Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier: xWG2Qz8Lniq6ir3yPuUNNs2K/8IRY+oloXjpRWlZT0k=
Subject key identifier: 22:30:3E:10:3B:86:02:25:F4:DA:A3:AA:0C:8F:DB:E1:C4:6C:3F:73
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial: 019A27E6BAFD2B1FCBD6A8E6974748DFF8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number: 02D3
Signing time: Mon 27 Oct 2025 23:00:23 +0000
Manifest this update: Mon 27 Oct 2025 23:00:23 +0000
Manifest next update: Tue 28 Oct 2025 23:00:23 +0000
Files and hashes: 1: _EbNwpReLUVNd1YP_0CwE7ZjiIE.roa (hash: h2xnKbmoWDr+VElZXTIO8MYVw2Dx5IJspYhOYFMtbaw=)
2: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: GGIUnTG61eXD6YwbEBPwKi9jiEnVRFuPSy/h/eh6sb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:ba:fd:2b:1f:cb:d6:a8:e6:97:47:48:df:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Validity
Not Before: Oct 27 23:00:23 2025 GMT
Not After : Oct 28 23:00:23 2025 GMT
Subject: CN=22303e103b860225f4daa3aa0c8fdbe1c46c3f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:d0:05:43:20:4c:73:4a:c7:40:29:e3:3f:
27:c1:c9:b2:a2:d3:1f:2b:7b:c1:3a:6b:3d:85:2d:
6a:2c:40:f7:f3:79:ae:87:a4:b6:67:30:8a:b6:12:
cb:b9:13:00:ca:c7:95:2b:ba:99:1a:d2:ff:f9:c8:
c6:ad:a5:f6:18:cc:c3:c3:fa:7a:df:a6:f6:7b:2f:
41:91:8f:de:21:f0:10:82:81:b9:1b:89:49:e3:e6:
c0:ea:12:ab:7c:a8:fd:c0:20:44:92:ad:43:7f:6c:
01:20:2a:b2:a6:a4:60:8d:ab:6d:9c:64:91:1c:be:
7b:c2:ec:29:9b:47:8d:75:af:ad:64:b0:e8:3a:a7:
1c:fc:5e:3e:5e:ea:17:80:ba:21:1b:65:be:65:01:
d6:1f:44:95:52:9a:ea:33:57:ef:57:6b:ff:81:9e:
eb:92:d0:b6:1b:56:fb:88:95:fe:0e:71:1a:1d:5f:
79:5f:9f:e0:3a:3e:ef:d8:7d:98:6c:59:94:09:9b:
88:d4:87:24:96:15:fd:c5:75:4a:4b:dd:ce:f1:0a:
8b:2c:e0:01:3b:ea:0f:06:a2:02:29:25:d4:92:c5:
9b:90:da:1f:17:78:2d:a4:e9:5e:58:ba:1d:6a:8b:
77:a2:eb:cf:c4:0d:de:5b:b9:ee:3e:0a:55:db:80:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:3E:10:3B:86:02:25:F4:DA:A3:AA:0C:8F:DB:E1:C4:6C:3F:73
X509v3 Authority Key Identifier:
keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bd:b3:1c:8b:23:26:13:ed:c3:95:73:40:d8:39:63:9c:ee:
5c:75:91:d7:39:d0:5e:b6:47:d0:14:55:a0:9b:63:f2:56:c4:
72:f9:95:dd:3a:3d:a6:43:35:7f:55:cf:64:6e:a0:dd:8e:59:
f2:3b:a3:95:31:29:7d:9e:41:27:0f:b0:f4:9d:a8:c5:5b:81:
fb:78:92:ab:e4:df:00:6a:be:41:8c:72:5d:0b:6e:13:78:0f:
4e:fb:e6:92:be:34:07:37:ad:d8:9e:09:f7:59:3d:84:c4:fb:
f8:fc:4c:71:ee:d4:cf:f9:0a:96:19:ea:a9:82:62:1a:6a:e2:
e9:8c:61:4e:96:d6:cc:46:eb:a2:ab:ee:c1:77:b7:3e:67:ee:
d4:e2:68:d1:7a:e5:06:3f:17:53:b2:e2:fd:b2:a6:e1:4f:2f:
b6:ef:ac:98:4f:2e:bf:92:6f:51:98:6e:60:33:29:5a:5d:6a:
40:9a:56:8b:d8:65:80:a2:55:3a:95:23:a8:4f:12:43:c5:ea:
0b:57:60:7f:56:ba:1a:a1:38:8f:0e:04:26:05:a3:21:22:a4:
aa:30:55:e3:ab:e3:c1:de:b4:35:2d:a7:3c:f6:58:fa:b5:43:
da:13:72:85:7a:33:a6:2d:05:54:96:fc:ca:78:76:32:cd:52:
ac:bf:d8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:23:13 2025 by rpki-client