Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: 1dcBCyla60CYJmm9pJo6jKtXHJAe/+4om6gdl4PT+Fs=
Subject key identifier: 4A:42:61:B2:06:DA:46:9A:AA:A9:CF:04:3E:E7:68:73:88:4E:8E:02
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019A01112E046ADFD3299B6A875D300F2E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 10:01:34 +0000
Manifest this update: Mon 20 Oct 2025 10:01:34 +0000
Manifest next update: Tue 21 Oct 2025 10:01:34 +0000
Files and hashes: 1: G3jkppDUZ7UShIbg3wj67wwITjQ.roa (hash: IM9aMDCOjn2pDhh5r2plZvteAbzhdwZ0L/lTf4RJayk=)
2: Tz1CIM1JoghruWTN6nGpazj8zTs.roa (hash: VV/wpFoAA0PEYjeaECSEYgoe19Q1uDYWZTbwDnhLY+0=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: rxe+UC3KjfPeUjWRBoqbvTWHsnFUuwTbJc/zGH0BSwA=)
4: qOyspdHf0vEJQuyvIz0XkgRHk_0.roa (hash: yR7LTFxNYmFcq/nxWYOH7mZupl2rRRW8SrPwUWcJB0k=)
5: uiGdfZv36ngdlEPtH0Dctu5_0kI.roa (hash: kwlBzu/ziaLKG7neS7FV84L3FCZ7YdUCR1fgHvPBMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:2e:04:6a:df:d3:29:9b:6a:87:5d:30:0f:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Oct 20 10:01:34 2025 GMT
Not After : Oct 21 10:01:34 2025 GMT
Subject: CN=4a4261b206da469aaaa9cf043ee76873884e8e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:15:f9:a1:db:7c:60:53:04:0f:4b:b0:c5:
fa:c2:73:11:b1:cb:bc:51:af:71:b6:41:09:ab:48:
a9:f2:16:4e:af:16:3a:36:47:8a:06:60:7f:45:bb:
28:fb:b5:e3:e2:fb:d5:4d:ad:48:57:b6:f4:01:57:
12:f3:50:ae:a0:78:72:23:cd:a2:c6:70:2b:7e:49:
37:af:16:22:ce:9b:df:aa:e1:d3:ce:8a:f9:87:43:
98:8b:79:b4:9d:31:36:77:39:c6:c9:ac:3a:24:c4:
d3:59:10:8d:39:d5:0b:2a:23:c4:56:b0:6a:d1:42:
37:da:04:80:75:38:64:d4:2d:1f:fe:c2:0f:78:b0:
60:a4:f1:28:8f:81:41:36:e6:9f:d4:9a:e7:b1:0f:
87:cb:cb:22:c6:e8:f1:67:21:c3:77:6e:bf:49:f9:
bc:a0:c9:9b:d8:bf:10:34:2e:05:70:a9:3b:fb:8f:
3b:81:9b:74:eb:62:a4:a7:fc:9f:ed:74:51:bf:bb:
6c:a7:c3:5f:2b:8f:2b:1f:cd:46:71:93:13:1a:5b:
de:46:c3:52:c8:88:eb:d9:3e:3d:3e:71:df:ef:b1:
13:61:f3:09:bb:18:55:12:49:7b:ca:01:62:03:ba:
f0:88:a4:4b:21:1c:b6:fa:e9:75:99:25:41:26:96:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:61:B2:06:DA:46:9A:AA:A9:CF:04:3E:E7:68:73:88:4E:8E:02
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:74:a3:53:14:ff:bf:0b:93:4a:e6:04:0a:e6:83:c5:cc:
04:50:b9:8c:f9:91:ba:6b:cd:1a:fb:e1:b7:1d:48:63:e9:61:
bc:f7:d8:f7:dd:66:f3:8c:3d:67:81:af:e3:46:dd:f6:6a:fe:
8b:0a:88:40:9f:26:e4:cb:5a:8b:a5:70:5f:ac:b4:f8:0c:63:
e5:6e:d7:b2:35:df:9f:49:66:76:aa:9f:99:cf:83:39:3f:a2:
29:8b:34:ec:d0:7f:e5:07:c8:50:85:0b:7e:3b:3a:d5:26:c5:
29:cc:9d:a1:6f:a8:53:80:a9:b0:d9:35:26:12:07:3d:e2:3e:
b5:a0:2a:0f:6a:27:f2:8b:57:21:ca:76:fb:6a:ab:3f:ad:f4:
bb:e2:47:06:67:7c:f2:fa:ae:c1:dc:06:18:22:68:38:d5:1c:
ad:d7:a0:12:ee:7a:99:04:3d:7a:9e:ec:b3:09:80:5e:59:28:
71:fc:41:65:7b:57:e6:2e:5b:5e:f1:88:fa:d6:ab:46:f6:7e:
b1:b0:40:41:f9:3b:a7:94:a6:f0:a8:8e:35:58:ad:22:09:8c:
5a:7c:bd:ed:e5:77:a5:ee:52:93:9c:a9:c3:cb:15:a1:30:5b:
bb:3d:fe:83:a2:25:fe:fc:6b:b0:c7:85:73:d4:50:9e:d6:6a:
45:82:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:10 2025 by rpki-client