Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: Ahsq1odD2jB6+uo9dAWT4jpQL1Q7gXu7fna28ZH9KQQ=
Subject key identifier: 53:B1:12:30:3D:39:87:32:9A:F3:B1:9D:47:A4:B6:59:87:88:44:0F
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019A1F51420FCD4B0184CC048CE94CCA42BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 015C
Signing time: Sun 26 Oct 2025 07:00:10 +0000
Manifest this update: Sun 26 Oct 2025 07:00:10 +0000
Manifest next update: Mon 27 Oct 2025 07:00:10 +0000
Files and hashes: 1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: 9+1XZYSNlz8xbTgKNjICavAqvxeryyILEdKDqC9SuM8=)
3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:42:0f:cd:4b:01:84:cc:04:8c:e9:4c:ca:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Oct 26 07:00:10 2025 GMT
Not After : Oct 27 07:00:10 2025 GMT
Subject: CN=53b112303d3987329af3b19d47a4b6598788440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:d6:11:20:07:7f:8e:be:c3:41:4a:93:29:
9c:ec:39:ee:4b:b3:4d:92:8a:b1:2b:a1:82:63:00:
04:f3:e1:db:d6:ed:c3:4f:12:43:d8:5d:97:13:23:
cc:08:dd:92:d9:91:e3:3a:67:60:6b:f4:2f:10:f2:
23:66:5a:a2:cd:3a:63:3f:56:ff:cb:05:30:46:54:
26:5f:a6:21:ef:54:57:3b:ae:44:4a:e9:9e:ac:97:
50:1a:c4:85:cc:90:14:a8:b3:9b:0f:21:69:ac:2e:
f7:7a:e8:70:54:2a:12:83:94:19:2a:64:bd:e2:80:
1a:1b:07:45:f4:e7:86:cb:26:9c:47:a7:f2:87:a1:
e5:93:69:c8:08:02:71:5d:93:5d:b9:13:01:fb:9a:
ee:fd:37:1a:47:77:c3:0a:74:a7:eb:a8:05:3f:7d:
2b:b4:7d:a3:d1:0f:6f:d9:e8:f9:53:47:4d:7a:1e:
a8:86:31:aa:99:5a:52:d8:be:28:20:81:db:17:e4:
0b:ec:6a:85:6c:1e:9e:22:71:cc:cc:8a:39:5d:11:
cf:fa:84:e3:6a:a6:69:69:38:1c:44:19:39:46:b2:
c8:8f:97:3a:0b:6a:ac:c5:fe:a8:bc:98:95:f7:c7:
f4:6e:76:66:25:20:d6:2e:4a:d4:c3:99:a3:05:b0:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:12:30:3D:39:87:32:9A:F3:B1:9D:47:A4:B6:59:87:88:44:0F
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:50:52:90:4b:8b:ae:aa:b5:f4:91:90:10:f4:e6:67:dd:61:
01:49:57:c8:93:63:98:4a:9a:70:32:5c:33:f1:c5:63:e0:b1:
6d:2b:b4:a0:1d:4a:f9:44:1e:04:37:08:de:b6:dc:60:d1:8f:
16:3d:25:fa:e4:ed:d4:b8:7e:09:a6:67:3c:a6:4e:bf:35:9e:
0d:77:6f:ee:a6:e8:21:9d:a7:b4:d0:f5:64:c3:12:27:ae:c6:
61:e7:21:de:8a:0a:e5:6a:7f:76:00:ea:57:8e:69:26:9a:ae:
8c:4d:49:36:a7:a9:2f:1d:d7:48:14:94:8e:3a:56:2c:ff:3b:
cc:1b:8c:cb:62:bc:25:21:f6:00:af:c5:0a:4c:28:3d:c3:ae:
78:87:e2:57:66:5d:cc:5b:8c:c6:92:1f:ce:2f:34:cc:e0:4d:
fb:8d:e3:5b:4f:ce:b7:01:73:5e:8b:9c:1a:cb:3a:10:da:ea:
b6:7f:67:19:28:8d:be:a5:0e:7f:39:d2:1d:b6:3f:44:28:12:
57:1b:3f:64:94:00:28:e7:33:1d:8d:77:61:bc:09:2b:8d:7f:
04:d5:e0:3e:0f:73:54:a5:24:7f:19:b6:4f:f4:3d:08:5a:6f:
b9:bb:3e:4a:92:95:e0:64:e3:65:6b:24:d4:1b:dd:c2:9d:62:
55:7d:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:31:35 2025 by rpki-client