Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: KOCLGymxqbIumMtVF1IoOqWkfKGoTMeqUXTbaKcy+xA=
Subject key identifier: 3F:BC:A7:16:35:70:F8:5D:9B:92:77:F6:E6:4D:F6:CD:BF:78:00:60
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 019A29304ADA8878CFC764EDF1CA7373F8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 0207
Signing time: Tue 28 Oct 2025 05:00:21 +0000
Manifest this update: Tue 28 Oct 2025 05:00:21 +0000
Manifest next update: Wed 29 Oct 2025 05:00:21 +0000
Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: V908/4SSXNdFEWBq8fFSl0EFgWqAHc096AxnB1gR/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:4a:da:88:78:cf:c7:64:ed:f1:ca:73:73:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Oct 28 05:00:21 2025 GMT
Not After : Oct 29 05:00:21 2025 GMT
Subject: CN=3fbca7163570f85d9b9277f6e64df6cdbf780060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:84:34:d5:88:dc:62:e4:c5:eb:26:1d:08:
e0:1a:ff:c7:9d:4a:cf:cd:66:c4:74:2b:3e:c2:0a:
c6:b0:4c:e7:d4:f9:ac:d9:e6:99:eb:06:c6:a2:32:
46:1f:5e:22:50:8e:dd:db:04:dd:8b:6e:46:14:e9:
5f:0e:01:7e:72:90:d0:7f:97:a7:a5:4f:fd:64:b3:
a8:fe:74:b1:af:29:cf:43:82:b8:88:18:85:c4:2b:
cb:46:ea:e2:72:23:1d:17:48:c2:a6:e2:e3:67:5f:
e4:86:c3:71:4c:c9:16:08:0c:2b:01:cd:ff:fc:d3:
30:d0:6a:e4:48:a5:95:59:3f:b3:5e:1c:bc:8d:70:
dc:1c:21:43:43:98:f8:d4:38:d1:fa:f7:2f:cb:bf:
78:b0:77:0a:b6:a3:ae:50:a3:81:e2:80:0b:6d:6b:
ff:51:2b:22:6a:59:d6:b8:bc:d6:76:42:9a:b8:7d:
85:c6:7c:16:18:8c:8f:90:78:db:bd:8f:80:18:a8:
06:d8:2c:38:13:5a:70:f0:14:34:1d:6b:41:18:7e:
51:13:01:d9:e5:2f:71:dc:6c:99:51:f0:8f:43:d9:
b4:55:1a:fd:bd:cb:6b:de:86:98:1d:88:41:bc:0c:
7c:7e:2f:2a:66:a7:21:04:99:0f:40:28:55:74:c1:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:A7:16:35:70:F8:5D:9B:92:77:F6:E6:4D:F6:CD:BF:78:00:60
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:56:aa:e2:5d:98:70:0f:ff:9d:9f:67:65:52:f4:9d:98:7b:
56:1f:b2:eb:39:9b:5e:94:e9:91:90:03:88:91:ea:53:24:02:
53:d4:47:7d:0e:e4:08:10:df:95:40:e5:c6:cb:d6:6c:52:41:
c0:71:c7:69:77:07:4c:8b:35:a7:b5:9d:58:1e:34:d3:7c:c5:
ae:0d:26:01:68:69:f0:93:70:25:d7:56:e4:5e:6e:b9:0b:39:
12:17:61:bd:10:a8:80:d8:e8:8f:47:a2:9a:5e:df:73:5d:93:
1b:87:a4:9c:a5:51:0c:fd:19:81:f2:46:46:ca:5a:d1:91:92:
69:74:cd:2b:e6:67:e4:11:c1:8d:b9:25:b6:8b:9a:a9:79:f9:
35:75:d4:43:87:c2:8e:12:32:35:f8:fc:f1:57:b6:c4:d7:97:
b4:81:0e:f3:a2:b1:8f:28:15:92:ab:a3:69:92:65:97:7c:cb:
ec:0a:b2:29:6a:9c:80:a7:20:f3:af:10:c8:6f:de:7a:19:af:
6e:c6:53:d8:0d:96:b2:80:ad:7b:4b:e4:a6:18:1c:0b:05:6f:
e9:6b:b2:c0:7f:cd:08:7a:e0:12:fc:1f:cd:29:30:ab:98:ee:
81:65:76:a7:40:c0:e2:8a:06:59:69:33:5d:64:00:50:33:ad:
4f:e1:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:54 2025 by rpki-client