Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: /9GWqWE8YnBh2/nkOI1Vpbc6LGq7YJO/4ki/mmo5avM=
Subject key identifier: 64:7F:1E:FE:B0:47:87:7C:F4:1C:2A:F1:B1:58:26:FB:C6:38:74:ED
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019A50073DCC1F0CFC97556492552EC83561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 18:00:43 +0000
Manifest this update: Tue 04 Nov 2025 18:00:43 +0000
Manifest next update: Wed 05 Nov 2025 18:00:43 +0000
Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: LrwrAIRpIYysActWtmP0IYb6VXBHlnAMaEdA4nB3mys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:3d:cc:1f:0c:fc:97:55:64:92:55:2e:c8:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Nov 4 18:00:43 2025 GMT
Not After : Nov 5 18:00:43 2025 GMT
Subject: CN=647f1efeb047877cf41c2af1b15826fbc63874ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:b7:a3:db:4d:54:2c:94:63:bf:56:34:ed:
45:ca:e5:7e:23:ba:8e:3b:1a:18:2f:11:ef:e6:b2:
b6:f0:af:e2:f5:a8:6e:83:9e:1d:78:95:ab:e1:59:
d1:ec:1c:7b:27:cc:54:80:3b:5b:e9:0a:7c:11:06:
d4:10:95:ed:e9:82:4b:b9:3f:e6:07:e6:5d:71:8d:
40:31:3d:27:5f:b8:c7:44:51:b4:31:8d:20:06:0a:
0d:3b:e3:65:9b:0b:78:5a:b7:d4:f9:de:60:be:01:
24:65:c7:b2:bf:45:6f:5a:54:da:17:d5:a8:d6:9a:
c5:64:a9:3f:0c:66:9c:c2:27:2b:ca:bb:82:d6:dd:
af:4c:0a:87:fe:f8:7f:6b:b0:9f:ee:1c:d1:91:b2:
00:9b:9f:9e:d6:17:b6:3c:69:b2:45:99:86:a8:94:
3c:f9:b4:e4:28:c1:9f:ac:29:e0:a8:59:75:14:c9:
8c:28:07:4c:78:34:f7:d7:1e:37:69:06:04:72:94:
fc:bc:09:96:0c:e1:7e:31:b6:17:8a:61:48:53:8f:
1d:23:4b:75:1e:33:a0:47:ef:89:2e:42:4a:e8:ae:
cd:e1:dd:3f:0a:a2:52:5e:0b:b7:1f:44:ac:3a:e0:
c2:08:32:18:84:19:21:f5:68:e0:c0:ac:4f:57:83:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:1E:FE:B0:47:87:7C:F4:1C:2A:F1:B1:58:26:FB:C6:38:74:ED
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:e8:66:f5:65:ca:c3:c1:79:bb:c5:39:f5:ca:3f:d8:44:
3a:37:fc:7a:44:38:3b:e6:1c:7d:1e:e3:60:b7:69:19:b1:e3:
87:a5:43:cc:6d:e0:9f:0d:04:60:96:a6:cf:8d:1d:7b:11:25:
a6:b6:64:76:f1:73:77:dc:d7:2c:28:86:a2:68:44:d0:a3:96:
3a:1c:60:43:ec:39:7c:8e:c8:78:a8:d7:be:64:71:48:55:6d:
b5:52:58:43:9e:c4:da:09:a9:77:7b:cf:89:e1:40:b1:89:47:
9d:1b:5b:86:21:ad:c4:83:49:17:00:41:29:5d:ca:8e:94:2d:
fa:c1:3a:fa:fb:ee:ae:12:ce:9f:e5:97:ca:cd:86:1a:cf:e2:
cb:d2:cc:a4:9a:04:49:bf:27:3f:67:d7:7a:6a:21:b6:2a:2d:
40:0d:c4:e2:b3:bc:3f:65:8d:77:4e:3a:5c:0b:3a:d2:e0:75:
21:c5:c8:30:6b:4d:85:90:bc:b0:9a:02:21:83:96:a3:dd:73:
7c:7d:e6:47:58:79:49:82:d0:56:a1:3e:79:b2:44:ca:4b:ef:
6b:99:9a:50:62:fd:36:a3:f1:d8:66:2d:61:5a:07:2c:dc:96:
dd:f0:50:d1:eb:80:1a:2e:38:81:7e:51:1f:16:7d:f9:fa:76:
1a:c7:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:57 2025 by rpki-client