Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: RgVznQ9eV8dFu7cyVBZ2tB4POzBQ31p0b+fpExz8suk=
Subject key identifier: A4:5F:9D:41:AF:8F:90:7F:B6:4B:BE:D7:25:B2:F9:53:45:1C:C8:46
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 0199FCC66179A11550952FFC8A82179F02EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 060E
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: VfbOx1H9/06EfxRNtllrUkMhSGvqFnswq3IM4CRJCas=)
2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:61:79:a1:15:50:95:2f:fc:8a:82:17:9f:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=a45f9d41af8f907fb64bbed725b2f953451cc846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:6b:d4:71:10:31:09:33:af:4e:bb:15:58:
4d:fa:2a:28:4e:98:40:0c:7f:f7:f8:5d:94:84:1e:
c9:76:d4:97:78:72:fc:b2:bb:bd:de:d0:cb:b7:73:
86:97:2f:ba:2f:e8:37:d0:84:ee:83:33:b1:5a:51:
af:79:fc:0a:b3:dd:8b:2c:41:a8:2b:03:08:f7:7b:
e8:ad:37:4d:f4:7e:ed:1e:0a:76:f1:45:ca:a2:52:
09:d4:75:84:fb:13:b9:d0:34:d8:74:c5:48:d1:60:
39:3d:0a:9f:16:bb:d8:ea:ba:41:0d:c7:00:0c:97:
b0:8d:e4:22:0d:61:fd:c6:b4:8e:ae:c6:a1:e6:13:
45:4f:23:71:9a:b9:9c:ee:a8:f0:03:4f:1a:46:59:
9b:64:18:44:9c:4c:aa:ae:29:bd:61:e9:23:e6:6e:
d4:28:74:0c:7b:f3:f5:59:79:ce:f4:97:cc:63:e3:
fe:44:de:0f:aa:24:df:42:4f:0c:d8:d0:fb:ee:61:
57:9a:2f:6d:0d:d0:fd:e4:34:09:1c:d3:dc:97:91:
1d:20:72:d3:47:97:d3:ad:d7:dc:db:2d:7d:9b:44:
60:69:19:d5:4e:2b:12:fe:7b:5d:b2:67:4d:7b:7f:
d3:82:a8:f5:e6:83:f3:38:c1:37:14:95:04:8b:19:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:9D:41:AF:8F:90:7F:B6:4B:BE:D7:25:B2:F9:53:45:1C:C8:46
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:58:17:13:ed:7c:fc:ad:85:52:60:e5:a5:cd:bf:db:f2:
48:26:09:1a:a3:19:0f:50:50:74:6f:bb:a2:ea:da:da:1e:0e:
83:31:d4:09:15:63:ec:15:6e:94:e6:b2:fb:6c:32:52:7e:09:
0b:e9:04:99:7a:5c:b8:00:d1:6a:0a:14:89:c5:81:75:04:b8:
05:8f:c3:98:25:e0:f7:25:8b:06:1b:70:8c:d0:68:69:76:93:
96:93:5c:5a:f4:bd:79:d2:b4:0e:97:37:78:a6:03:34:fc:be:
28:4f:68:ff:f0:a6:b7:e8:0a:f8:ee:0c:b4:b6:0a:de:70:e3:
94:ae:42:33:dd:4a:cc:d7:6a:b0:1c:6e:21:b3:83:07:d0:2d:
8a:3d:53:b5:67:2f:aa:ed:bb:7c:f7:ca:67:6a:6f:a9:d5:45:
bc:ca:d0:81:32:e8:24:0f:52:dd:98:ab:48:6a:f6:10:19:a4:
36:ff:9a:6b:b8:37:fb:f6:cc:6f:c1:66:6a:6c:16:8f:fb:4c:
15:20:54:1f:95:cc:b5:15:1e:86:79:ee:c1:c0:0b:21:b0:4f:
cc:00:7d:96:d1:af:96:31:9d:e4:df:ec:38:b4:76:82:8d:d1:
a6:3e:4f:ef:ca:ec:81:e3:53:dc:72:b4:7e:52:0a:a2:88:0f:
e1:0c:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:35 2025 by rpki-client