Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: cGgByvaYCN0VeS1gUP2k+0jvROUJYYjhMjELbaHpc/c=
Subject key identifier: 7F:B3:5A:BE:E0:0D:34:BC:0C:93:CF:E5:B6:6D:AE:B5:84:8F:51:12
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 019A42B959E251D2B945311FA6025B4297B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 1707
Signing time: Sun 02 Nov 2025 04:00:34 +0000
Manifest this update: Sun 02 Nov 2025 04:00:34 +0000
Manifest next update: Mon 03 Nov 2025 04:00:34 +0000
Files and hashes: 1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=)
2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: AI9maFPZKgefJMKqzQkx/mop3oletuD8aiZjbGMEwTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:b9:59:e2:51:d2:b9:45:31:1f:a6:02:5b:42:97:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Nov 2 04:00:34 2025 GMT
Not After : Nov 3 04:00:34 2025 GMT
Subject: CN=7fb35abee00d34bc0c93cfe5b66daeb5848f5112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:62:75:0a:ec:75:70:ca:7a:06:d1:84:be:
d2:58:cd:2f:89:42:1e:4b:23:60:16:1c:0b:d0:0f:
09:bb:3d:19:67:6a:5e:63:0e:18:38:11:fa:b0:e3:
ae:86:d6:e6:52:15:f6:c5:b2:80:8a:8c:04:c8:1f:
d8:09:95:3f:8a:00:93:c9:73:d5:be:c7:c9:97:2a:
71:24:89:f0:5f:45:3c:ad:e5:5c:f2:44:64:4b:06:
37:a6:a4:2e:4e:08:5c:ef:71:85:58:a8:5f:fc:50:
78:8e:63:33:ce:35:73:43:e7:d9:b1:f5:7a:87:96:
4c:ad:3c:8e:b2:82:2a:c5:95:5d:83:e1:9e:a9:e1:
35:29:8d:c3:47:43:c2:86:4f:9e:46:40:92:79:94:
58:4b:d3:a8:74:06:5d:5e:d6:e9:0d:48:09:15:8c:
83:51:49:81:55:0d:a0:bc:ee:89:fc:da:be:87:07:
65:42:da:06:3c:25:17:11:0b:9e:51:f0:cf:08:4b:
c1:b6:9d:ab:09:ce:43:dc:0e:ca:59:86:4f:41:20:
90:b2:32:2f:c4:ee:33:be:5e:ec:04:c5:ff:c8:dc:
db:6d:eb:6e:f1:06:23:a0:68:7d:0b:43:71:d6:45:
df:7b:7b:d0:af:ce:ee:fc:27:06:a4:05:67:e6:54:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:5A:BE:E0:0D:34:BC:0C:93:CF:E5:B6:6D:AE:B5:84:8F:51:12
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:e1:cf:85:0c:92:c1:e7:ac:2a:6a:88:70:fc:57:02:db:
fd:c9:cc:a0:ea:82:87:06:a3:43:6a:c6:8b:3e:c6:1a:79:38:
f5:04:27:ee:aa:1e:04:1d:c9:43:7f:04:96:52:4c:d4:8c:76:
8a:f4:c8:89:29:6c:62:15:df:5a:5e:3e:ee:63:72:20:60:82:
5b:da:05:fc:8e:a6:31:e3:e7:45:e2:8f:f2:c6:d9:67:ef:bc:
76:50:f4:46:e9:4b:7a:9d:a9:d8:43:f1:ca:f0:5f:94:eb:b0:
ce:b5:81:7b:e0:76:46:ff:06:fe:4a:94:61:3b:08:38:68:09:
b9:c3:2a:02:12:06:b2:c3:22:66:a1:f3:d7:12:1f:01:71:ac:
7f:0b:76:ba:8f:3f:e1:63:ad:1c:2d:0e:42:2f:8d:6d:c3:fb:
ad:ed:a0:e0:f1:91:44:68:64:b6:14:b6:52:1a:7d:65:44:e0:
fd:3b:6f:91:1c:e9:29:9b:96:ba:ac:75:69:af:e6:62:e8:2e:
7a:23:e9:d5:11:2c:bd:76:fe:a5:3f:c6:a1:bb:13:f5:37:63:
8b:0e:29:52:59:60:96:77:d0:33:aa:34:28:31:0c:7d:5f:2e:
0a:d5:db:73:3a:25:48:2b:08:6a:f8:5f:9c:88:42:b7:12:7d:
b9:0d:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:53:18 2025 by rpki-client