Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: yIah6QQxuVznXJmrywNxgkHzaZUpF5w4OzIIsNX2oHU=
Subject key identifier: 6A:89:8E:92:69:23:F3:AA:2C:A9:6F:58:B8:AA:13:69:21:75:64:B0
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019A53082F12D7AD5005B69D5D8FEB5B98B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 01F4
Signing time: Wed 05 Nov 2025 08:00:36 +0000
Manifest this update: Wed 05 Nov 2025 08:00:36 +0000
Manifest next update: Thu 06 Nov 2025 08:00:36 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: AvYG+SCeNwebgdoV7PYnsxY+IbJGKiLpDY9hh+LoVJ0=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:2f:12:d7:ad:50:05:b6:9d:5d:8f:eb:5b:98:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Nov 5 08:00:36 2025 GMT
Not After : Nov 6 08:00:36 2025 GMT
Subject: CN=6a898e926923f3aa2ca96f58b8aa1369217564b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:b1:bb:d9:f9:e1:fb:44:61:cd:ce:dc:0d:
2f:95:1e:24:39:d7:f8:1d:8e:87:cb:54:ff:33:ec:
54:fc:fe:40:0a:ab:e9:61:06:04:11:f5:f3:66:17:
60:09:17:5b:9f:2a:40:e6:f6:72:1d:03:fd:3f:08:
46:eb:5c:b7:20:a8:3b:5f:87:87:e1:99:b8:ee:87:
bf:1a:0b:2f:9b:68:c1:0c:11:81:88:16:d4:0f:02:
1c:08:d2:d6:7b:0b:f7:73:75:ee:bb:23:c9:b5:18:
02:22:ad:9f:d5:9b:03:20:4a:ff:76:0e:f9:41:ce:
f3:87:32:07:8a:85:1e:35:cc:79:00:22:85:8d:0c:
3e:3d:ff:fc:a7:72:8f:5b:3d:4a:fc:e4:69:8d:ee:
d9:35:af:fd:91:ce:61:e4:e2:c4:0a:4c:bc:de:3f:
53:1f:57:4b:6e:f9:33:c0:d0:f3:1c:f9:53:da:ea:
6d:64:43:32:d4:61:cc:7b:54:60:dd:75:08:12:c4:
ec:26:68:be:d1:46:5d:8d:25:8f:16:59:83:73:99:
4e:d6:1a:da:b5:cc:73:ac:0a:d2:0f:48:8b:68:93:
7d:50:b9:01:64:0e:1d:5d:38:85:1e:97:1c:d5:af:
ce:52:5d:eb:2c:11:b9:bd:08:91:de:8b:74:d3:5f:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:89:8E:92:69:23:F3:AA:2C:A9:6F:58:B8:AA:13:69:21:75:64:B0
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:53:f4:49:1b:d6:8c:f7:79:c6:8d:28:df:1a:1f:b2:82:7d:
0d:40:a3:a6:fe:ad:0e:af:3f:14:48:07:f7:43:c5:49:6a:ed:
95:0d:f3:40:ab:38:e9:4b:1a:f4:06:82:6f:cd:1a:f3:20:7c:
aa:b1:ae:1c:d6:f0:1b:be:52:42:17:84:2b:10:fe:c0:6d:9a:
b1:d3:d0:d6:3a:d6:b7:6a:9d:c3:a2:18:d4:b3:ff:bb:35:7d:
9e:52:d0:39:d3:64:a3:01:30:d2:4c:fb:4b:71:29:f2:96:68:
cf:28:47:ea:de:38:57:4f:04:b7:27:75:d0:37:57:bf:b2:af:
8b:cf:eb:17:54:db:83:f3:20:0a:30:ed:45:fc:60:62:96:b0:
fe:40:7e:45:fb:18:72:55:38:53:6d:ea:d3:38:f8:69:e4:c0:
50:7d:9c:ab:27:64:f7:f9:21:0a:08:c7:df:d7:b3:8c:43:15:
77:2b:2f:f8:55:25:c6:98:a7:70:9a:68:c0:54:93:b2:2b:b9:
56:1f:40:ce:75:62:f2:1b:f7:4b:e2:a9:8f:66:78:64:79:c2:
15:17:42:88:bb:b9:7c:8c:c5:91:b1:f8:54:ce:d2:96:c8:88:
f8:a0:44:3c:ec:7e:4f:fa:b3:8b:d0:54:d4:bf:9e:7a:86:3a:
e5:f9:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:14:09 2025 by rpki-client