Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: SBOLN6qNLjLywa5l8HSRgrvbOvUQMMfNduKmnHDijnQ=
Subject key identifier: D7:2D:E1:37:D7:CA:19:48:BA:D0:0A:9B:FB:73:AA:9A:36:B4:B4:CE
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 019A4D3D15DAF8DE99ED15374737BDE6E906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: YMf7Y7CNXEszRLdtLA1UvBeOTmc8sr3QiuuHBNsyRec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:15:da:f8:de:99:ed:15:37:47:37:bd:e6:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=d72de137d7ca1948bad00a9bfb73aa9a36b4b4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:32:ef:3a:d6:02:9e:ea:13:e5:68:93:66:
a5:7c:bb:07:0b:5b:a3:eb:7c:81:21:3f:66:7a:3a:
50:09:75:c3:d5:93:79:f0:bb:36:8c:d4:cc:ff:e4:
b4:43:4e:c0:65:70:a0:c0:be:a7:ab:45:d8:98:61:
a2:a7:f8:c8:20:02:b7:02:90:2f:aa:ed:e4:cd:33:
b2:88:a2:93:df:89:eb:48:04:0c:29:97:f4:a3:9a:
5f:62:c9:6b:a4:84:b3:b0:76:97:ca:83:24:f2:e0:
f2:eb:35:03:50:2c:97:65:e7:7b:71:74:f9:aa:87:
80:c3:89:c6:8e:8a:7b:27:1b:6e:25:10:01:c8:31:
63:12:2c:7d:48:04:9f:c8:83:bf:8d:46:8c:7a:0a:
9c:77:36:05:dd:24:ae:bc:33:87:c9:20:4d:eb:e8:
78:58:75:7f:70:e9:9c:42:93:fd:73:eb:9c:77:f4:
a5:34:14:c2:d3:58:dc:88:7f:4e:5b:0f:f1:36:e8:
4f:67:8d:5d:56:bc:2f:0a:23:54:01:ad:62:42:7e:
89:3e:4d:cf:3d:ed:00:49:ca:af:da:ac:c9:44:36:
9c:be:5f:33:fa:31:aa:93:b4:65:a3:56:4d:49:51:
bd:02:19:85:21:53:46:0f:82:ab:6a:d4:fc:7f:a7:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:E1:37:D7:CA:19:48:BA:D0:0A:9B:FB:73:AA:9A:36:B4:B4:CE
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:c2:92:59:b8:89:ff:14:10:ed:1b:98:0a:e2:3b:ee:d6:
df:23:b3:fd:37:d0:ea:72:4f:35:5b:61:85:ba:b3:63:9c:07:
a8:20:33:75:ba:6b:e4:9e:02:af:4f:08:1b:b7:26:70:ed:0d:
b6:8f:95:27:af:de:ff:1d:97:74:5f:e0:a6:2c:71:96:8f:3c:
81:e9:8f:5f:82:10:e8:2d:e6:f6:67:8b:75:89:aa:71:f6:26:
a4:2e:6b:c0:31:9a:be:ea:f8:33:a9:8b:7c:fb:dc:37:30:58:
fd:5b:ae:84:6f:56:ea:4c:8e:4c:e3:35:2e:d2:43:f0:8f:47:
2f:be:d5:d5:b1:e7:09:4f:51:61:0b:dd:a3:29:09:a8:54:36:
40:34:32:01:d0:b9:90:69:75:42:81:f7:de:d6:42:d7:bc:b3:
7e:13:b4:ea:4c:89:3f:12:aa:b8:12:91:e3:9e:56:6c:3e:f2:
70:a0:57:0c:25:59:c8:b5:6f:96:8d:79:c5:40:3f:df:7f:36:
fb:11:f4:49:08:c8:a2:2e:08:20:20:8f:b8:a6:0b:e8:39:44:
9e:ea:93:5b:40:22:c8:cc:96:f5:3b:c3:35:0e:e2:de:d4:bf:
2d:ad:3f:12:89:ce:a0:7d:04:9e:1c:40:2e:dd:33:76:6d:76:
73:bc:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:44 2025 by rpki-client