Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: ZLFLZSHxEbP/wnuKIAJUs+xwKL74Fobsspt43Caowd4=
Subject key identifier: 02:15:BD:7F:CF:2C:1A:96:2D:7F:FF:8A:2F:A9:CE:A0:3F:47:07:90
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 019A5187CE95F2705E579BB5E8DC64D5A45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 0402
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: 04k5tw6C9uGBjd6sMeIxwKNk+GcvEL67ieEgvKZCXqw=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ce:95:f2:70:5e:57:9b:b5:e8:dc:64:d5:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=0215bd7fcf2c1a962d7fff8a2fa9cea03f470790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:11:be:25:62:01:82:c6:d4:6d:30:c6:87:
5c:e2:ba:5d:e3:ca:bf:6c:65:46:83:8e:77:74:ac:
60:51:89:52:c6:8d:5d:0f:b9:ce:83:fc:14:a9:0d:
97:ed:fe:12:e5:7c:26:ee:48:e2:2d:e8:0f:cf:61:
d4:91:6a:0f:75:78:45:e3:55:94:48:d1:81:6d:b4:
ee:16:19:4b:53:50:87:1d:f8:1d:f8:4c:bd:84:32:
d5:9c:f1:43:ca:0a:80:07:62:18:fb:06:e0:dd:a2:
48:ba:41:39:6a:db:07:1c:9e:4c:ce:49:60:ce:5d:
50:38:25:37:b1:e4:99:b3:6f:93:37:ee:8c:ce:ee:
e5:d4:01:4d:c7:b3:fc:48:df:72:ef:26:b3:3a:96:
74:ea:d2:83:f2:17:15:4e:29:20:05:a2:55:38:ba:
d1:50:94:82:5b:e1:c1:fe:a4:57:9f:3a:d8:2e:d0:
b2:74:d6:b8:de:5c:f2:47:c2:8a:f1:2a:b3:ce:ff:
98:bd:50:b4:b4:cf:b9:24:a6:50:d4:1d:d4:c4:81:
c6:5f:f7:67:3e:b9:61:c7:d7:cc:0c:b2:bf:bc:65:
0e:28:37:c0:b1:2c:33:bd:c7:9d:bb:4a:94:ed:64:
81:de:5b:d4:a3:ad:d4:7d:e4:9f:f3:29:0b:87:fd:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:15:BD:7F:CF:2C:1A:96:2D:7F:FF:8A:2F:A9:CE:A0:3F:47:07:90
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:a6:6f:6f:27:18:5b:37:52:e6:ee:4e:9a:a2:d9:26:83:
0a:d6:a4:04:57:b5:48:e9:b5:b9:e0:cf:7d:c0:bc:82:fa:96:
5e:75:d7:27:1a:83:25:46:db:bb:68:1a:12:47:27:dd:ad:dc:
fa:cb:0a:68:fa:72:22:89:2e:77:d9:5a:72:4a:df:67:3a:ec:
f3:f1:7f:b6:5f:18:cf:04:99:cd:7c:17:31:bb:be:54:ad:4f:
8d:7f:94:06:30:10:30:34:7b:2a:93:34:b4:3f:57:f3:aa:51:
43:d5:09:2f:0e:d1:bc:74:87:d2:0e:e2:13:76:34:30:78:1c:
40:ba:16:7d:10:70:ac:5f:a7:db:c1:f1:d0:7d:cf:cd:47:92:
d5:e3:6e:15:5c:75:39:ca:12:aa:a6:b3:e5:e7:94:80:f2:3c:
a5:c1:37:95:73:ed:1b:fd:1b:56:fd:35:18:86:ae:4f:e5:42:
5d:9d:34:47:3e:ea:ab:b8:7f:fb:a4:32:ad:f6:1e:ba:90:a2:
be:33:e6:ff:ee:87:64:c4:10:1b:9a:69:03:ef:49:f9:e5:eb:
dc:ce:7b:5a:af:3e:22:19:80:4f:ad:f9:aa:ae:a8:41:43:a9:
79:86:e3:ee:2f:69:f0:b0:20:2a:b0:00:ef:a8:6b:11:71:a4:
1b:09:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:37 2025 by rpki-client