Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: 3nV5p8ZXbC3pJL5A1wcHGMKHttrYgn1o3UlxOL8Qwr4=
Subject key identifier: B4:DC:51:BA:05:2E:77:4B:0C:9B:26:C6:5D:75:B7:FD:F0:B1:77:9D
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 019A51F5A177AF4B093E9BECB14FCB27BCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 0310
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: S7j8PJarkULcYaKFEca0//90Y4suRBIFEL4ErLAK+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a1:77:af:4b:09:3e:9b:ec:b1:4f:cb:27:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=b4dc51ba052e774b0c9b26c65d75b7fdf0b1779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:25:fc:1a:57:36:19:2d:bd:56:14:48:0c:
f8:bd:77:e0:76:2c:a2:fc:02:36:92:59:82:fe:e9:
7d:64:e5:49:c6:28:da:55:c5:97:0d:ff:a1:39:a5:
91:30:60:b2:ce:2f:19:ed:d9:d1:6f:5d:0d:3d:a2:
b1:4a:f0:75:cd:76:ab:58:86:ab:6e:8f:0a:f1:a0:
89:28:83:0b:a2:9d:77:e4:fd:d3:c2:12:bf:34:e6:
70:5c:3b:3d:44:39:e0:df:9f:a7:53:32:24:fc:d4:
54:15:b4:5f:b4:e1:d1:c4:de:a2:b3:bf:d9:fa:04:
be:39:a5:e1:e6:16:16:83:12:0a:30:85:38:19:38:
8a:59:f3:38:23:9e:c6:69:c0:98:10:0e:19:dd:35:
93:b4:0f:88:ac:bc:75:cd:b7:a4:54:48:b9:34:1e:
b9:63:1e:0a:c3:f0:ac:95:d9:7d:b2:7c:58:2b:57:
75:17:1f:f9:00:3c:f5:89:cd:dd:e4:4c:83:6c:d9:
74:c9:ea:46:d7:91:12:9b:9f:9b:44:67:cd:be:39:
c0:79:c6:50:b4:3a:82:66:78:16:5a:5a:72:6e:83:
3f:61:6e:1c:47:3e:4e:b1:c1:bf:7a:f9:4c:6d:7c:
f1:48:d3:ec:4d:e5:cc:79:81:46:66:f6:8f:47:27:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:51:BA:05:2E:77:4B:0C:9B:26:C6:5D:75:B7:FD:F0:B1:77:9D
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:41:e1:1f:e9:39:84:91:23:13:71:ed:47:9a:b5:6f:cc:
92:5c:62:47:be:38:71:9f:3d:6b:60:2e:67:d3:e3:65:34:aa:
5f:2e:f5:af:15:09:f8:3f:6b:bd:50:bd:dd:ce:52:6d:a7:4b:
39:ab:2a:47:1b:c9:44:d3:ee:04:e5:ac:5b:fa:01:cb:0d:ff:
3f:0e:cf:41:ef:df:ab:a2:c1:8b:37:7f:13:31:e0:43:5a:3a:
53:f7:f8:8e:db:bf:5c:78:9a:85:8d:f5:09:f3:8e:5a:28:90:
8b:fc:53:84:8d:eb:47:61:9b:4b:ed:95:2b:80:6e:fd:67:a3:
3d:14:bd:32:8b:c8:2e:ee:f7:9d:49:75:e4:cb:fb:8d:34:6c:
6f:0f:47:3b:f3:7f:9c:64:23:98:4e:dc:d2:e8:d4:33:77:98:
66:5f:63:d2:f2:0e:28:9d:59:27:13:45:2c:85:59:95:50:79:
57:7c:8c:f3:57:d3:a4:85:30:11:df:e4:a5:03:e5:61:04:9d:
b4:7c:44:49:56:03:09:c0:3f:f3:fd:2b:b6:b7:eb:58:12:a4:
e8:d1:fe:2f:f6:cf:ee:a3:89:81:5a:2f:4b:47:ab:ec:e2:0f:
47:6d:0e:de:fb:7e:16:3e:62:0f:c2:37:25:bb:d2:76:b6:17:
2b:8d:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:07 2025 by rpki-client