Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: 7WVfMimOu2DI6x+VO1o9XRJCPI8cvt5yhYiqbweV9CE=
Subject key identifier: AF:4B:95:D1:3C:C2:B5:26:CE:33:18:E6:EA:39:86:4D:9D:18:90:E0
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019A4EF49BE5BC0C311108F22AC26905F3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1652
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: /eoDY2rat+rOhDuT7udl6lw0aYxf8WyTxouWlsMNp18=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9b:e5:bc:0c:31:11:08:f2:2a:c2:69:05:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=af4b95d13cc2b526ce3318e6ea39864d9d1890e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:c7:c5:33:99:47:ca:f1:7a:40:71:62:50:
47:f3:ff:73:f3:bf:59:b8:8c:9b:65:14:16:a1:2d:
d2:de:a1:ce:4b:64:2e:07:b9:e9:15:92:97:6b:14:
fb:07:a7:5a:08:08:e9:86:06:fe:3d:5f:f1:f9:18:
43:10:26:09:27:9a:38:5e:81:77:79:fc:d6:cd:59:
c2:35:40:c7:42:7c:db:6d:e8:3b:7b:e6:b3:f9:74:
22:24:74:7c:ac:f2:93:1c:e2:b2:e6:3c:11:85:7a:
9e:6b:1e:75:82:0c:d9:45:b4:f7:2b:bc:82:36:8f:
5f:5b:8a:e6:d7:31:8e:02:02:a9:e2:b7:49:19:3c:
97:0c:91:ac:27:bc:b4:24:80:5d:ef:88:33:30:76:
b3:3e:77:f6:ae:f7:e1:fe:bc:3e:2c:71:9d:bf:8b:
41:03:4c:ab:d4:b6:8e:13:9b:44:d9:29:06:e2:03:
5c:f7:63:07:5a:1e:3a:70:30:3d:82:5d:72:a3:e2:
fd:3b:57:2e:42:21:9d:db:cf:1c:07:04:f4:5c:ba:
1f:b0:18:07:fb:21:23:09:f5:a3:04:c2:e8:8d:04:
6a:2b:e3:d8:f1:eb:d4:ad:ed:79:d7:75:99:04:08:
b4:a8:d8:98:89:b8:01:b2:8d:fb:a4:0a:25:99:a7:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:95:D1:3C:C2:B5:26:CE:33:18:E6:EA:39:86:4D:9D:18:90:E0
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:3b:9d:48:54:0b:85:0c:f3:99:5f:24:29:91:47:77:57:
bd:57:29:83:bc:a1:59:b4:94:c3:ba:95:57:7d:16:2d:d9:b4:
89:db:0a:43:12:fd:08:cc:63:ca:12:f5:e8:46:e7:8c:75:fe:
f4:23:b4:16:ba:f7:05:2a:79:fc:d7:06:d0:70:f0:e2:5b:c5:
b9:85:24:c3:72:74:92:67:32:f4:b2:73:d3:75:81:43:e5:f0:
f2:7f:0f:eb:83:a0:ab:6a:c9:ea:a7:b9:16:9e:fc:20:c4:80:
5a:f1:b0:f0:82:f4:c7:d0:7d:4e:a9:79:33:41:22:8e:4d:1e:
67:ba:68:c3:88:e1:7f:db:ef:05:6d:84:64:f9:ca:70:ce:3d:
37:ce:4a:9a:84:8e:6e:ef:5b:32:85:bb:15:af:a4:11:8a:42:
58:f1:c5:12:64:ae:55:f3:96:38:3d:e5:c7:ba:81:75:1c:5c:
f4:47:62:2c:ad:27:89:36:48:a9:bc:53:7c:c8:59:7b:ef:da:
d0:a4:8f:28:92:03:e9:49:e8:5b:2d:80:a7:1e:aa:ce:5e:94:
7f:09:29:ca:90:58:6c:2f:7b:26:6d:4b:4a:4f:b2:ea:54:46:
9d:81:68:b6:68:8b:d9:55:cd:25:06:9b:fb:dc:0d:f0:4c:52:
5d:5b:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:33 2025 by rpki-client