Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: m5YSvI5KpwHwCusmRifzE1TkH/UWMkuxrw4MsGyWtGI=
Subject key identifier: BA:CD:CE:98:84:25:54:00:B9:08:2A:B4:4B:07:93:A8:6F:F8:CE:79
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019A21AD813F1CE13B707C368FEBCC4D3C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0DDB
Signing time: Sun 26 Oct 2025 18:00:10 +0000
Manifest this update: Sun 26 Oct 2025 18:00:10 +0000
Manifest next update: Mon 27 Oct 2025 18:00:10 +0000
Files and hashes: 1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: POYWqQOnBY0GuY8K7hFIYYy1uX0atpBn6cNyLaI0Pgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:81:3f:1c:e1:3b:70:7c:36:8f:eb:cc:4d:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Oct 26 18:00:10 2025 GMT
Not After : Oct 27 18:00:10 2025 GMT
Subject: CN=bacdce9884255400b9082ab44b0793a86ff8ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:ba:d3:c0:a4:0f:83:7a:35:4a:9e:a4:86:
9d:1f:e8:e5:f3:db:1e:78:cc:6c:75:6d:53:1f:c3:
a7:96:aa:be:8d:f6:a8:d0:f4:88:f5:de:8a:e5:41:
89:2b:d4:e6:39:5b:a9:22:c6:b8:8d:b1:54:05:c6:
e7:1a:2b:c9:91:64:93:7a:cb:8f:04:3d:f1:b4:a9:
46:27:7a:e8:11:fb:9c:7d:86:be:13:c7:83:21:24:
3a:ec:57:0f:72:5a:c9:8d:e3:45:de:06:5a:79:9b:
f8:de:35:d6:b4:4c:99:23:da:c7:82:d7:44:d2:6b:
17:68:22:21:d9:39:49:01:15:e3:58:fb:73:66:77:
66:b9:67:7d:4b:c3:66:d7:ab:03:eb:7f:db:9b:03:
5c:80:68:86:61:75:89:19:aa:83:d4:d5:c5:b6:e7:
2a:f0:38:b9:49:3f:ff:ff:6e:50:90:0b:50:ff:b0:
8b:cf:a5:2c:e4:da:fc:21:20:d4:70:88:d4:6e:7f:
64:28:1b:00:42:81:0c:3f:93:70:70:84:67:06:a2:
69:d5:cc:c7:b2:5d:7f:b9:4e:83:7a:54:3e:f2:ac:
6c:8c:5d:6c:13:29:65:87:ae:ab:c6:86:8e:93:22:
cc:5d:04:04:15:c4:66:29:46:20:a9:85:c7:f6:c0:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:CE:98:84:25:54:00:B9:08:2A:B4:4B:07:93:A8:6F:F8:CE:79
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a4:60:c5:06:86:3a:6e:b4:04:a7:d4:c1:f7:7d:a1:df:4e:
90:e1:51:b5:3d:30:9c:09:05:6d:ce:56:d2:4c:cb:9b:ac:79:
82:4c:83:ba:83:5a:a1:76:f1:ea:32:67:81:58:30:09:4b:4a:
00:86:e9:06:1b:58:c7:0c:35:9d:f2:eb:96:90:14:95:b0:dd:
75:71:19:c7:5e:f3:2c:71:6e:74:31:34:65:ee:f3:f8:d5:a0:
00:ba:1b:2f:10:c4:03:5c:fd:d6:9a:f5:12:1c:f3:2b:75:cf:
18:f6:ac:36:dd:33:97:d8:51:86:7b:a8:ec:5f:a6:ad:27:99:
d9:96:71:55:d1:5b:12:3e:30:6d:66:c2:2d:f0:1f:ef:50:18:
0e:cc:2b:37:22:20:71:d5:e9:e6:85:c4:a2:5d:c9:dc:c0:68:
05:aa:1f:23:3b:83:de:03:6c:1d:68:13:f1:52:ce:27:f0:37:
9d:c5:2b:4a:77:37:12:67:e1:0d:ee:ef:f4:0e:6b:41:5b:02:
14:98:f1:bf:b3:86:82:7b:ed:d7:3c:0d:5e:f5:0b:fd:8a:d2:
cd:9a:bb:67:f4:d2:61:90:46:8b:78:df:c5:6b:c6:10:73:6d:
51:61:fe:db:99:de:61:f6:f4:f4:37:ed:cd:96:59:b9:94:bb:
1d:59:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:09 2025 by rpki-client