Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: GJzd9ZwM3NS15m1FQKxNv85Ks9LwejeUzHapAZoj5Fk=
Subject key identifier: 04:89:EA:F6:AA:80:87:F6:95:43:A3:F5:9C:F7:50:E7:28:CF:BF:5E
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 0199FD349291B080D1453B91E11372277F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0B4F
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: V3gqDNZTr/9x+OB29w0Ih9X+ZOOzfpVPLbkSePXwV5k=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:92:91:b0:80:d1:45:3b:91:e1:13:72:27:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=0489eaf6aa8087f69543a3f59cf750e728cfbf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:65:3c:9d:ae:a7:c6:45:e2:5e:7a:1a:3b:
77:88:66:d5:28:64:d7:79:f0:06:fb:7b:43:06:5a:
f8:d7:f9:6e:74:e1:ea:3b:c9:77:33:86:f3:0b:e3:
c1:81:af:63:bd:bd:27:5f:5b:9a:6f:e6:c1:ce:32:
fe:92:15:15:8e:7a:36:5e:aa:4e:13:fd:0e:57:61:
0b:0b:18:25:1b:78:fe:dc:08:4d:fc:6b:6d:ae:cd:
75:8b:7a:66:97:2a:ac:17:c7:0d:b4:7e:48:4d:3e:
13:66:75:59:4e:87:ff:b6:62:87:09:89:d5:5a:30:
cf:7e:4c:ea:7a:10:9a:94:ab:88:de:be:2b:d7:10:
42:81:80:e5:5c:7d:dc:55:72:71:2c:28:01:9c:2d:
7a:31:ee:d9:d8:d0:59:3c:d3:df:80:ab:92:fb:b3:
26:16:d7:e5:cd:41:68:2b:23:3a:2f:46:0e:1b:5d:
e5:03:fe:d7:d0:b6:93:37:0e:12:4e:24:6d:2f:9f:
81:ba:96:af:d1:34:c2:94:b7:13:86:77:56:87:46:
95:1c:28:b7:e0:28:3f:78:52:d2:d0:0d:f5:9b:c6:
00:d0:26:be:4b:da:85:6c:db:35:a3:02:a4:a2:8a:
ed:56:0c:f7:95:e7:25:a5:96:74:0f:27:d8:9e:15:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:EA:F6:AA:80:87:F6:95:43:A3:F5:9C:F7:50:E7:28:CF:BF:5E
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d6:f0:e6:9b:10:d5:13:5c:2d:f8:22:35:3f:6a:7f:e2:d0:
8e:81:2b:cd:b9:50:07:99:b1:e7:c0:c8:b4:da:5f:bc:79:f0:
f8:76:ac:6c:05:1b:be:1b:7c:a0:a7:6c:2d:39:13:6a:08:af:
c0:67:0e:11:70:e0:e5:bd:82:fd:8b:0b:5a:eb:8e:cd:6d:8a:
a8:12:e4:54:bd:4c:d9:14:f1:74:ab:9b:71:4b:0a:b3:e2:71:
71:6f:46:0a:df:e2:ff:78:9f:0d:91:60:3c:15:15:77:8d:3a:
a8:04:04:e4:b6:ec:22:86:d3:11:ff:b9:85:f1:f0:da:f3:a9:
9e:8c:d2:50:13:d3:35:c2:57:57:b0:5c:4d:a8:5f:a4:b4:f7:
2d:f8:7b:df:93:5c:77:2d:e2:ae:0a:33:5a:87:89:ca:45:bf:
e5:36:91:74:93:e1:c0:30:a4:a7:75:55:70:26:67:85:83:3d:
ee:ea:8f:86:64:9d:01:6a:94:5d:d3:7a:8e:a6:8d:0d:18:ce:
f3:77:35:1a:9b:2c:05:eb:89:4d:87:54:c5:e1:9e:2a:12:9e:
3a:2f:09:c8:3d:81:d3:2c:a8:fb:34:f9:6a:4a:04:5c:40:43:
8d:13:a6:92:b4:05:34:87:3d:52:94:93:90:6a:44:f1:40:83:
ba:0a:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:17 2025 by rpki-client