Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: AKb09wVvGeMMPTf3nm7a+1HknGZpPp7zz5HlS+EpE70=
Subject key identifier: 32:A2:6F:2F:E4:68:1F:3A:65:E5:65:3C:B1:1E:82:E5:9C:60:D7:45
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019A50E2D83BADF2424926BDD09FC6C25E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 22:00:35 +0000
Manifest this update: Tue 04 Nov 2025 22:00:35 +0000
Manifest next update: Wed 05 Nov 2025 22:00:35 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: 3Jo4luAs4gsGDmCktYHYluArP8Rx9rTdakUP0NNdY6A=)
2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d8:3b:ad:f2:42:49:26:bd:d0:9f:c6:c2:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Nov 4 22:00:35 2025 GMT
Not After : Nov 5 22:00:35 2025 GMT
Subject: CN=32a26f2fe4681f3a65e5653cb11e82e59c60d745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:c1:a1:68:f1:ca:b0:e8:28:29:0a:fd:5c:
24:f0:3a:b0:d6:bc:34:52:3f:2a:94:e8:54:38:14:
70:5c:ed:27:3f:4f:95:d2:e5:99:d4:78:c1:a7:22:
df:4a:74:e0:62:a9:45:c1:72:b8:6e:cb:50:29:a4:
b1:2d:42:60:ee:48:7d:ba:c2:db:b6:7e:7a:b0:fc:
e5:33:3b:58:19:65:e7:b8:de:97:e8:15:f5:47:f7:
0c:a0:ef:3d:e2:29:70:a0:8c:2f:5e:92:fa:5f:57:
6f:94:bb:bd:75:18:20:46:cd:7d:f8:50:91:7c:a9:
f2:a9:99:d4:ac:1f:84:ae:cf:3f:4d:f4:1e:17:b9:
7b:d0:40:f8:69:b3:a3:49:a6:73:de:b3:ad:ff:7c:
cf:4e:32:31:8e:d9:61:d9:ed:b0:18:7f:4e:54:5a:
3e:2c:aa:a2:8e:5a:fa:63:fb:49:00:8d:14:9f:cf:
c2:2e:a2:47:e4:90:cf:71:ea:bb:5d:52:ac:43:32:
bf:0b:7e:6e:d5:b0:b2:47:2a:4b:88:03:47:7c:24:
f9:d3:44:08:c0:bc:88:67:e5:f1:92:aa:cc:45:68:
c5:3c:a7:14:8d:b5:96:dc:9f:75:34:f1:c8:43:35:
5a:47:f6:0b:37:db:ea:82:39:1f:bc:63:68:71:0d:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:6F:2F:E4:68:1F:3A:65:E5:65:3C:B1:1E:82:E5:9C:60:D7:45
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7b:7d:f8:9f:c7:54:8c:05:3d:ad:dc:59:e5:ac:51:c7:20:
19:75:19:b6:8f:46:ff:b8:e3:df:6a:a9:57:c9:d7:9d:89:c9:
53:3d:b9:3d:ed:4f:19:ae:94:a2:da:d0:d5:b6:f1:21:12:78:
86:2b:94:cd:9a:58:d0:74:d7:70:74:07:9a:3f:1c:50:8b:ee:
7d:19:68:77:95:d9:1c:13:6a:63:71:92:94:63:e1:e9:10:af:
c9:3d:aa:af:92:7b:b5:5f:8b:d9:05:e7:bf:95:d4:2c:35:12:
eb:e2:be:b8:8f:89:7e:7b:1f:54:07:a4:8b:4f:ca:40:1a:16:
87:58:c9:9c:92:9f:d4:b4:88:3a:21:eb:ba:00:36:63:93:ef:
ee:c6:5f:13:d6:2e:06:67:8d:f0:dd:54:d9:77:f2:eb:2f:06:
62:bc:ae:41:6f:6f:fb:f4:63:ec:71:6d:9e:88:57:cc:19:8b:
84:4f:bc:72:71:4a:5a:fe:5b:b2:b3:fb:a3:91:c5:0f:b3:91:
2b:61:bc:04:fc:3a:d5:53:67:2f:0b:ef:ca:da:8f:7d:48:f3:
ee:aa:31:2e:50:94:ce:67:d1:55:f8:76:04:d1:e9:73:38:d8:
84:34:b9:8a:99:9f:f4:3f:5a:a8:30:92:dd:78:cd:c2:4c:88:
98:8d:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:32:33 2025 by rpki-client