Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: ErKoJnwA4VENxJ5ikkDnZcG9xW7Be4ZaGDyZ1iPPge8=
Subject key identifier: 50:76:48:A0:B5:16:99:53:68:5F:9D:89:95:00:48:8F:7F:E7:B9:5C
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019A164EA0326FBD1E10CA6BE4C9F2FC9616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 0416
Signing time: Fri 24 Oct 2025 13:00:42 +0000
Manifest this update: Fri 24 Oct 2025 13:00:42 +0000
Manifest next update: Sat 25 Oct 2025 13:00:42 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: UbL8vzaPiYjbvG56hfGvstyJtox6OvbmwLtYpXqLbaE=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:a0:32:6f:bd:1e:10:ca:6b:e4:c9:f2:fc:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Oct 24 13:00:42 2025 GMT
Not After : Oct 25 13:00:42 2025 GMT
Subject: CN=507648a0b5169953685f9d899500488f7fe7b95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:10:7a:d8:61:5e:2f:a3:d3:8f:06:e8:4d:
29:74:0e:f4:07:6e:23:72:ef:cc:88:cc:f4:b0:5b:
68:95:78:96:aa:6f:c7:22:12:27:9a:92:63:91:27:
f3:61:11:8e:fd:a7:0d:4b:05:d2:d2:70:8b:93:bd:
9d:5b:f8:dd:a9:c2:87:81:7f:dd:6e:20:df:f9:5d:
46:13:8a:8c:c9:f1:a7:82:a6:65:23:4a:8d:85:48:
a3:8b:f9:dc:e6:f4:cf:0f:51:a8:f0:9f:ff:37:a9:
0a:71:e0:16:15:6a:5a:02:d8:98:44:c3:8a:dd:08:
5a:11:9c:55:8f:a7:15:6f:15:13:35:2c:e0:4c:8e:
8a:bc:34:07:5f:aa:77:f9:ae:91:2d:c9:ae:8a:94:
f5:2e:ac:30:e4:e1:10:ec:35:fc:8b:85:08:84:87:
f7:7c:4e:25:1b:6c:a3:b4:8f:09:02:3e:0f:f2:dd:
2a:d0:ee:ef:bb:ab:d7:f9:65:53:2d:e2:b9:62:3a:
46:4e:d8:b3:17:39:95:46:fa:79:1c:ba:9a:3b:61:
d0:2c:f9:74:44:46:20:6b:30:cc:e8:8e:f8:0e:57:
46:6d:32:d8:ac:d7:79:7c:37:d7:02:21:c1:b1:b6:
1f:45:fa:5b:8d:41:5d:42:48:be:6f:46:57:ba:96:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:48:A0:B5:16:99:53:68:5F:9D:89:95:00:48:8F:7F:E7:B9:5C
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:c2:1d:59:8c:e4:ab:62:0e:7e:2e:20:e6:9e:69:09:53:
7d:74:97:98:c2:6a:c6:9b:e8:b5:08:c3:05:c1:07:bf:05:89:
f3:2b:e0:80:ca:08:38:02:c1:cf:dd:1c:03:d9:25:c0:72:85:
66:f2:41:cf:32:8b:41:a0:8a:7e:bc:e0:e3:18:2a:b6:94:56:
10:58:72:11:64:f6:20:8d:02:75:8e:39:86:9f:4f:e6:55:ac:
92:9c:00:fe:7b:57:e4:c8:d8:6e:da:34:d3:d6:ab:59:12:41:
e1:f0:06:64:79:62:c3:4f:55:8f:9c:04:95:6d:b7:42:f5:bf:
0d:3e:59:9a:4b:d6:c3:ed:15:ab:11:0d:d4:d3:62:e9:c7:42:
fc:16:d0:20:14:52:fa:7e:13:b6:c9:54:d5:59:49:66:a1:ae:
de:ca:5a:f6:22:87:ca:aa:c2:2d:ab:c9:f9:4f:78:44:4c:06:
50:de:37:87:7e:35:7c:23:28:b6:cc:85:93:1d:b8:86:d4:0a:
96:ae:78:97:6a:08:92:49:b5:06:65:e6:da:a0:d5:c9:d9:91:
a7:99:43:69:af:af:40:34:ec:46:1d:a0:01:c4:9a:45:34:80:
c7:bc:62:96:f0:41:42:4c:08:0c:5b:bd:58:11:30:b1:1b:33:
be:48:0f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:45:55 2025 by rpki-client