Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: +w2O/oCN92YoAyxfMRyW+E5vgxWs/dUt5ZpUdCUx1sg=
Subject key identifier: 73:60:F0:66:3D:F0:B2:A1:3C:4A:37:F6:7F:15:86:E5:49:3E:A1:66
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 0199FDD9CA6CBD5AFAA307EAA264AE1A1CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:12 +0000
Manifest this update: Sun 19 Oct 2025 19:02:12 +0000
Manifest next update: Mon 20 Oct 2025 19:02:12 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: BV4Fq3QA2xA4OALABd+yPaGC8mhqzP3/KjyQEpa1F3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ca:6c:bd:5a:fa:a3:07:ea:a2:64:ae:1a:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Oct 19 19:02:12 2025 GMT
Not After : Oct 20 19:02:12 2025 GMT
Subject: CN=7360f0663df0b2a13c4a37f67f1586e5493ea166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:d0:e5:67:f0:3a:cd:73:88:14:b2:f5:8b:
f9:f5:6b:2a:c6:f6:4d:20:a8:6e:cf:dc:85:28:d9:
99:80:4e:e8:a0:2b:dc:c1:ec:b1:9a:e5:6a:32:ab:
88:b6:7c:f5:5c:0d:3f:db:be:79:11:61:e2:eb:fb:
85:71:a5:64:1f:da:4a:cc:6a:fc:b7:a7:04:04:07:
df:26:55:51:9e:92:e2:bf:55:fa:26:bd:8c:ed:15:
fd:a2:4c:59:22:ad:af:50:b8:d2:c9:ae:6b:fa:94:
22:09:3a:5e:5e:5a:92:77:82:8d:6c:c1:ce:50:5a:
c3:d0:85:4a:22:39:63:00:93:ff:6c:ce:a7:a9:17:
c2:60:f4:05:62:7a:bf:3e:c6:ae:5f:17:e5:cf:7f:
47:b7:98:57:77:45:78:18:e4:26:6a:4d:cd:76:06:
19:d8:91:be:14:11:5e:bd:f0:93:fb:bf:70:b3:0e:
4c:54:f1:2e:97:1b:ee:f6:f1:63:2b:ff:b3:81:81:
f3:8e:0b:d5:36:b3:e4:9a:90:e3:c9:52:87:07:04:
20:43:91:cb:c3:e8:f8:b6:33:15:b4:36:3e:be:1b:
82:c3:9c:0b:13:05:9f:bb:ae:34:0e:59:f6:27:12:
a0:96:70:a2:ed:51:d7:a0:dc:af:7c:cf:4f:cd:ac:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:60:F0:66:3D:F0:B2:A1:3C:4A:37:F6:7F:15:86:E5:49:3E:A1:66
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:71:f6:8f:93:e8:ec:6d:34:8d:1a:43:14:9a:55:aa:cd:d5:
57:1a:70:20:81:71:cc:17:6a:a7:87:94:43:ac:78:83:ba:74:
ad:e9:8c:96:8a:1c:5f:ea:6d:46:30:75:b3:88:bb:a0:67:76:
f9:f0:55:44:ea:ff:8b:6a:08:da:5b:54:7a:d9:de:ed:20:03:
f6:a9:c2:4d:24:41:2e:e0:a4:10:28:5e:7e:f9:85:54:3a:dc:
50:0e:e9:ae:c4:b1:8a:ac:53:dd:09:08:d0:70:de:a4:2c:db:
96:8d:77:9c:c8:5b:ab:cd:cd:0e:4b:3e:0b:f8:c7:b7:b6:df:
ce:0c:95:92:33:39:01:5d:04:75:a8:e9:e9:41:11:8f:d3:48:
d5:96:df:11:ce:7d:d5:cc:97:76:43:ca:2b:6e:3c:91:9c:dd:
36:52:3f:a5:a5:ff:2f:e7:e6:32:68:91:7c:a2:d0:a0:ac:4f:
3a:21:b3:29:e4:50:47:93:5e:fb:06:a5:54:77:4b:6c:f1:db:
76:39:e3:e1:0c:13:de:e9:fc:dc:15:19:67:3a:90:fc:aa:f8:
f2:d7:63:75:d6:46:77:1f:f7:34:31:3d:5b:a9:b7:2c:9d:47:
63:65:c5:e9:e2:c3:b7:77:ce:d1:4f:dd:fa:b7:82:53:ac:8a:
57:2b:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:36 2025 by rpki-client