Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: 7SObEw533GKQyaMH50JBEXsV0wlL43pQRNLm111Jq6k=
Subject key identifier: 28:32:A6:BF:0F:84:63:29:3A:33:91:EF:F9:B1:22:E3:B3:1F:5B:40
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019A003527F082E63477B79BD97976D438D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0842
Signing time: Mon 20 Oct 2025 06:01:14 +0000
Manifest this update: Mon 20 Oct 2025 06:01:14 +0000
Manifest next update: Tue 21 Oct 2025 06:01:14 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 9xKI216Drht55iUX3S648tKuVtlzCjeRUjbVhAqLI3M=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:27:f0:82:e6:34:77:b7:9b:d9:79:76:d4:38:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Oct 20 06:01:14 2025 GMT
Not After : Oct 21 06:01:14 2025 GMT
Subject: CN=2832a6bf0f8463293a3391eff9b122e3b31f5b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:4a:f3:57:88:db:3e:91:b4:54:86:bf:6b:
e2:59:e4:ab:30:db:ad:be:a3:5a:fc:c9:de:f7:da:
c8:22:13:52:99:5d:b6:dc:89:aa:86:07:81:0b:7c:
1a:b7:b5:2c:af:91:48:ce:22:04:ed:fc:18:64:e3:
4d:70:7e:c1:1a:87:3e:a0:fc:10:f0:53:22:25:a4:
de:96:f6:a3:0e:7d:38:00:d4:a6:dc:4d:96:b6:13:
d7:5c:95:91:a7:11:9e:c3:d7:61:29:c1:8d:a8:43:
20:f5:9e:e6:fe:be:41:13:11:e7:ae:64:9f:24:b5:
c7:31:4d:c4:0a:21:d0:db:ba:7a:83:26:01:4e:b2:
6b:e6:50:f0:fc:35:41:de:a4:a9:94:54:41:68:17:
b9:08:50:9b:96:c1:a3:c6:f3:1c:e8:d2:fb:e4:65:
f9:6a:17:21:a4:38:44:dc:54:15:fe:0e:9c:b6:34:
d4:10:5a:1d:c2:c1:cc:46:9a:74:e6:5d:0c:88:6f:
4d:fa:f6:71:c2:22:29:1f:36:a7:aa:21:9e:38:4b:
7c:48:01:89:bb:1f:ae:99:47:93:6c:4e:53:cd:8f:
b8:e1:5c:6d:85:e5:3f:be:8c:e6:86:0c:87:39:c3:
01:bf:aa:7b:53:3e:7a:33:38:4a:9d:88:2f:4d:e8:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:32:A6:BF:0F:84:63:29:3A:33:91:EF:F9:B1:22:E3:B3:1F:5B:40
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:63:ce:97:fb:49:42:de:fa:14:08:db:db:41:0c:38:c4:
9e:66:9d:f6:2e:ec:a9:64:67:2c:08:31:84:37:49:ad:1d:39:
89:05:57:71:a5:82:ef:5a:d9:6b:f6:fe:d2:8a:c5:0f:05:b4:
c3:cf:30:07:d8:4b:40:7b:89:9c:13:bf:0d:2d:97:fd:e6:2e:
44:7d:07:b1:00:b4:02:09:73:3d:4a:d7:99:99:29:30:29:98:
62:3d:39:bd:0b:e3:b2:19:00:dc:2a:98:0f:5c:c7:03:bf:d4:
68:b6:7e:f7:79:46:68:88:a0:ae:8c:a7:3b:be:1f:58:47:02:
30:67:95:3a:14:fc:9c:26:69:cd:b8:38:8b:84:96:68:5d:6a:
e5:87:3b:e0:8f:ac:bf:c0:17:8c:17:7a:b1:fa:a6:ee:53:36:
01:36:02:7d:1d:6f:0a:d2:49:64:d2:b6:0e:40:31:e0:06:92:
09:6d:75:45:ca:cd:fc:82:97:e7:7a:55:02:2f:6a:9a:87:63:
f5:a4:90:01:1e:0c:31:29:89:bf:19:4b:33:14:ac:0a:75:43:
13:a5:d3:7f:82:ee:67:fe:b2:93:9c:7b:4a:7e:d7:3c:0c:fc:
ec:c2:e9:d9:e7:78:44:12:33:38:e4:76:82:cb:8f:d2:77:76:
30:32:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:26 2025 by rpki-client