Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: zbU3WiROUrshWaO56Fa9AvjDZm/81SWMzryr4nW9lPM=
Subject key identifier: 4C:A8:3A:E5:40:82:DD:AA:50:D9:3B:F5:2A:95:C0:AF:53:7E:3F:47
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019921B284D5359B8E933B942A6AB28646F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 123A
Signing time: Sun 07 Sep 2025 01:02:51 +0000
Manifest this update: Sun 07 Sep 2025 01:02:51 +0000
Manifest next update: Mon 08 Sep 2025 01:02:51 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: Djuum5loQgQGxob5IwuWFxYaIchPNjH/QOsQzgq3c8c=)
3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:84:d5:35:9b:8e:93:3b:94:2a:6a:b2:86:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Sep 7 01:02:51 2025 GMT
Not After : Sep 8 01:02:51 2025 GMT
Subject: CN=4ca83ae54082ddaa50d93bf52a95c0af537e3f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:fd:d4:5e:3d:3c:21:be:dd:f6:d3:a5:8e:
52:c1:57:79:e3:fe:71:e5:80:cd:9d:77:82:a5:65:
59:81:35:de:aa:29:af:c7:ad:54:1c:70:35:a3:f0:
ad:fc:5d:70:87:99:17:37:e2:e8:13:6e:a9:9e:09:
16:97:35:c3:66:c8:ee:fa:8f:33:4c:df:3d:3f:c4:
9e:33:f0:2f:a0:be:88:7f:ee:78:70:49:98:fc:34:
ab:b4:80:bf:7e:13:09:6d:31:e2:e5:1a:92:be:16:
d9:62:63:35:76:6d:3b:19:e0:c1:7f:75:20:31:6d:
29:04:f4:62:b6:f6:7b:91:fb:65:3a:a0:18:b8:44:
42:24:60:a4:51:6c:e3:e4:9e:72:4e:07:b7:03:68:
0d:f8:43:bc:e2:87:79:91:6d:17:a0:f0:03:a9:bc:
01:bc:47:ef:cc:98:e6:22:37:44:de:2f:85:88:55:
2d:a1:01:b2:ce:cf:40:4e:1e:59:03:49:f9:97:a7:
a1:94:d7:ff:a9:c6:58:23:96:5d:f5:c1:a2:96:a5:
cf:43:62:d8:94:e3:3d:ea:09:af:36:64:2a:c3:78:
28:99:77:d5:f2:5b:3b:9a:72:2e:a6:ff:ec:db:50:
55:59:0e:cb:75:1d:a2:ac:1a:83:10:24:ab:55:ea:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:3A:E5:40:82:DD:AA:50:D9:3B:F5:2A:95:C0:AF:53:7E:3F:47
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:c8:3f:76:ca:62:dd:25:02:66:41:ed:2b:76:a2:62:8b:
5b:fe:59:2d:21:5a:83:0f:8e:b5:8a:41:ce:ed:e3:44:f7:95:
1a:06:d5:6d:9c:55:63:a4:de:f0:23:2c:d8:76:81:a1:1c:37:
b1:bc:3c:4d:3d:bf:de:18:ae:56:f6:c1:9d:4f:ff:7c:db:d9:
da:af:58:ad:17:6c:d3:9b:fe:a6:34:f2:b9:16:3f:0f:3b:6e:
46:8c:27:10:ac:29:de:66:05:93:aa:db:da:b2:43:9b:f2:70:
62:75:58:c2:9e:b2:7e:ee:5c:90:ab:27:5c:94:b5:29:78:51:
3f:e3:ca:1e:2a:78:45:3e:4f:2a:c8:b6:60:c4:3b:33:5f:71:
d2:2c:fe:17:d1:29:79:a8:09:02:0a:ee:e3:7f:b7:97:19:9a:
88:a5:06:84:c8:b1:f6:80:ad:df:08:e4:41:cd:ea:c2:15:ef:
72:c3:4c:35:67:43:75:02:13:9d:ec:e7:e5:73:99:9e:81:a6:
72:3d:6b:f8:42:9b:02:e4:89:eb:30:e2:42:d3:4b:75:64:56:
f4:b5:70:b8:ef:01:14:cc:1b:c6:86:f4:20:de:a8:d3:a6:d5:
5c:cd:5d:1e:36:09:75:da:a3:ec:9c:d7:b0:9c:28:22:d9:9e:
0b:c7:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:26 2025 by rpki-client