Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: SvNt+ywfwPxF1uSEraqqRZ8zvDCPECdf6twx+BZGs3s=
Subject key identifier: 55:20:BE:92:C6:2C:49:C6:E5:5C:A0:8E:3E:59:7E:D1:64:E3:9F:AD
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 0199FB0ED35C2D2A8AA1B22C2D2D29C43061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 13FC
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: HqMGPJ1t/yYC9QTBUoeBkza6meMbCvKBRM12WwkMwjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d3:5c:2d:2a:8a:a1:b2:2c:2d:2d:29:c4:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=5520be92c62c49c6e55ca08e3e597ed164e39fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:29:56:05:be:3e:5d:2f:9b:f3:74:f1:36:
ae:6b:af:d2:72:31:42:cd:79:b9:37:67:e1:96:59:
5e:08:1d:64:67:94:8a:3c:df:4f:bf:41:33:3b:ff:
3d:f9:6a:0c:2a:b8:ef:98:64:50:01:c5:dc:eb:81:
37:34:45:3a:34:bf:ed:c2:ce:a3:56:51:e5:b2:be:
9c:38:9a:1c:07:20:19:7a:a0:9f:8b:a7:e4:1e:42:
3d:e7:1a:8b:e7:1f:4a:61:ad:97:70:16:65:8c:4b:
fe:fc:9b:94:04:87:60:04:2c:7b:93:13:21:d0:6d:
07:af:4e:d4:31:4a:6f:77:e4:57:b1:ac:f5:4a:f6:
f4:c0:51:ee:85:b3:a5:e0:50:98:67:c3:71:00:f4:
b8:76:b0:ff:71:55:83:c6:b2:39:db:50:8a:61:ac:
99:21:77:c2:88:79:59:6a:98:1d:9c:b4:f6:c2:e9:
f4:b2:21:e9:42:4a:18:3e:e1:38:b4:03:71:f9:b8:
9c:3d:b2:d0:97:dc:00:79:ee:64:67:b0:8e:95:72:
cc:7b:58:64:b1:4e:42:ef:6f:28:a7:3b:a7:3b:4c:
5e:13:a9:e3:d5:c2:98:50:ad:58:bd:6e:a3:71:2a:
f8:5a:27:da:37:a5:a9:c1:5d:0a:b8:06:5a:05:cb:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:BE:92:C6:2C:49:C6:E5:5C:A0:8E:3E:59:7E:D1:64:E3:9F:AD
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:17:6f:8d:5e:6e:29:dc:48:4b:5f:ed:9c:00:b7:d2:25:95:
df:94:52:25:dd:39:0b:db:80:66:70:44:b5:c2:1b:d2:93:52:
f4:21:56:2d:c5:bd:62:79:d7:52:d9:75:8b:b8:ee:1a:63:f2:
57:dc:16:50:cc:1f:cc:45:cc:a6:a8:7f:72:e6:ab:61:d1:6c:
39:22:ee:ea:03:bc:8e:99:46:37:fc:57:fc:38:dd:96:f5:1c:
ac:85:3e:02:ab:2e:40:c9:3c:5f:30:ed:9e:56:95:b6:b0:27:
c2:70:01:c9:f9:1e:1a:60:9c:e4:7e:2a:63:79:3e:ea:60:5e:
69:2c:9e:88:c3:77:51:d6:e5:48:20:2b:4a:b3:2d:d3:0f:60:
5d:01:9d:46:e6:a6:97:cc:ed:c1:1d:3d:8d:6b:37:eb:64:13:
75:a9:1c:35:9e:0c:6e:0f:b7:86:ca:5e:1b:26:4b:78:d3:69:
2f:57:e8:03:91:f0:48:f4:fd:d3:46:58:62:b0:13:b0:39:8a:
89:f9:7a:ff:9b:65:c7:22:2f:d7:7a:77:c1:92:f8:17:e8:b5:
5e:34:21:c8:11:29:63:b3:fe:f8:07:4a:a8:ae:d4:77:89:72:
11:4e:47:d8:d7:88:78:bf:a2:05:c1:71:8a:f9:26:c8:b5:c1:
c8:60:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:07 2025 by rpki-client