Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: dyDHUFjssAc7UsjK+nyF2gBU77mkViTwEAb/dKp0LOc=
Subject key identifier: B5:8D:26:A5:C1:F0:05:30:A3:F6:E9:CE:88:D4:43:60:4B:3E:A4:E9
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 019A50E409F51D783A118D2002887AEA7F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 0470
Signing time: Tue 04 Nov 2025 22:01:53 +0000
Manifest this update: Tue 04 Nov 2025 22:01:53 +0000
Manifest next update: Wed 05 Nov 2025 22:01:53 +0000
Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: tuS1/3titHR/4QSja5N6xnC6eEfWcgw/DtY4BstkZWQ=)
2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:09:f5:1d:78:3a:11:8d:20:02:88:7a:ea:7f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Nov 4 22:01:53 2025 GMT
Not After : Nov 5 22:01:53 2025 GMT
Subject: CN=b58d26a5c1f00530a3f6e9ce88d443604b3ea4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:63:d8:1b:46:7d:6b:7a:df:77:34:09:54:
19:3e:48:1e:a5:04:94:9f:8c:d2:57:b2:6c:89:c2:
81:0d:e0:cb:68:6d:13:35:c0:c0:f5:25:08:41:79:
8c:4a:c1:64:9b:d0:f1:9d:7c:f2:bb:f8:7d:d2:e1:
cb:c5:78:ba:c2:67:9a:42:75:8c:dc:e6:16:73:c0:
f4:11:94:85:c2:62:e3:10:90:93:96:5b:2f:14:9a:
cc:e7:34:a2:36:75:08:a0:35:bd:86:0b:d8:8e:92:
4c:58:28:fd:4e:6a:b7:04:48:6f:c1:c9:40:d1:83:
b4:4d:92:ef:d1:de:6b:16:30:bd:e1:2a:a0:17:d6:
5c:57:27:fc:bc:8f:89:c5:3d:88:1e:36:aa:bf:b7:
2f:a8:39:4d:77:e4:a6:0b:79:5f:54:5f:e7:6a:e4:
90:57:96:fe:48:75:51:b1:d5:df:72:d2:86:02:32:
66:9a:ff:c0:5d:4d:23:49:cf:54:bd:77:5b:b7:d2:
12:42:a4:2e:3a:88:68:a7:7d:f1:93:1e:f9:6c:06:
03:88:d4:e1:4f:ce:39:71:95:ff:77:da:18:f9:f6:
70:2b:58:49:58:26:4d:a0:0f:58:f5:90:cd:ee:1d:
88:d3:54:c0:d1:84:34:2e:d9:99:74:63:44:39:18:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:26:A5:C1:F0:05:30:A3:F6:E9:CE:88:D4:43:60:4B:3E:A4:E9
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:14:36:06:a2:37:f8:55:3b:94:db:af:e2:f6:9b:f7:d0:
3d:84:60:1e:2f:94:22:a0:7d:d9:c7:0c:a9:ea:be:46:eb:13:
3e:d6:b5:29:9b:ec:f3:2b:c9:19:0c:a4:9d:bf:b7:fe:da:31:
f1:45:27:d9:42:6e:31:c1:19:29:57:0a:2d:57:6f:2e:19:d4:
a3:51:bb:02:f8:76:07:eb:ba:01:2f:fa:c6:f2:db:15:dc:a1:
7e:92:f7:70:02:d7:bc:d2:15:00:41:af:f0:be:01:e0:f7:7a:
6f:1c:66:08:e0:a6:08:91:8d:5d:93:a2:fd:24:ab:6a:60:23:
38:bc:ec:51:5e:39:59:33:09:20:ea:26:ef:a8:51:8f:10:52:
36:e2:50:9f:2f:42:70:c5:2b:65:61:c9:d9:ce:6f:95:14:a1:
b6:8e:38:ee:a5:91:19:2a:97:14:28:c6:5b:87:7c:1f:24:a9:
98:ae:d1:ab:f1:10:0f:fa:41:76:03:b3:6e:9c:45:a4:cf:0f:
be:e7:63:5f:5b:ab:92:7c:27:2f:8b:16:7c:66:c3:fd:d1:9e:
63:25:26:15:f7:5e:9c:50:ae:e5:66:cc:dc:4a:f9:18:7d:da:
ef:03:a6:f6:50:aa:a1:89:cb:a2:0f:dc:ab:1d:0b:8d:2c:b3:
6e:28:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:39 2025 by rpki-client