Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: h6uqm4Be6vt9+ku8ZDe8ksucuTlmhtj7C3wo06JbQpk=
Subject key identifier: B8:11:19:5C:EC:BF:A7:F2:20:53:2D:D7:2A:04:0A:74:FB:F3:99:2D
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019A4EF5BC1C70CC71231DA9D870DBF77CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 12D6
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: dG0aEovXJZS8iIbz2W2tzE6zKwI3eap1xHw+80UlSlU=)
3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bc:1c:70:cc:71:23:1d:a9:d8:70:db:f7:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=b811195cecbfa7f220532dd72a040a74fbf3992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:e5:22:64:e7:40:88:eb:44:c6:c5:94:7a:
03:6c:93:36:21:d1:db:82:f6:a9:89:54:98:7f:62:
3c:8d:99:d8:40:0d:e7:64:68:2a:07:19:46:42:53:
b1:3d:dd:25:46:6d:a5:be:8a:06:30:ea:08:05:e4:
63:9e:aa:f5:59:3a:18:86:5a:6e:cc:4b:08:2f:af:
0f:2f:56:94:a8:0c:72:74:fd:b8:bf:58:b6:a7:99:
59:a0:05:4f:48:e0:3f:05:1a:78:a7:06:fb:af:83:
90:ce:8f:58:ba:ab:d7:7a:5d:25:db:aa:39:f8:bd:
52:37:2c:db:43:a3:2c:29:7c:9e:c0:b0:25:07:ba:
f1:82:a9:1e:bb:c2:08:e3:e8:09:96:4b:fb:43:ed:
42:8c:de:ac:bb:02:4a:79:17:5c:8e:47:fd:36:1a:
75:28:d4:1d:b2:cb:d4:cb:f3:75:f5:fb:ed:47:6a:
e3:41:de:50:d5:5b:f5:bb:0c:40:89:ef:84:b0:eb:
fb:b9:e4:3c:96:d2:fa:08:f6:2a:b0:ff:e3:ab:61:
ea:5b:72:54:5c:69:ac:b5:7f:b1:73:9a:85:78:25:
e7:fd:62:50:ab:9d:a0:5f:00:65:3b:4e:31:9c:87:
0f:f7:00:cf:81:0d:3e:a8:a6:07:55:51:56:1f:c6:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:19:5C:EC:BF:A7:F2:20:53:2D:D7:2A:04:0A:74:FB:F3:99:2D
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9b:c0:a1:78:f1:51:0d:47:23:90:e3:5c:83:3a:bb:a9:83:
56:d7:d9:b7:53:14:a8:d2:48:87:cc:71:c6:fd:54:50:31:1e:
ad:2f:51:8e:07:64:e5:19:02:0a:ef:44:0e:a3:46:55:67:0f:
4f:28:10:4e:5e:fc:e3:12:c9:8f:44:6e:2d:73:5a:80:6f:03:
3f:09:46:3b:5a:f6:8c:cb:1b:42:e4:27:e7:08:c5:b6:5f:b5:
1a:4c:c6:12:f8:11:57:de:d9:ef:d6:3c:38:72:4b:4e:fd:1e:
7e:b5:09:46:d4:ce:56:d4:db:05:3a:a0:b5:fe:d2:7a:cd:04:
45:59:4d:69:c9:06:78:b0:dc:a5:3f:0f:2c:fb:5b:15:c2:de:
79:e6:09:cb:a3:17:d9:55:c1:47:22:e1:11:0e:3f:f9:f4:07:
0f:19:24:9d:5e:6b:dc:89:74:a1:96:ef:98:9f:58:b3:b9:63:
3e:c9:0f:e6:c2:7a:6a:85:39:c1:74:f9:13:7e:3d:e5:b3:34:
fe:7f:10:c4:f5:47:b1:f4:0a:36:f9:c1:47:5c:5e:56:e2:2f:
47:3e:69:36:b0:d8:6f:83:5a:4c:6a:d8:8f:15:67:5b:b0:3a:
1b:f4:12:e6:52:16:0a:48:96:ab:a4:14:2e:fa:a6:31:e1:06:
4f:e7:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:35 2025 by rpki-client