Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: jY47is5Xq88oaw01MWQp+1hr0Nux1KtMEATsG9GebRA=
Subject key identifier: 36:BB:6C:C7:26:5B:CA:24:03:1D:76:A5:D1:5E:43:D2:29:AE:A7:4D
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019A4EF5DC64F14D29BBE7D6FF1C3AD6CBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0DB1
Signing time: Tue 04 Nov 2025 13:02:06 +0000
Manifest this update: Tue 04 Nov 2025 13:02:06 +0000
Manifest next update: Wed 05 Nov 2025 13:02:06 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: QcnZQdVl9X0HgsqCsYuYzrZK+ZwVPEIJ94Iv+8Lhg8g=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dc:64:f1:4d:29:bb:e7:d6:ff:1c:3a:d6:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Nov 4 13:02:06 2025 GMT
Not After : Nov 5 13:02:06 2025 GMT
Subject: CN=36bb6cc7265bca24031d76a5d15e43d229aea74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:7c:60:bd:6f:a0:74:79:9a:0e:3a:7c:2f:
07:03:f1:3d:b2:fa:78:bb:09:f1:13:09:63:a1:41:
52:b6:2d:d6:69:75:4f:79:ba:cd:39:3d:0c:4b:b3:
7a:17:0c:52:12:57:73:32:9e:96:bb:6e:84:f9:2e:
d4:6a:f6:21:32:85:b0:21:5c:73:29:12:75:46:f5:
ae:2e:f8:ed:a7:8e:0d:6e:52:b2:1f:0c:4c:51:40:
c5:ce:39:d6:43:a0:ca:d7:80:0b:01:20:35:be:a9:
ac:64:1f:00:15:63:4b:f2:60:86:f0:4e:67:21:16:
1a:05:dd:82:9e:ef:30:5f:0e:75:5c:fa:26:5c:0a:
cd:12:1d:91:37:02:54:f3:cd:41:19:f8:8a:d7:11:
99:f8:ec:28:ca:dd:b3:b7:ec:b0:e0:82:c5:2f:32:
ce:75:5b:bc:79:35:4e:98:dd:4d:c9:4d:49:4c:31:
97:f0:36:f5:14:35:16:a1:a7:e9:61:be:b4:1d:0c:
9e:69:82:29:18:10:19:b1:59:74:a6:ce:e8:1e:61:
94:e0:9f:2c:1d:43:7a:27:e6:98:2b:d6:25:ca:26:
2f:89:e6:22:52:d2:01:fe:51:49:05:1a:13:44:cb:
f5:ec:90:e5:0b:9a:62:fc:aa:87:db:9a:3a:85:d9:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:6C:C7:26:5B:CA:24:03:1D:76:A5:D1:5E:43:D2:29:AE:A7:4D
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:7f:42:22:00:c3:06:90:07:a9:80:d0:aa:69:cf:62:28:
9e:79:be:63:cf:d1:d0:45:fc:bf:7f:92:6d:43:62:8d:c0:94:
51:44:ec:0c:c1:d5:cf:8f:5d:ca:0c:28:b5:ee:71:aa:59:06:
90:ff:2f:f8:7a:0b:53:2d:ac:fb:10:8a:97:0d:7e:59:83:41:
b6:ba:f8:b9:2a:21:32:87:b9:73:bd:7a:80:27:b7:92:87:c4:
cd:31:7d:e1:6b:93:07:2a:f5:70:d7:33:ea:ed:6e:4c:7f:78:
fe:d3:57:4c:54:d9:1a:01:1d:5b:9c:7a:58:4c:f7:61:ff:f4:
3f:dd:92:c3:92:af:d8:b1:4d:1d:0e:b6:27:33:3d:9f:1b:06:
0e:b0:d1:26:14:6e:7d:2c:cc:12:75:7b:b3:1c:ed:70:91:10:
0c:e7:b7:32:e0:ed:18:5a:72:e3:51:65:e0:1c:58:73:26:3e:
59:7f:b5:f3:b8:e5:d3:0a:0b:f2:fd:b8:3c:a1:c3:8e:70:77:
23:26:6f:88:48:f7:1c:31:22:a0:bc:63:c4:b1:ba:1b:2f:98:
9c:45:78:63:e6:9a:1f:42:cb:33:4e:eb:78:0a:92:82:aa:08:
f0:a3:de:cc:8b:63:5e:fd:c9:fc:d4:de:cf:04:a4:cc:dd:62:
97:58:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:21 2025 by rpki-client