Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: Trs9vefIYhNohuvASpSoQwpRmPhzklNJWGawr+55zO8=
Subject key identifier: B9:F6:23:C1:BD:83:3B:57:7C:4C:DC:68:34:31:68:1E:BE:B8:53:E7
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0199FC8F7FC953D817ED0BD77E13DD5CD7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 1151
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: cjJvswxsb4wzywzr2Tl/1SCOVvymXkRmKiiGGBgcnvw=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7f:c9:53:d8:17:ed:0b:d7:7e:13:dd:5c:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=b9f623c1bd833b577c4cdc683431681ebeb853e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:6f:2d:79:d3:a2:03:6c:0e:a8:2a:f9:04:
65:03:69:c3:e6:ae:f8:3e:4e:02:dd:51:0d:a6:e1:
6d:20:75:32:73:c0:c0:33:83:b9:de:96:ab:78:d0:
a2:9f:34:32:66:d3:75:c5:d3:f5:a1:51:fd:a4:64:
b7:67:68:6e:2f:37:49:40:fe:37:dd:31:ac:a3:07:
e3:13:ce:c5:68:41:8f:a5:df:71:f2:e9:d1:eb:ad:
40:93:6e:63:fd:70:0c:66:86:92:05:63:6e:6e:0f:
d1:af:17:72:b6:14:73:dd:3f:18:ed:7d:21:52:26:
08:02:b8:e5:d6:4b:e0:6e:8d:23:18:97:c9:09:8d:
94:1d:f2:38:e9:2b:ce:13:7c:f7:4a:22:51:de:1f:
d6:a2:8b:36:b2:e7:2d:a3:1b:33:17:95:32:91:67:
3c:10:ae:55:9c:74:b8:d4:ba:22:79:fd:88:dc:db:
41:16:f6:d5:fd:45:0d:49:9c:88:eb:55:c8:30:bf:
0b:6a:b0:78:f0:04:63:0c:3c:69:ee:17:18:e9:f5:
46:b6:62:1d:b2:2e:e0:30:97:dc:63:8a:1b:4f:d8:
32:17:92:4a:31:1a:b7:45:68:5f:e4:29:94:c7:d2:
2e:61:37:f0:4c:ec:2e:e1:87:ec:62:39:cc:da:58:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:23:C1:BD:83:3B:57:7C:4C:DC:68:34:31:68:1E:BE:B8:53:E7
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:56:b6:9b:46:44:79:43:08:08:47:3d:c4:8d:59:44:05:
fa:7c:ab:6a:95:de:c7:6d:b0:01:d8:5d:03:ec:6a:2b:3c:c1:
ad:43:ed:40:2a:4c:79:2c:1c:65:31:9a:93:db:dd:7a:7d:fc:
e8:45:64:24:f2:e5:b3:b2:7b:9e:80:2e:b3:ca:d7:ac:54:e5:
9c:05:92:f1:39:f3:8e:25:d2:f4:05:6b:3b:48:d9:db:e2:08:
44:1e:0c:a8:88:5e:4d:52:8a:3c:e9:b8:a8:e7:35:94:7f:fe:
44:e5:e9:6a:65:60:0d:1c:c5:d1:65:80:1b:97:5a:a4:1c:98:
b8:d3:8a:b7:3d:43:ab:b8:77:fa:74:5c:f4:36:12:a1:53:3b:
c5:e4:49:1a:80:b5:de:bf:9e:6b:50:14:9b:0b:f4:14:07:c9:
fc:70:a0:2c:70:c7:7f:78:75:7f:95:84:dc:7d:1d:67:b2:db:
55:3e:b2:cb:57:a3:5c:80:2c:da:fa:dc:91:2b:8c:64:f0:95:
13:5d:82:0d:29:60:e6:b2:f8:22:1d:ab:46:b4:53:05:29:24:
7d:b0:4a:a5:f2:f6:79:4e:b2:47:69:c8:f3:25:89:6f:32:f1:
5e:1d:47:be:12:89:7c:0a:99:20:16:d9:1e:27:03:dc:80:d1:
9a:34:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:58 2025 by rpki-client