Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: VsZf+1lCPYb9MrNe1Y3fbeyWlNq2ydEzY9+iKRM5/NI=
Subject key identifier: 92:BD:FF:04:BD:01:82:BE:93:72:40:2F:0B:57:D8:6C:4C:7E:FA:C4
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019A13BB5140AE404120A0B9CB456CCB1C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0726
Signing time: Fri 24 Oct 2025 01:00:34 +0000
Manifest this update: Fri 24 Oct 2025 01:00:34 +0000
Manifest next update: Sat 25 Oct 2025 01:00:34 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: 04ga5A0UDqtP5uCZVaiexetPFcbgPsEZZrL/jGXg/DI=)
2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:51:40:ae:40:41:20:a0:b9:cb:45:6c:cb:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Oct 24 01:00:34 2025 GMT
Not After : Oct 25 01:00:34 2025 GMT
Subject: CN=92bdff04bd0182be9372402f0b57d86c4c7efac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:10:35:4d:ab:b5:e0:40:73:5f:b1:0e:83:
c2:23:77:ce:05:20:2d:7a:20:aa:6c:94:8c:34:b8:
1e:a3:e2:3f:8a:ed:15:b9:3b:f3:72:64:95:93:1a:
a4:9c:be:c1:c4:72:87:3a:97:b5:b3:5d:eb:34:55:
aa:9c:60:32:56:35:22:56:4c:d0:02:f9:13:51:7f:
14:4b:6b:ee:22:29:39:11:70:57:82:22:cd:56:02:
d8:92:17:8f:42:1c:74:66:58:cf:4f:5f:30:1c:88:
28:46:88:e4:1a:c2:f3:02:73:e3:6f:fa:f3:2e:7f:
3b:c1:4b:a5:95:46:6d:0c:10:da:5d:10:88:79:98:
f2:5d:67:d0:75:2a:bc:aa:31:c9:e1:92:8e:39:0c:
79:d6:f8:3e:63:ef:bb:a2:66:58:be:ec:0f:b5:26:
3b:08:07:94:53:aa:bb:9c:50:8e:6b:df:6f:a3:5e:
81:f6:29:b1:28:38:8f:b5:7d:1d:13:4f:d0:31:10:
28:48:3e:be:d8:5f:62:b6:2e:1c:4e:c4:09:7f:c2:
28:6a:13:c7:3b:15:10:35:30:29:1c:0f:e3:96:19:
57:d9:40:e6:4e:09:c0:3b:7c:8c:ea:f7:ad:86:f0:
ee:49:a9:97:b9:34:73:21:0e:7d:df:a8:a2:c8:20:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:FF:04:BD:01:82:BE:93:72:40:2F:0B:57:D8:6C:4C:7E:FA:C4
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ba:d1:35:4f:32:d7:3f:8b:1e:44:89:49:8f:10:dc:89:cf:
7c:d5:e9:99:f3:39:37:43:59:b2:86:05:71:29:a0:2b:f9:6f:
38:fd:ac:20:d6:c8:07:8f:d6:cf:7b:e0:8f:95:1e:9f:70:13:
d5:e1:8c:12:49:88:6f:8c:3d:0d:5b:7a:87:01:ad:95:67:bb:
d3:07:b5:4d:98:16:24:6f:0a:eb:37:56:35:29:1f:2d:a5:49:
07:65:48:70:3b:93:2c:67:e6:6b:46:38:63:84:d1:09:b3:89:
f2:b4:4c:7f:e5:32:90:c9:f3:6c:ff:52:bb:00:32:91:82:bb:
18:32:6a:6a:36:7c:99:0d:59:4b:6e:dd:3e:b8:4a:fe:ba:ca:
1b:c2:3a:23:a3:c5:91:5f:1f:d8:96:22:d9:ef:66:f0:0f:02:
0a:43:26:57:d3:36:65:2c:7f:44:93:38:26:9a:55:58:11:92:
6c:e4:42:73:c6:b2:e4:b5:da:f7:75:1e:57:e5:da:1e:9d:80:
a5:e4:41:5a:51:8b:51:1c:87:4c:62:68:5c:fa:35:33:21:e4:
b2:e1:ba:bc:7e:22:dd:0f:95:f2:a7:63:c2:33:5f:d9:89:c1:
ce:ef:52:6c:ef:cc:5f:47:e0:93:10:f7:10:5d:c1:72:a9:7c:
bf:8b:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:35:29 2025 by rpki-client