Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: 4yKGL7kEgbuSlTM4krm1xtXcgI2iFsVpDkyYxHjPhps=
Subject key identifier: 6C:D7:0F:A9:8B:45:47:12:0F:75:B4:34:34:E1:1C:D5:83:CA:53:93
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019A1EE3D94DB7D3882DD4FF88BD639B0ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 05:00:40 +0000
Manifest this update: Sun 26 Oct 2025 05:00:40 +0000
Manifest next update: Mon 27 Oct 2025 05:00:40 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: 1Q1Kp0DS+ec5iMpV4Kgg/VIUb3nBBSQ/+C8arsv74Jc=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:d9:4d:b7:d3:88:2d:d4:ff:88:bd:63:9b:0e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Oct 26 05:00:40 2025 GMT
Not After : Oct 27 05:00:40 2025 GMT
Subject: CN=6cd70fa98b4547120f75b43434e11cd583ca5393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:68:58:f2:a0:89:8f:b4:8f:f5:1c:f5:b8:
2b:48:14:db:d9:dd:ce:3a:7b:2b:b0:2b:cf:ee:41:
13:13:cb:1b:f1:2e:18:4b:cf:54:b8:ca:92:95:f7:
08:d7:95:66:ee:d2:57:c7:0b:ab:5e:85:20:f9:e2:
ad:37:af:1f:a0:88:e0:49:6d:e0:71:7a:2c:f9:9b:
2b:9e:88:39:d9:08:c4:da:16:ab:7e:a0:e1:c5:73:
b1:84:15:f1:f5:db:0a:4f:0a:13:e7:a6:d2:22:e5:
5b:12:c9:4d:81:88:c0:34:61:eb:bb:3f:e2:3f:ba:
77:41:c5:f5:c6:30:92:c2:78:20:f0:7d:c1:46:76:
c8:05:0e:b1:6e:e1:31:4e:a1:dc:fb:c9:b9:b4:46:
32:8a:2a:51:a5:4d:e9:05:b8:9d:6e:89:93:cd:42:
e0:bc:a0:63:4d:96:90:e8:6b:75:17:5a:41:94:bc:
06:9d:86:6d:77:52:a6:44:31:28:20:ca:76:90:fe:
83:c5:1b:8e:ab:c7:ed:4a:d3:ae:5e:a4:2f:75:7d:
1b:95:05:9a:3c:5e:73:c7:69:f1:27:18:4b:e3:4d:
d4:d1:9e:64:0f:a9:5f:88:4b:0d:ef:98:5f:09:6b:
ad:97:97:33:fa:c2:3e:46:4d:f8:06:5c:6c:b6:ea:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:0F:A9:8B:45:47:12:0F:75:B4:34:34:E1:1C:D5:83:CA:53:93
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:e5:a3:35:0d:81:e4:f8:d2:9f:50:a8:a5:9c:09:8e:93:
05:77:ae:56:1f:ba:4b:bf:f9:07:0f:c1:89:90:3d:ba:b1:a0:
e7:bf:b5:29:d5:69:15:6d:b5:73:b7:fa:b2:36:22:1e:5a:b1:
d2:4e:a0:a9:61:24:e9:7a:0b:45:e8:9a:db:08:ab:17:c1:37:
d5:58:83:7f:d4:3a:3b:d6:4d:e7:6c:e2:1f:e4:16:f3:19:34:
b4:32:5e:e9:e5:05:53:46:2b:86:ee:60:ba:4f:6b:7d:3d:07:
d8:81:bf:e6:e8:94:88:3a:69:f0:2c:84:aa:4a:07:c6:42:89:
f1:ab:5e:3f:24:43:68:7a:e3:c4:c5:18:76:f1:d0:f7:e1:c1:
b9:07:31:11:bd:35:ff:f4:f3:1f:66:50:28:ce:ed:f1:0e:02:
67:53:0b:5e:91:6d:36:59:68:bb:3a:f0:05:5d:f4:2e:55:ca:
58:e8:f6:a2:41:0f:70:39:72:3e:45:d8:51:47:ca:65:64:da:
c3:84:42:3f:a6:fc:26:db:44:b6:da:fe:be:90:01:38:f4:c7:
d2:e6:c5:a2:17:df:99:c8:55:70:99:2a:1c:f1:4e:f2:d6:4f:
4a:82:6f:00:e7:08:1e:f6:80:0a:c5:94:e8:d7:79:5c:21:49:
30:b6:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 15:13:18 2025 by rpki-client