3b:12:d1:2b:d9:e9:98:d9:21:f7:d2:45:
74:bc:29:65:b0:b1:64:6a:52:aa:3f:f7:9f:4d:ea:4a:46:8c:
96:d0:ae:79:dc:51:f4:7a:0b:0d:85:d8:89:a3:4c:c5:93:f3:
1e:5f:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:40 2025 by rpki-client