Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: L/LwFN+xySIXDZqWAiViGIMeKZKa2dlsBZngnCl/gP0=
Subject key identifier: EA:65:8F:C1:64:36:24:49:B9:D4:45:DB:67:6A:36:57:E6:FC:88:F7
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 019A706E4355D1D52B01E21954AA7ABC1BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 0412
Signing time: Tue 11 Nov 2025 01:01:05 +0000
Manifest this update: Tue 11 Nov 2025 01:01:05 +0000
Manifest next update: Wed 12 Nov 2025 01:01:05 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: N5B7xoiMZEkw4hqgrWxiAJZwwUEjgDMw23EuUcz/FPA=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:43:55:d1:d5:2b:01:e2:19:54:aa:7a:bc:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Nov 11 01:01:05 2025 GMT
Not After : Nov 12 01:01:05 2025 GMT
Subject: CN=ea658fc164362449b9d445db676a3657e6fc88f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:fd:01:b8:4d:3e:c1:c3:88:b5:d0:7d:b5:
b6:6f:46:64:cf:29:98:3a:6f:5c:5c:e5:b0:a5:39:
97:75:66:b3:e0:e9:9a:36:1c:86:ad:85:0c:05:3b:
e7:05:4e:e7:99:65:25:bb:bb:ed:a3:1a:9b:41:73:
7a:71:da:2d:95:07:78:66:87:88:5c:73:7c:3c:4d:
19:f1:e3:85:63:4f:ee:fe:7c:87:56:56:80:2f:46:
2c:ff:2b:c0:a5:53:0f:aa:6b:73:d1:80:ee:82:44:
5b:4d:47:60:f0:7b:76:8c:06:4f:2d:68:8e:08:93:
5d:5e:83:9f:b0:18:34:ee:f9:ac:55:6a:d8:f4:9c:
0d:bf:73:c2:49:85:bc:b2:d5:9b:0e:3c:17:ba:01:
89:04:43:5f:21:8b:fe:d9:4d:a8:24:95:0c:aa:0d:
21:1e:2c:91:eb:d5:90:f1:aa:d7:15:4e:e2:0e:29:
54:06:ad:1d:f4:e4:4d:91:63:ea:68:06:1d:7c:71:
d7:1c:d6:06:06:17:63:0b:cf:58:0c:15:b3:2f:a6:
a8:29:15:dd:67:9e:ea:45:c8:d3:68:42:5f:15:5e:
13:24:8a:e5:06:e1:e1:14:18:0c:38:7f:16:69:a2:
28:90:45:7e:8d:73:9d:c5:ce:00:9e:1f:8a:bc:14:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:8F:C1:64:36:24:49:B9:D4:45:DB:67:6A:36:57:E6:FC:88:F7
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:7a:dd:83:1c:65:9a:bb:c0:a8:74:01:d8:03:ff:85:c4:
b1:09:ee:3d:f4:7f:77:c6:3e:e2:20:3a:12:72:21:64:b9:65:
9f:2a:30:ab:51:9b:f0:2f:20:09:65:40:2e:92:61:b3:14:94:
31:01:03:f5:52:b8:df:f4:2f:96:89:47:c2:0d:48:16:c6:92:
3f:18:4a:51:22:cb:d5:07:a1:35:70:87:6b:e2:bf:41:42:c7:
f0:80:d4:c4:43:9b:fc:86:00:ca:dc:f2:69:8f:ba:73:7a:03:
09:8f:5b:eb:48:d1:1f:75:43:4b:85:dc:55:72:31:7c:35:08:
9d:45:58:4e:90:59:c3:06:a9:43:b6:35:60:8f:25:d1:5e:5f:
18:92:99:75:78:b4:8a:5c:79:47:d2:c2:77:8b:d2:1a:09:a0:
aa:54:8a:8f:9a:91:af:51:fb:97:c8:38:40:f6:35:9c:c5:2a:
b7:6c:6c:49:3f:d0:72:dd:eb:47:78:8e:34:1a:8c:7d:d8:7f:
fc:15:d7:1d:56:ca:12:36:9d:35:d9:95:1d:93:54:93:1d:12:
58:82:c3:1c:be:06:55:b3:17:25:1e:10:f8:64:fb:a1:10:9b:
92:31:d0:77:4e:0f:73:c1:61:f0:80:62:76:61:f9:55:73:89:
42:4e:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:31 2025 by rpki-client