Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: 97ThnN1efsAP8qvBfb9Jb5B8NP+wb+0kJhYbxV1E+qk=
Subject key identifier: 11:5B:54:BF:AA:15:78:92:02:A3:08:E0:72:BE:68:D5:14:35:2E:3D
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 019A4D73DB142B2931C4537BDBB8D64D87B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 1539
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: tiBrsFNJqKsl+R2kcUHeghLjqPgd1X+P/TyVo1lkC3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:db:14:2b:29:31:c4:53:7b:db:b8:d6:4d:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=115b54bfaa15789202a308e072be68d514352e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:cf:e2:12:8a:2b:26:76:03:b2:7d:7e:b6:
9f:f6:79:ca:ef:b0:64:f0:3f:81:74:d2:af:c7:5a:
14:82:cc:d2:1a:51:df:1e:3a:ef:d6:39:6b:17:7c:
1b:73:25:53:8e:5c:61:6d:78:a7:dd:8f:f8:12:e2:
f0:60:81:4d:03:a4:9e:8a:8d:a5:ed:e4:6b:91:14:
7e:9c:a8:ce:46:e7:3b:5b:2c:72:59:49:54:7b:78:
22:21:53:36:a6:a7:60:71:2a:20:6e:da:dd:8c:fe:
17:01:6c:bc:9f:70:39:9d:f9:e5:f9:7f:6a:aa:ee:
9d:f8:bd:62:4f:46:2a:b3:da:8d:bd:84:28:87:df:
0f:34:21:bd:0e:e5:08:f0:dc:3d:0c:a4:f7:86:ee:
6b:84:38:ef:4f:7c:5c:db:bb:a8:2b:5a:73:f9:76:
7a:7e:84:12:50:fa:31:b2:4f:61:7b:44:08:7a:ba:
bf:76:15:4a:20:ab:dd:25:07:d1:e3:a3:f1:a0:bd:
5f:cc:7b:21:a3:e4:45:0d:d6:d1:e3:b1:da:81:95:
75:9e:9f:40:3d:88:9c:1a:3f:1a:1a:73:0d:06:90:
43:b4:77:e3:2b:8e:7e:43:c9:03:0c:44:1d:b8:ae:
b2:19:c9:75:7a:26:61:e1:be:69:c1:5b:1d:5a:49:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:54:BF:AA:15:78:92:02:A3:08:E0:72:BE:68:D5:14:35:2E:3D
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:b8:96:02:bc:dd:84:fd:ae:7e:c8:52:5b:3a:62:ff:74:
b5:b7:58:9c:a4:b6:2b:51:78:34:d5:89:00:60:eb:02:e6:d1:
c4:4f:3b:d6:f1:ba:c0:e8:58:4d:5d:db:0b:25:1e:29:f9:9d:
8c:35:4d:f6:c2:24:56:cd:fd:b1:5c:c1:9a:6f:99:49:75:eb:
d3:79:c6:e6:1f:7a:a0:8f:e3:f6:a4:ae:f8:5f:08:df:a1:77:
0d:91:e1:6c:4e:b9:78:ec:55:50:77:a0:12:9a:7d:6f:d8:dd:
37:ca:02:49:cb:e4:b6:fc:80:55:d5:8f:13:db:2e:d8:a8:92:
66:b7:53:e5:5d:41:15:43:58:9e:d8:16:2a:50:20:b7:9b:6e:
93:8d:a5:1c:a9:49:c9:87:dd:40:57:38:44:dd:65:a3:3f:ca:
be:04:7f:0f:78:66:a5:fc:a5:51:53:2e:9e:d6:0f:fb:dc:54:
eb:23:fc:01:29:98:23:f0:d6:ac:84:76:18:55:bd:96:c9:98:
d6:2c:2c:5a:6b:75:82:a7:f0:bd:df:bf:77:58:62:c1:3a:e9:
d3:90:e4:ea:34:3b:8c:4c:dd:0c:01:ca:69:f2:3a:08:e5:82:
02:7a:33:33:db:2c:64:48:c2:6d:f3:95:ae:ae:d5:a0:99:9a:
ef:7f:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:40 2025 by rpki-client