Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
File: aKUCPY4CESaZfXkmpHcBYIqs48c.mft (raw, json)
Hash identifier: ATPa2cYkI1zrmBZhWirDdCAcnE2L+fVoqSKBZ8sAsWw=
Subject key identifier: E8:91:D4:9B:31:0C:0E:94:C5:62:69:47:7F:56:46:90:CC:8C:81:8B
Authority key identifier: 68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7
Certificate issuer: /CN=68a5023d8e021126997d7926a47701608aace3c7
Certificate serial: 019A4D73AA262136E5FC08532E018237726D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
Manifest number: 087D
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: aKUCPY4CESaZfXkmpHcBYIqs48c.crl (hash: C8nEukdkxofaAgMzHnT3/E55vPydLcKcWwTktS9zVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:aa:26:21:36:e5:fc:08:53:2e:01:82:37:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a5023d8e021126997d7926a47701608aace3c7
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=e891d49b310c0e94c56269477f564690cc8c818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:34:d9:02:8c:1b:48:d1:9f:29:30:67:a1:
ed:a0:45:bb:f3:3b:77:49:4b:f7:b7:8d:ad:77:61:
ac:88:d0:ad:18:4a:e3:9f:5a:6a:ad:c5:b8:2e:d0:
a6:52:ae:76:7c:97:49:21:e8:a1:ea:b8:ac:94:9d:
b6:29:05:9a:b2:14:fe:36:e6:c8:14:89:67:8b:72:
4d:32:9b:51:47:c9:d6:21:df:49:8b:f2:28:58:a4:
45:91:ba:4c:98:d5:9f:a5:41:78:5f:ac:a5:fc:77:
8b:a1:df:4f:0b:b4:92:42:9e:9a:64:95:70:5a:b5:
89:0f:3b:dc:2d:19:d3:ef:7d:83:5d:a0:08:c0:30:
f8:3c:56:86:fc:3a:9b:9a:00:7f:c2:56:f2:db:2b:
66:90:b8:a9:bd:1d:c9:40:b8:15:5f:ce:ab:de:aa:
88:4c:e9:37:82:61:f1:60:1d:41:80:de:06:5d:3e:
e1:22:80:54:0f:fb:c7:6f:45:b2:05:d0:3e:39:4b:
70:3e:5a:e5:19:c7:24:3c:96:c5:d7:b7:99:aa:7e:
e2:3c:3d:ff:da:5b:68:43:69:d6:f2:61:40:98:a3:
b7:cf:15:8e:bc:76:e9:3f:39:ce:64:ae:6f:fd:8e:
98:cc:07:ea:65:76:e9:bd:5c:32:d5:3d:16:5b:6e:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:D4:9B:31:0C:0E:94:C5:62:69:47:7F:56:46:90:CC:8C:81:8B
X509v3 Authority Key Identifier:
keyid:68:A5:02:3D:8E:02:11:26:99:7D:79:26:A4:77:01:60:8A:AC:E3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKUCPY4CESaZfXkmpHcBYIqs48c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/860beb-2edb-4ce0-a55e-8481e6c33e3c/1/aKUCPY4CESaZfXkmpHcBYIqs48c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:c9:bc:71:e9:c7:5a:c9:76:86:0e:4a:48:9e:d8:53:16:
5e:b5:ca:b7:8e:16:e6:ff:36:09:a5:48:2f:15:6d:5d:15:8b:
8a:11:3f:3f:c2:78:b7:7c:06:f9:a5:b8:49:d6:5e:1c:64:b2:
5d:cd:cd:2a:65:af:8b:43:ec:f5:5c:5f:77:35:ec:96:2f:23:
b7:d7:45:fd:47:56:61:79:93:5a:dd:8f:cb:82:e3:a0:65:39:
cf:b2:18:c5:01:aa:c4:b3:d1:e8:64:d4:89:9a:c6:16:b7:f7:
97:ec:c4:1b:d7:4e:47:ab:3e:5b:63:b3:53:38:c7:c6:32:63:
4d:4d:e8:8f:21:aa:e0:5a:5f:0a:c1:09:7e:8f:43:69:a0:d9:
03:20:78:4b:7a:18:8b:28:9d:0f:28:81:ab:77:96:77:7a:97:
6e:89:6d:62:07:b8:1c:03:22:ea:82:8c:5c:b2:7b:49:41:0d:
e4:a2:21:e4:69:df:73:fd:bb:18:f3:69:8c:d8:3a:17:73:f2:
1b:23:bf:2a:91:c7:2a:54:6e:53:52:e1:38:31:5a:a0:3b:7e:
96:a3:cb:6d:3b:7b:ac:59:3c:40:75:63:bd:fe:9a:27:7e:af:
02:71:0c:38:b4:de:c0:1b:91:43:15:88:c0:b2:aa:88:16:5a:
9c:f9:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:44 2025 by rpki-client