Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: PMi7Q8xHoOAbfqsKCxCkdDH6HRAsLn6UqbsEwWgTLb0=
Subject key identifier: 32:D9:B7:F2:17:56:45:D0:99:09:70:B7:6E:22:71:C6:36:15:44:E0
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0199FCC62AD65884D04399EC32C10CE6400B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 116C
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: D07CZsKK/l3gr83cvQitejmHvKA43OPInyS4jHJy5Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2a:d6:58:84:d0:43:99:ec:32:c1:0c:e6:40:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=32d9b7f2175645d0990970b76e2271c6361544e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:72:a8:1f:46:0e:cb:d9:34:40:5f:f5:7b:
2f:33:d4:dc:5c:a8:62:10:5c:7c:1f:56:f3:95:dc:
39:41:e8:d5:4e:7b:79:f4:d6:d9:65:b3:ee:b0:6b:
9d:49:07:82:e6:ae:3c:38:9b:bd:42:3c:57:80:65:
3d:1f:25:88:9b:ac:a5:92:95:95:63:e7:82:07:4c:
bb:ec:44:22:af:37:aa:b2:b1:d6:ea:55:bc:c5:ff:
cf:a6:85:21:a6:ee:e5:c9:f4:fa:a2:be:6b:5f:63:
74:5c:1e:04:ec:2d:86:e6:cc:6d:b7:b1:f5:0f:28:
42:7e:af:de:8b:6d:0c:3b:50:8d:24:dc:cd:d8:ab:
58:44:dc:a4:19:ee:57:b2:8a:52:06:a2:b7:e1:7e:
31:cf:57:f7:49:d2:d3:30:ec:a4:82:e7:6d:c4:8d:
51:a5:cd:71:96:80:3c:32:d1:36:ec:64:82:b2:00:
00:48:4b:6b:b2:b0:d5:1b:16:e3:ab:94:ee:f8:f9:
59:3f:52:44:f8:5c:f6:b9:c8:e7:fd:69:46:92:a2:
3d:44:ff:a6:cc:03:98:15:22:3c:9a:0b:c8:41:d5:
bb:b7:4c:11:e7:4e:0f:05:47:26:cd:07:5a:1a:f8:
f4:69:14:ec:b0:0b:6f:91:9a:31:9e:0f:16:00:88:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:B7:F2:17:56:45:D0:99:09:70:B7:6E:22:71:C6:36:15:44:E0
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:6f:53:fc:57:ad:20:b7:16:4a:ad:79:87:f7:63:78:a0:
2e:c2:6b:eb:b7:4a:05:0c:3d:7a:40:b3:11:43:ec:48:7f:22:
af:70:3f:34:d2:e4:20:7f:ab:af:6a:b4:48:de:d3:03:d5:a0:
5b:c2:12:81:e1:39:a4:f4:5b:05:2e:6f:96:e2:03:05:88:89:
19:cd:77:49:c2:4d:c8:2f:0e:92:49:d4:29:55:27:f2:41:d2:
1f:56:5c:ab:57:db:27:8b:55:81:5b:55:71:c5:e7:a5:8e:a1:
d1:39:ba:ad:48:23:05:84:fe:01:fc:2f:ab:85:50:8d:6c:7d:
bd:0d:6b:0c:a3:aa:51:5c:69:12:fa:80:b9:63:f3:a4:0a:7c:
14:f8:fc:b8:d8:be:ce:89:20:a0:6d:50:98:35:c8:2d:c4:06:
14:8a:42:09:33:46:de:61:5a:e1:00:f4:05:9d:9f:7f:33:48:
d4:bf:e8:33:4e:a4:2b:63:63:e7:fb:aa:35:e6:ca:79:45:8a:
cb:4a:25:e8:44:f1:f0:d8:7b:97:1e:18:b5:6a:a9:8b:24:47:
6f:91:61:91:20:bc:eb:77:e6:32:68:ae:83:f6:ea:49:af:36:
05:2f:98:ed:23:39:c9:56:cf:13:5b:1a:77:0e:06:a8:cc:4a:
2f:62:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:38 2025 by rpki-client