Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: uoafaE0Oz75rltC0k16pEkcyV8pTZaoUePVfC+yvSlc=
Subject key identifier: C6:26:7C:82:CA:64:21:FD:3D:79:D3:EC:88:4F:57:0A:F1:B9:40:9D
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 019A71B8E20DE87209CCA9DFD618A971E916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 085F
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: eehLEf8la4PyYPqJaM2Ro5SnLRd/7FCmGIDbubP5UP8=)
2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:0d:e8:72:09:cc:a9:df:d6:18:a9:71:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=c6267c82ca6421fd3d79d3ec884f570af1b9409d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:41:1e:36:8b:fc:2b:bf:a1:4f:a7:62:8a:
14:63:16:e9:69:5d:4f:dd:96:c8:5b:24:0c:6e:ed:
ca:f1:b9:f9:bd:d2:66:42:18:3c:56:4f:dd:36:02:
ef:95:f7:bf:2a:2a:2e:58:7e:73:d2:16:6e:ef:9f:
7a:d6:90:32:c2:b9:4d:86:6a:3e:cd:18:69:91:b5:
48:bd:66:cd:b5:dd:c0:35:50:f4:f5:05:f4:2d:33:
75:a8:23:bd:52:d3:74:ee:3c:c4:99:09:91:bb:7c:
cd:12:ab:71:bb:88:40:fd:90:07:fa:06:70:74:40:
39:6c:ee:2d:2c:07:77:af:10:26:a1:71:84:b6:63:
c8:24:26:9a:7d:88:be:ad:04:04:36:85:0a:2d:de:
94:4c:b8:8a:6b:d2:33:5a:f0:70:d4:0c:7c:7b:8f:
be:9f:52:c3:29:3a:17:a5:98:04:90:f1:f2:c4:93:
0b:f6:04:4a:55:4d:77:f3:85:78:0b:04:cd:5f:c4:
d4:9a:ad:40:17:e1:c2:fb:e8:b6:bc:af:c0:7c:52:
4c:82:e0:41:f9:8e:7e:5a:48:9f:48:6e:a5:66:82:
b9:56:28:75:39:a1:2e:ac:b0:e0:1b:4f:58:ca:8c:
b2:ca:da:4e:cc:25:b6:9b:e9:6e:e1:5c:0f:bf:1a:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:7C:82:CA:64:21:FD:3D:79:D3:EC:88:4F:57:0A:F1:B9:40:9D
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:bf:19:4b:0a:94:ee:ba:aa:68:13:25:30:55:33:03:9a:
e6:99:ac:ec:cb:5d:82:5b:92:22:06:60:25:90:2f:ad:e7:f6:
40:a8:43:ec:64:6d:70:96:23:ad:41:86:ff:a3:e0:1c:93:9c:
b9:28:e6:9e:cf:ff:1e:ed:29:a5:2a:1f:9a:db:98:e3:e3:51:
47:d0:79:ea:ca:97:48:48:9e:0d:68:4e:df:96:67:eb:dd:92:
4b:2a:09:2f:e3:e6:12:67:66:d1:0d:01:79:82:d2:df:68:91:
f9:77:ba:48:ad:27:25:84:75:92:ed:db:c4:4a:84:93:df:e6:
f0:d6:bb:7b:e9:fd:60:fc:99:e4:33:c9:26:0e:05:3d:3d:d7:
e0:32:21:f9:e6:5a:21:43:22:91:6d:4d:c8:b4:dd:58:df:0e:
a3:b6:67:79:66:e7:da:ba:11:a7:e6:4a:3f:79:84:69:c2:80:
3b:d6:a4:6c:73:fd:a3:01:41:d3:3a:8e:4d:0a:ca:e8:82:fd:
01:cc:2b:16:e0:1b:a8:73:14:6c:47:64:52:ea:22:f0:ac:0c:
91:d5:d1:94:b6:a8:d7:19:25:0c:41:09:72:73:87:ec:aa:5b:
80:1f:02:c2:58:7f:25:66:10:62:a8:75:a7:98:99:9c:48:77:
5e:a4:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:14 2025 by rpki-client