Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: CLh6JcN54Jd2As9Q99kddtxI6Ea8Wqx58uR5pL5kcC8=
Subject key identifier: A1:96:C1:09:8A:23:57:8B:E7:27:BF:5A:7F:C8:31:C7:14:30:E8:F1
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 019A29674E878E3DAEF0820F0818CF751A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 06:00:27 +0000
Manifest this update: Tue 28 Oct 2025 06:00:27 +0000
Manifest next update: Wed 29 Oct 2025 06:00:27 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: 67xpkpoFPgJVRbzBHSgB2TZFY4EiN1bpscxI+EBWU38=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:4e:87:8e:3d:ae:f0:82:0f:08:18:cf:75:1a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Oct 28 06:00:27 2025 GMT
Not After : Oct 29 06:00:27 2025 GMT
Subject: CN=a196c1098a23578be727bf5a7fc831c71430e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:3b:27:78:d4:52:f5:0e:97:6d:cf:71:3a:
de:3d:e0:de:3d:9c:e4:a3:89:d5:b0:c4:f7:f1:1d:
07:12:de:ba:f7:0f:0e:25:d7:94:02:f8:a7:54:eb:
77:89:bc:53:73:89:6e:1e:f4:40:67:40:87:c5:8d:
97:8b:85:36:91:f0:11:3a:f9:42:f1:33:14:73:8a:
55:14:e8:42:60:db:b1:d7:76:94:93:e6:81:e7:57:
3d:85:42:9f:bd:6b:3b:fa:d9:4e:d7:2c:ac:42:a4:
e0:f4:9f:ea:c6:19:33:1d:06:b5:cd:92:be:32:be:
f5:69:f1:9d:26:94:9a:04:e5:8d:19:f1:2f:fa:1b:
49:98:36:55:14:92:16:1a:23:dc:3a:52:6f:ed:e4:
cf:72:d9:97:5b:e4:f7:64:90:c8:aa:32:71:ce:dc:
6d:d9:ac:21:a5:2f:df:8d:fb:b2:ae:02:9a:27:aa:
c3:3d:3e:a0:cf:8a:02:2f:a3:6d:20:c1:c5:ac:09:
ee:4c:bf:a5:98:6f:76:55:f0:3e:46:5d:47:da:77:
9a:f5:d8:3e:6d:3d:eb:a1:d5:61:01:cf:6e:89:b6:
ce:44:b5:b6:86:8b:a5:5b:d9:48:5e:dd:5c:c1:7e:
6c:6d:a9:02:de:66:df:b8:c1:01:d1:50:c7:67:00:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:C1:09:8A:23:57:8B:E7:27:BF:5A:7F:C8:31:C7:14:30:E8:F1
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:ec:3e:60:2c:c0:48:10:08:05:c9:e2:fd:02:20:0f:85:
d3:13:22:56:e7:68:70:f4:2a:4a:20:02:6e:55:4f:ee:ba:21:
a3:17:a6:b3:9b:b4:55:27:af:f7:f0:75:0e:44:a3:ce:06:a3:
64:fc:ea:21:81:80:3e:67:a0:2f:0d:5d:8e:a9:c6:6b:67:b2:
02:2d:94:63:a7:73:54:78:4c:e8:b2:45:e9:60:26:9e:42:a5:
7d:a1:3a:b1:92:67:f3:70:27:2b:e3:da:4c:cd:24:a5:e2:52:
c3:9a:42:ed:8c:a9:0c:dc:73:9f:55:70:8d:df:60:fc:84:51:
22:b8:8f:e0:0b:48:10:c1:ea:28:cb:2b:1d:41:ed:16:cc:cb:
82:1c:4e:7a:a0:92:88:36:fb:0c:3b:b4:ed:39:cf:c2:22:a5:
eb:14:12:a8:2f:6a:10:c5:92:f0:72:2a:9c:52:b8:31:00:e3:
28:a3:24:1f:b8:c2:5f:85:8c:e5:9d:0f:57:33:0b:a5:8e:82:
22:f2:ac:26:d6:cf:e2:6c:fd:9b:8f:73:b4:7c:81:2b:e1:97:
b4:79:9f:af:99:23:eb:7b:5b:9a:61:f3:50:75:3a:89:37:96:
ff:d8:17:e8:fc:34:8c:6e:ff:f8:8b:de:a2:48:ca:f2:4a:6f:
2a:89:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:44:00 2025 by rpki-client