Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: /atIALM8zW/K/Hq7OASo8cz3BYXWcYkrEk9FOUxFRgQ=
Subject key identifier: E5:B6:A1:91:2B:EF:4E:5E:61:67:CA:28:FD:EA:C1:6A:6B:71:73:4B
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0199FBEC72848B3D0927F57E98561FA510F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 03C5
Signing time: Sun 19 Oct 2025 10:03:20 +0000
Manifest this update: Sun 19 Oct 2025 10:03:20 +0000
Manifest next update: Mon 20 Oct 2025 10:03:20 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: uD+F6/gRRmqN4F45nhwjkLbvLP/C0XMeHTnhwBNYedo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:72:84:8b:3d:09:27:f5:7e:98:56:1f:a5:10:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Oct 19 10:03:20 2025 GMT
Not After : Oct 20 10:03:20 2025 GMT
Subject: CN=e5b6a1912bef4e5e6167ca28fdeac16a6b71734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:44:43:a6:62:ea:15:3b:b5:bf:b6:22:9b:
25:48:2c:8e:73:e8:8d:22:11:b1:a8:fe:26:b0:c1:
b3:ad:76:f1:37:86:9b:de:f9:28:ff:bb:42:2e:7a:
7d:b9:3d:87:19:a9:fd:c3:e0:4c:c9:96:8b:80:3a:
25:b8:b6:27:50:a8:e6:ae:f3:a9:c5:56:de:e5:02:
bb:9b:0f:99:ca:52:fd:2d:1a:b4:b8:b2:f9:96:20:
b3:61:09:c6:ef:df:dc:b9:20:4c:10:67:e2:49:c4:
89:65:c2:b1:43:b9:e4:a9:a3:0b:f2:d8:01:de:f2:
58:bd:5b:d8:fe:3e:ce:f5:a0:24:99:84:7c:b0:be:
62:ba:6d:36:cb:f3:59:0e:52:60:23:9f:91:8e:ca:
bf:fa:b3:e3:3b:92:51:8f:5a:ef:51:91:42:e1:c6:
d0:b0:41:3c:86:5d:91:fa:98:70:7c:36:21:1f:63:
72:86:19:77:7d:9f:7f:d5:2d:03:aa:b5:a3:34:9d:
93:76:03:6d:0e:a9:2b:29:3b:76:99:56:53:4a:51:
4b:3b:d3:c5:f4:e8:4d:8b:6e:86:f4:6a:c3:04:0a:
7a:f0:6e:a8:bc:03:ef:ba:48:40:08:69:f3:8f:c0:
56:8d:d5:08:5c:69:cc:9c:06:ed:c7:7d:1f:66:4a:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:A1:91:2B:EF:4E:5E:61:67:CA:28:FD:EA:C1:6A:6B:71:73:4B
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:88:23:ec:31:45:53:d6:23:6b:0b:d7:b6:57:11:2f:8a:
1f:8b:cb:ec:82:d8:da:f7:ae:e2:24:2b:6a:ff:25:01:67:4a:
75:a4:48:79:f6:42:d5:94:e3:9f:f8:80:a6:12:35:0d:a2:5e:
6b:5f:40:93:cf:db:d6:f0:e2:f4:2c:2c:52:2f:cb:5c:68:8b:
68:d8:3b:94:27:93:34:e2:14:88:f1:07:22:8e:fc:8c:79:70:
0c:be:a5:3c:24:fc:e2:da:95:36:55:02:3c:8b:b6:00:c1:91:
f9:7b:d2:53:1d:fc:30:1b:92:0d:74:5c:4e:87:b7:e3:26:e0:
db:e1:6b:75:25:5d:6d:b7:7d:c0:12:61:e4:43:48:dc:bc:3e:
50:ff:57:71:fd:7c:df:fd:cb:d1:07:0a:e8:1e:07:a4:c3:03:
be:5a:6f:0b:12:01:35:ff:c5:47:d6:17:1b:a0:92:68:f4:24:
56:10:7a:3b:47:3d:aa:70:45:db:02:10:f7:e5:15:12:1d:16:
c1:e1:a0:38:73:6b:ba:03:e3:87:ec:aa:76:4d:27:f4:b3:e8:
f1:84:00:e6:77:16:30:34:cf:79:57:c4:ab:9c:33:60:ad:f6:
61:07:7b:d5:c1:53:fe:65:e6:2d:d2:8f:b5:31:75:d4:57:a1:
21:e3:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:18 2025 by rpki-client