Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: qxkSGD3T6eb+K7D2EyLyOvWGYfP+scSmltwHO1avmec=
Subject key identifier: 68:ED:12:BC:45:51:F4:A9:37:B7:D1:CD:D7:FE:27:E9:CA:2E:CE:54
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019A5187AF456C90E8FCDE2E0E05BB5B48F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 06B7
Signing time: Wed 05 Nov 2025 01:00:37 +0000
Manifest this update: Wed 05 Nov 2025 01:00:37 +0000
Manifest next update: Thu 06 Nov 2025 01:00:37 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: iew6rETSuCWJmZ1EjinGCwfOaAuZYBraNvgsqu2KtwI=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:af:45:6c:90:e8:fc:de:2e:0e:05:bb:5b:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Nov 5 01:00:37 2025 GMT
Not After : Nov 6 01:00:37 2025 GMT
Subject: CN=68ed12bc4551f4a937b7d1cdd7fe27e9ca2ece54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:ed:a9:bd:dd:e3:30:ce:24:8a:76:26:8f:
37:aa:c9:0b:68:9c:13:48:08:d1:0f:a9:90:53:a5:
1a:1e:86:ec:1d:6a:af:f6:c8:3e:7a:90:79:68:65:
bb:69:ac:90:b6:fe:ad:f9:0d:e5:16:57:bb:bd:2d:
08:a6:0d:f6:e7:5b:1a:6c:7d:e8:a7:9f:ab:fa:96:
e1:2b:bf:35:48:49:74:17:31:fc:11:c7:4a:24:27:
dc:85:4f:45:1a:15:ec:83:51:9d:36:af:a9:11:70:
ba:c2:c7:18:a4:b3:10:d4:27:15:03:4b:3c:3d:17:
2c:a3:c3:80:7a:9a:7d:9a:38:00:7b:41:7d:f5:00:
10:95:71:cc:0d:ac:04:9b:92:34:28:a2:1c:2e:95:
05:29:32:97:ff:7f:7a:be:de:86:19:3f:1d:f2:04:
0b:d6:39:27:b4:d8:f0:5c:c1:a9:cc:2f:fa:88:70:
a5:48:1f:c4:8c:59:b9:c9:a0:e7:9c:e5:f7:a3:d0:
14:2f:23:f3:ac:2e:3a:d9:67:1c:37:32:c4:86:e0:
58:ae:30:d0:26:3b:80:35:d7:db:85:2d:f6:9a:12:
69:04:1c:e2:b6:29:67:5d:0a:c2:d6:9f:99:94:a2:
db:58:42:8f:f8:78:17:f2:6a:d7:57:34:fd:93:4d:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:12:BC:45:51:F4:A9:37:B7:D1:CD:D7:FE:27:E9:CA:2E:CE:54
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:a7:17:4f:e7:93:2c:04:7b:b1:e4:d2:74:72:3d:be:78:
45:a5:6d:8b:84:22:4c:f5:86:67:5a:e2:cb:be:dd:95:ad:63:
01:18:4a:dd:48:50:4a:22:3c:c7:05:4a:e3:5c:ea:33:c2:50:
e4:a9:8c:2d:81:49:64:91:86:4f:e9:dd:83:89:94:37:c7:0b:
c0:e4:8b:e7:73:d4:3f:06:f4:0c:1c:0f:6a:ef:68:87:b6:02:
e2:4b:8d:0d:dc:08:df:fa:7a:11:df:47:58:a5:78:1f:14:c7:
1f:0d:7e:10:7f:8e:0c:e4:79:a6:d6:bb:2c:6b:b8:b0:9f:32:
64:a0:c9:f2:0b:dc:68:37:df:5d:f9:46:47:d5:3a:df:60:5c:
3c:d2:2c:34:72:6b:9a:4b:e8:a5:c2:ed:87:4c:8c:0b:5c:98:
8e:af:62:1a:44:3f:38:31:36:69:55:ab:7a:3e:ed:4f:8f:4d:
85:b4:b4:0a:b4:bd:a2:2f:1a:88:ba:13:8e:34:bf:6d:e0:85:
4e:2e:55:eb:0c:89:a5:43:28:05:99:7a:fa:26:e3:6a:0f:85:
f0:be:da:af:a2:a2:30:92:51:70:b9:3b:49:50:7e:38:99:ea:
71:f3:33:2e:df:1b:e3:9a:4d:e7:99:77:cb:76:77:6e:03:67:
eb:cd:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:44 2025 by rpki-client