Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: I10zVkywA1xy3wAG3vWyT1AbWG+yl2NEkwVkN4AyQZ8=
Subject key identifier: 41:EA:CE:81:25:A7:A7:AD:A0:1E:FB:6C:89:CF:C6:3B:0E:E9:6B:38
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 019A71B7BC0E4D85F4508C8383DE7836DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 03FF
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: 7UxbyRaP9tZ6yDpGBQxogUL0pGMdZkPHXPhR34ur1sM=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bc:0e:4d:85:f4:50:8c:83:83:de:78:36:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=41eace8125a7a7ada01efb6c89cfc63b0ee96b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:a6:ee:f8:dc:cb:79:d0:90:d1:0e:9a:39:
85:4c:89:29:fc:ff:17:34:e3:24:bf:6d:37:ea:f0:
23:dc:bf:cb:14:4e:bf:bf:1b:a0:66:f7:5e:cd:b2:
7f:b0:ba:65:05:b4:f1:ba:d5:d4:96:d4:83:ab:5d:
b9:d9:62:d9:02:e4:77:05:06:a3:20:89:ca:51:e2:
20:a0:b0:ce:34:c5:fa:1f:00:26:5c:fe:e4:8c:04:
f8:be:68:66:ae:a0:e8:c3:ee:d1:8b:35:41:13:0c:
7a:bb:1f:1f:1a:a1:91:60:32:a9:95:af:fa:81:81:
cd:8b:0a:0c:66:22:b7:10:7f:4c:eb:1f:6e:e5:b7:
ad:4e:8a:09:c2:9d:15:d4:f1:32:24:80:81:53:36:
03:7c:5d:d4:5f:4a:f4:47:a5:c0:93:ea:13:e7:77:
62:1e:44:e5:4b:cf:64:c1:a0:91:fe:dd:94:b6:db:
f9:8c:f8:a6:16:67:09:7b:27:1f:7b:c0:56:79:33:
a8:9c:e0:3e:dc:7c:c7:3a:6b:bd:bc:15:7f:20:e2:
45:99:31:34:e4:34:d9:55:ee:1f:0f:4e:da:88:f3:
30:70:fe:43:e5:18:d6:1d:4f:14:a1:09:a4:03:63:
04:9d:5a:fb:da:c8:51:81:56:f3:14:84:48:b2:cd:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:CE:81:25:A7:A7:AD:A0:1E:FB:6C:89:CF:C6:3B:0E:E9:6B:38
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:07:2b:5d:10:b3:43:2c:a6:db:ed:3e:fe:eb:2f:9e:aa:5b:
57:74:2c:c2:42:ea:f9:bf:24:33:9b:62:1e:56:47:73:5d:b1:
f1:7b:a9:3b:5e:cc:4c:11:24:91:77:4a:3d:6b:41:b9:58:dd:
73:b1:0c:55:de:a3:8b:78:69:62:ec:1d:e7:e1:3c:7a:12:c4:
26:74:cd:b0:06:0b:e7:ff:12:cc:3d:0d:ba:8c:dd:04:8f:98:
73:ec:01:ea:51:94:ff:eb:41:46:c5:29:55:08:85:97:e2:ca:
3d:9f:97:dd:8c:07:1b:cb:2b:59:5f:5c:8d:fd:c3:07:24:8c:
b7:7b:86:5f:38:5c:af:53:e9:ca:d5:f1:de:4d:03:7f:85:6d:
70:67:e7:d7:f6:f4:74:a3:b6:5b:29:6d:be:61:72:bf:dc:73:
a1:7c:d5:09:b1:88:af:5c:ac:cb:8c:7f:4e:80:cc:9b:35:2a:
79:34:56:a5:a1:1e:ee:f5:9d:f3:4d:fe:c0:99:89:c8:1c:6c:
eb:60:22:b9:44:64:52:b3:d4:58:8a:fb:b5:f8:29:c9:63:91:
af:e6:dc:a7:cc:e6:be:9e:08:20:26:96:ae:b7:d6:e9:3d:1c:
20:38:e7:95:98:4b:e4:39:df:df:57:48:70:98:64:c4:ef:08:
8d:24:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:11 2025 by rpki-client