Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: O/W/v60Q3LXndicDzAcOa4qxwYTlQ4BYfQa2NHfb1Lg=
Subject key identifier: E7:6B:A6:23:2E:79:DD:68:CC:AB:16:3F:D4:CC:88:73:35:AF:F1:DB
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 0199FC58629831AFD011123D4C329BA51BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: N/IBnPjS0ChcwPPbKfW6cD29/D3LXCz2O0QzqQo3YN0=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:62:98:31:af:d0:11:12:3d:4c:32:9b:a5:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=e76ba6232e79dd68ccab163fd4cc887335aff1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:5e:e3:97:5f:a1:93:aa:dd:e3:e2:33:73:
a2:83:08:67:e8:1a:76:9f:d8:ce:d8:b0:29:24:e3:
45:12:4f:48:5c:66:8a:ca:bf:c2:8f:c0:7f:0d:f7:
23:f7:ae:72:f8:ef:64:bd:0e:54:c1:d1:e1:1e:4f:
0e:de:e0:1e:7a:4a:32:e2:72:ae:27:0d:af:3b:82:
1e:a1:a9:5a:49:64:2f:c1:b8:0f:97:94:b6:b0:5f:
78:e1:37:62:7a:fd:94:bc:e2:57:e3:ae:77:39:a4:
d2:87:89:76:4c:37:c1:58:c0:a2:67:2d:44:02:17:
53:36:d2:e5:fa:46:d3:8a:0d:07:f5:c0:ec:47:43:
33:a7:69:c1:f9:4f:ae:08:33:df:d1:34:e7:0e:db:
ed:20:70:b2:56:43:90:1e:9b:f3:cf:0e:9d:c2:55:
a0:90:ef:66:a0:47:43:c8:ce:67:b7:73:86:cf:a1:
4a:ac:5e:97:e3:44:9f:39:5b:d6:ed:8d:a9:dd:12:
e6:81:87:56:a4:a2:ad:5b:7b:9e:41:45:39:4b:5b:
25:98:0c:b1:5c:45:5d:6e:5f:e4:d6:c5:17:15:43:
dc:8b:3f:13:c7:bd:64:ea:7a:ba:bb:7b:6d:79:ab:
3d:af:26:71:48:5d:3b:89:4b:55:a8:1f:9f:39:3f:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:A6:23:2E:79:DD:68:CC:AB:16:3F:D4:CC:88:73:35:AF:F1:DB
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:23:40:ca:90:ea:3a:64:bb:ae:46:2c:cb:8a:d4:4a:fc:6f:
0d:25:4e:72:1f:7f:d1:e6:2d:16:d3:aa:bf:de:1c:a4:2f:97:
6b:b5:74:01:1e:4a:64:2c:e5:d1:ea:2c:44:ae:de:44:b8:52:
d2:7d:3f:e1:78:34:f7:1a:f3:2b:d3:6a:31:ee:29:69:88:1a:
f0:1e:63:1f:6a:70:2f:99:57:cb:c5:10:40:96:0f:12:8b:b2:
cd:43:ce:e8:c4:ba:1a:dc:c2:08:ac:85:4f:8a:85:93:af:18:
71:a1:e9:94:73:46:fa:4b:5a:ed:fd:7a:1d:f3:f6:e1:75:6f:
d0:56:2d:9a:58:d7:03:45:be:28:33:f7:ce:8c:0a:f7:00:c7:
02:9f:47:8a:36:90:87:4c:6e:4f:b2:86:f0:e6:17:1a:cd:08:
d0:b0:4f:4b:ce:ed:b0:55:11:a1:b3:5a:03:1b:fa:0f:0b:5d:
a8:19:40:a5:5e:b9:b6:bc:76:93:f7:47:7f:4c:a7:88:98:43:
a4:39:96:55:c7:3b:5c:f3:ab:bb:eb:22:88:a1:df:68:fd:18:
65:20:30:0e:c7:06:73:2e:1a:6a:cb:ac:e6:3f:5b:b0:11:52:
2d:27:0b:dd:aa:01:b8:fe:60:b8:18:7f:34:9a:a4:ca:34:00:
71:45:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:28 2025 by rpki-client