Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: gMJzGLPuUz2qC8zqFG+bRm0BBzrSGJIIQVKgNUJW07g=
Subject key identifier: A2:3C:4C:50:70:F8:E9:21:20:CC:F5:53:0F:7D:63:3B:59:F4:C9:9A
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019A0D4C484E6CCBA484E4CCFD8FE1F4480A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 12B4
Signing time: Wed 22 Oct 2025 19:01:34 +0000
Manifest this update: Wed 22 Oct 2025 19:01:34 +0000
Manifest next update: Thu 23 Oct 2025 19:01:34 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: tDu7p5aLn0EdWNL+5bQRbAxB+zMta5tedx5m3MPW3+c=)
3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4c:48:4e:6c:cb:a4:84:e4:cc:fd:8f:e1:f4:48:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Oct 22 19:01:34 2025 GMT
Not After : Oct 23 19:01:34 2025 GMT
Subject: CN=a23c4c5070f8e92120ccf5530f7d633b59f4c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:40:36:b8:c0:ee:66:ad:7b:28:0b:e1:52:91:
37:c9:24:51:00:89:da:37:3a:43:96:cf:bd:ba:1f:
07:f2:18:69:6b:4e:6d:63:17:e0:f3:23:c4:ea:53:
ab:f1:6f:38:07:e7:bf:fd:4b:9b:54:50:3c:e6:66:
21:f7:28:03:b0:0d:88:6a:cd:75:c4:55:ad:7a:1e:
d7:85:58:e9:6a:4d:4a:96:6e:69:ed:73:a6:03:68:
39:94:53:e5:65:78:b7:e4:22:61:0a:62:47:07:4d:
ad:ee:ba:6d:06:7f:e8:96:dc:0f:5d:29:bb:e9:fe:
e5:85:05:a5:10:5c:a1:9c:03:90:64:09:c4:04:86:
9e:e8:a9:81:37:29:88:9c:75:4a:11:dd:97:6c:09:
3c:18:7c:36:ee:7f:db:d5:3f:43:f7:ee:eb:0a:e9:
d8:79:ee:3c:60:09:37:3a:37:38:33:b6:a7:37:e6:
a4:c3:25:7b:06:a1:a1:ec:f5:34:f3:28:ae:b2:6e:
f7:5b:84:35:dc:ce:62:06:cb:f5:e5:19:44:b0:b9:
ef:48:67:dc:0d:ef:43:29:a0:6a:be:7f:88:3e:be:
b5:1f:0f:37:86:0e:f2:11:1b:20:f7:74:69:c1:27:
4b:65:61:da:0b:c8:4f:6c:4f:19:e5:e8:c8:99:a0:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:4C:50:70:F8:E9:21:20:CC:F5:53:0F:7D:63:3B:59:F4:C9:9A
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:ac:e5:8c:9d:b3:89:4d:bb:b3:7b:00:43:4b:5c:f6:ff:
ed:62:9c:47:23:6d:49:e2:bd:5c:be:6c:4a:94:c4:d7:5c:7f:
b0:a0:d0:97:37:1f:01:ee:73:bd:9b:7f:32:7b:26:2e:13:2d:
57:59:59:6d:36:73:cd:91:78:35:be:8a:b0:10:b6:bb:03:d0:
36:9f:22:b0:60:06:85:c6:d5:f2:d0:52:28:02:a7:07:f6:95:
05:ce:d0:6d:05:50:d6:fe:de:b6:66:e0:3d:ad:56:49:6b:2f:
54:9a:cc:06:27:55:63:23:97:53:ff:95:a3:a5:25:5c:3e:89:
f5:b6:d5:16:7f:a2:9f:82:cc:ce:bb:e7:8e:18:67:34:e0:a0:
3f:f1:9f:67:28:dc:0e:a5:35:04:2c:0e:6e:b7:43:ac:03:37:
14:df:f8:14:ca:a3:b1:7f:e3:90:4a:a1:df:2f:1d:bb:24:0e:
f8:2c:53:67:51:26:a9:5a:5b:c4:8b:be:b6:9b:a5:3c:03:f3:
96:a6:21:31:37:1d:6b:9d:3e:1e:e1:86:62:fe:6c:88:4b:34:
65:c3:fa:01:1c:8a:1f:64:9b:65:cb:15:f5:99:64:8d:9b:69:
bf:72:c3:07:a2:e9:83:5b:63:66:89:7b:0c:27:b2:05:a1:5c:
c6:b4:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:54:56 2025 by rpki-client