Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: 8PBQrI5gud+g9cz+skQ5HbFSmO97DzhcPurLCskgSLA=
Subject key identifier: 97:C5:96:58:95:CC:AC:26:CB:43:EB:84:D5:40:DB:31:C7:27:20:A8
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 0199FB460B0F157A1CD1D7F42E24C6B237EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: UiyEXOlpQXSzLtZYtd21TMWGHiVZGZ3qxhpMv/ilAbU=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0b:0f:15:7a:1c:d1:d7:f4:2e:24:c6:b2:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=97c5965895ccac26cb43eb84d540db31c72720a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:69:24:c2:52:ec:ac:d4:09:97:d8:e5:74:
e0:31:03:d1:1b:ff:0d:44:6b:fc:51:26:0d:77:10:
0f:45:62:04:f4:5a:da:4a:a9:55:d7:94:14:12:e0:
48:ab:51:ec:97:ec:e7:54:2a:4a:59:52:03:0d:48:
3f:72:36:aa:f2:c1:4c:5b:60:a5:41:90:1c:44:b4:
3e:ba:90:c2:9c:ae:c4:57:6f:ba:52:20:cf:9d:77:
d6:e7:a8:ee:26:43:52:78:99:5b:78:7e:d9:08:e2:
8a:7f:57:99:31:49:10:90:9b:fd:52:86:11:4b:1e:
39:55:89:99:f2:9f:69:f6:71:a4:3c:f0:e5:bd:2c:
87:d2:06:e0:4f:2e:74:72:48:7d:9a:fe:e2:5e:9a:
c4:9f:0c:c4:0c:f6:71:ad:a3:26:41:2b:65:e5:61:
c9:08:e8:5c:6d:78:15:6a:5b:1e:a3:88:c4:0f:a8:
83:62:48:2c:f4:3a:80:32:0e:32:74:ae:e5:77:24:
55:30:3a:ac:8d:b9:95:58:c7:3b:cc:d9:52:e3:0c:
19:0b:68:a5:d1:1e:64:4a:67:76:63:87:79:26:44:
15:cb:e1:02:5a:98:13:e4:04:01:fe:1a:84:22:94:
b5:a2:de:36:fa:43:e2:1e:e8:54:01:f5:d6:6a:5c:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:96:58:95:CC:AC:26:CB:43:EB:84:D5:40:DB:31:C7:27:20:A8
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:77:d0:cf:79:3f:d6:83:c6:07:c9:ef:b1:58:95:67:9c:
80:59:1b:34:9b:20:dc:45:e8:0e:6d:eb:1c:bd:fb:ac:78:86:
38:da:a2:eb:79:1f:14:00:9d:fc:4f:99:a7:97:b9:fe:48:73:
e5:57:90:78:4a:8c:16:4c:54:7a:5b:33:ca:e7:20:12:a0:2b:
4a:58:f6:50:ca:ea:67:be:20:23:09:8b:fa:0e:bd:9d:bd:ff:
24:bc:50:5e:30:15:20:4b:09:37:17:97:2b:e9:15:41:6e:03:
54:7b:58:e9:a8:63:8f:b0:0a:b2:12:ff:c9:f0:21:de:54:c8:
14:0c:10:d8:1b:e5:fa:cf:5b:01:d2:73:a0:ae:b5:40:92:61:
a4:f3:44:bb:a0:cf:e0:3a:0b:20:41:db:62:cc:97:90:c2:e5:
7c:6f:2c:89:1e:04:36:3d:a0:c8:df:19:19:9d:cf:e4:27:af:
b3:84:c0:b3:6e:69:fc:4b:b1:fe:4f:72:10:cd:7d:15:14:60:
40:cb:4e:ae:39:54:4a:da:46:dc:6c:39:db:25:43:64:19:1f:
51:12:6c:27:b4:ce:72:82:f0:4f:b5:c5:72:a1:4f:3f:17:33:
fc:c7:5f:0a:71:e8:76:75:c2:71:64:b9:46:95:6c:f5:e0:76:
03:19:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:23 2025 by rpki-client