
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: ln2LiuwwLgw1gT4ck9QPGClKYcPch4bUDxaXu+edDtc=
Subject key identifier: 89:50:20:93:91:FD:FF:BE:08:96:E5:48:59:EA:63:1E:6D:17:56:4F
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 0199FBEA8F41E22F0905BA7657691C569E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 0743
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: yEBM7QWRxrTHUSe7AUompHuoYuajAxQ038epS0/1Qy4=)
4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8f:41:e2:2f:09:05:ba:76:57:69:1c:56:9e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=8950209391fdffbe0896e54859ea631e6d17564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:76:7b:0b:1c:50:5b:f2:07:61:b3:43:a9:
25:95:f2:ba:0f:97:92:3e:f2:cf:ac:b2:c8:7e:8d:
d5:71:95:03:4b:45:b3:99:a8:9a:c9:c9:cb:6d:e9:
5a:95:98:26:0f:53:99:62:b1:f7:cf:a3:57:08:6d:
a5:61:8d:38:19:d6:1b:29:00:62:32:64:6c:b5:18:
fd:25:38:83:72:c2:41:c7:c5:63:48:b5:31:a2:32:
13:5d:44:35:2f:d9:55:8d:17:24:d9:9e:84:df:0d:
e4:c1:2c:d3:38:2d:8a:81:eb:2e:2a:53:bc:dd:07:
c3:2a:0b:91:71:b4:63:ad:32:76:3c:7c:22:28:77:
c5:18:b0:96:18:76:fa:ca:08:16:80:5c:d6:d6:64:
50:7b:a7:de:2a:06:46:3a:74:cd:55:24:f1:cf:07:
ae:66:25:bb:d6:85:9f:b2:9b:94:e2:71:23:98:ff:
00:7e:dd:59:e1:e1:6b:87:b2:cc:c6:1f:71:bf:3e:
7e:4b:5d:e5:21:6b:d4:c3:2d:51:9b:a1:db:19:93:
05:eb:24:7d:ab:44:94:d7:ac:39:67:62:12:8e:62:
32:45:fb:7c:2e:a0:a9:b7:ad:7b:af:c8:4c:4d:a5:
4a:af:12:57:8b:20:c1:8d:ec:6f:50:5b:8f:ae:67:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:20:93:91:FD:FF:BE:08:96:E5:48:59:EA:63:1E:6D:17:56:4F
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:6b:7e:ae:f2:6d:11:29:4f:f8:5a:16:b3:d2:ca:43:c7:
b7:1e:06:6e:78:80:d5:84:52:ff:da:cf:c2:90:76:71:50:81:
e0:e8:2c:26:bc:df:c2:4d:6d:20:85:d4:39:89:6d:8d:1d:4b:
78:01:b3:fd:87:7c:e4:f0:64:05:3c:dd:85:e5:14:f1:22:c2:
c9:09:17:5c:9c:28:64:71:ab:03:0a:78:41:c7:37:1c:aa:9e:
c7:04:27:00:55:7a:8a:5c:8d:bf:19:ae:84:2d:a4:16:35:42:
d1:77:69:ab:ad:2f:b6:96:bd:5d:76:5d:c3:35:32:e8:7e:54:
13:ef:7e:59:cf:3a:b3:50:77:4b:3c:c4:e4:8a:c6:4a:a6:3a:
cd:0e:00:59:af:d7:31:68:47:6a:2c:a4:45:a0:38:27:8b:6e:
09:c7:a1:71:6f:83:03:d2:13:77:54:d0:3d:10:9b:05:bc:35:
e3:3c:03:8f:9c:b3:32:c0:69:41:e3:55:e1:94:eb:a6:bb:ca:
75:fa:c8:7e:39:05:3a:f3:22:63:01:81:ca:ec:d3:83:2d:50:
0d:bd:d2:24:d3:fe:f5:34:f0:97:ae:61:51:c5:bf:4f:f7:42:
80:7e:cb:45:08:2b:1c:80:31:7f:43:81:ba:02:8a:9f:74:ce:
60:c0:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:14 2025 by rpki-client