Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: aJnELKO+PwfBMEaEWRiRdd3vAc2ODOrM3v6AvxbhTi8=
Subject key identifier: D6:FD:E3:31:8A:BC:BC:9F:B1:B4:F7:7F:5F:32:A7:3A:51:03:EA:66
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 019A53E3F7032E3FDEBC2E8AF419B52677CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 088F
Signing time: Wed 05 Nov 2025 12:00:39 +0000
Manifest this update: Wed 05 Nov 2025 12:00:39 +0000
Manifest next update: Thu 06 Nov 2025 12:00:39 +0000
Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: fsVKYWCYGyWrI2rv0NNLAyb9xqlUPTlBq9YFMLqPgNk=)
2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f7:03:2e:3f:de:bc:2e:8a:f4:19:b5:26:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Nov 5 12:00:39 2025 GMT
Not After : Nov 6 12:00:39 2025 GMT
Subject: CN=d6fde3318abcbc9fb1b4f77f5f32a73a5103ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:e9:dd:12:9d:5f:fc:a2:5d:3f:7b:b5:39:
ca:01:23:b6:2b:9d:f1:3f:9f:66:11:01:84:22:31:
38:1f:68:f0:6b:d6:1c:3a:c0:41:18:3f:ef:fa:d1:
bb:d3:6a:0b:ed:bb:d1:2a:e2:dd:0b:8b:b6:1c:9d:
c8:7b:bc:f3:e1:ee:2a:f2:e2:d5:b7:38:31:e6:87:
fe:e2:a1:c8:b7:38:65:7e:03:26:af:36:83:c2:fa:
b1:8c:83:32:26:f1:72:ee:96:22:2d:b6:fc:33:ab:
a2:4d:49:d9:1b:96:68:22:91:78:51:51:30:23:ca:
4f:5c:12:57:13:84:a9:d7:75:69:dd:3f:49:43:cb:
83:2f:c2:12:64:80:10:6d:1d:0a:5a:9c:f0:2e:21:
d3:ce:06:71:7f:54:5b:5d:10:04:0e:36:b1:c4:8c:
4c:76:3d:1e:89:de:51:a9:60:ed:0d:5e:79:7e:29:
fe:42:4c:46:92:a7:89:0d:22:a2:bc:85:93:04:3a:
08:0d:43:ed:79:93:ba:01:5a:e2:6a:a0:fa:d2:00:
a2:d6:53:20:f7:6c:c7:ca:ab:f3:e7:45:5f:6d:8c:
1f:c9:a0:c2:5e:6c:91:69:1d:e4:c4:f8:6f:f7:38:
07:40:85:db:a0:89:d4:7e:82:13:27:92:b8:bb:d7:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:E3:31:8A:BC:BC:9F:B1:B4:F7:7F:5F:32:A7:3A:51:03:EA:66
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ee:93:38:1b:c9:a7:12:66:20:b4:2e:13:0b:47:2c:6c:28:
59:f2:a2:20:7b:39:fc:92:8e:22:6b:39:2a:aa:dc:17:82:d5:
a3:35:37:5e:cd:3e:9d:da:85:7d:f3:95:e4:8b:18:83:dd:8c:
17:45:35:c6:71:2f:af:be:f7:01:3f:13:17:e8:a4:f0:96:18:
95:9c:a1:ae:e0:86:b1:a8:b3:81:cf:0e:55:16:8d:d9:69:4b:
80:ff:66:ac:d4:84:6d:a7:d3:a9:c7:8b:ed:6c:9c:e3:c2:da:
50:8f:de:9b:82:94:8c:83:7a:84:a9:e2:44:d8:db:88:7f:52:
6b:0c:7a:f3:2c:9b:28:65:80:db:79:2c:e2:02:9a:88:8b:f1:
d9:e0:9c:e2:4d:12:c6:a4:8d:69:e0:27:3e:da:0d:05:5d:3e:
0d:e1:9b:ac:7b:28:63:7d:51:5c:be:e6:b4:88:26:f4:3c:3b:
39:d1:ed:1b:8f:66:a5:a0:99:e6:b3:93:df:ba:fb:48:34:03:
29:df:72:60:6c:d8:35:1f:8f:e3:41:79:ab:e1:bc:d7:ae:39:
f6:e6:4e:98:9f:14:91:08:f8:db:37:67:07:7e:53:aa:0a:3d:
6a:97:be:03:14:d9:7e:68:f1:41:29:8b:4f:21:9e:62:06:72:
c9:31:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:05:36 2025 by rpki-client