Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: dQRSFmlPY5afxdjyYcfZWisVtuKtIqPUlXJxL7dI50A=
Subject key identifier: 57:E8:79:E9:13:AD:D6:0A:4B:73:D1:58:B0:0B:66:F2:4F:33:2A:4E
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0199FFC8568949EEEAE232B7E41C131201C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0AA3
Signing time: Mon 20 Oct 2025 04:02:23 +0000
Manifest this update: Mon 20 Oct 2025 04:02:23 +0000
Manifest next update: Tue 21 Oct 2025 04:02:23 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: yCp+ICGZECvKxBpOMGNUX9xHu5NRALAQVCMJmmCz1O0=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:56:89:49:ee:ea:e2:32:b7:e4:1c:13:12:01:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Oct 20 04:02:23 2025 GMT
Not After : Oct 21 04:02:23 2025 GMT
Subject: CN=57e879e913add60a4b73d158b00b66f24f332a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:3e:89:f1:3f:59:6b:c9:22:93:29:ad:79:
a0:a8:47:8b:ed:49:9f:9a:97:f7:89:0a:37:a1:ff:
9b:01:7d:1f:06:43:0a:36:fe:b0:8b:ee:b9:13:f6:
d8:30:46:e1:ee:7a:fa:6e:ab:af:18:59:b8:1c:c6:
96:d1:a8:35:12:40:fc:21:26:63:eb:2b:e7:f9:7c:
ff:e6:27:e7:a6:0d:74:78:b7:17:cb:31:51:f2:35:
9a:6a:f5:df:8e:c2:de:dd:1d:5d:be:ad:cf:4c:85:
8e:f7:38:08:c6:bc:85:eb:72:76:11:23:f9:9e:23:
d3:99:88:5e:85:95:e8:9b:5a:38:a4:d0:ff:2e:b7:
5f:62:2f:3c:ef:84:6d:4e:9c:15:ec:43:e4:ef:4a:
7b:28:f3:86:d0:8c:ff:46:31:d1:55:74:4f:57:eb:
f4:ac:c1:57:f2:e1:cf:bf:29:d7:88:3f:22:7f:ef:
fc:31:50:99:51:2c:bd:e9:5d:74:af:56:98:eb:cd:
77:25:bf:e8:27:ca:bf:92:57:64:de:74:cf:36:b2:
f5:77:c9:09:3a:40:07:26:22:d6:a4:34:84:a4:d3:
f6:03:c4:d4:70:50:0f:fc:32:23:16:82:27:d9:e3:
9c:cc:ca:d0:71:7e:7d:a0:6a:49:9b:9d:c6:49:f5:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:79:E9:13:AD:D6:0A:4B:73:D1:58:B0:0B:66:F2:4F:33:2A:4E
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:e7:da:95:c6:9d:b5:d6:d4:ca:47:91:3a:08:4c:ff:ba:
89:e5:c9:9a:7d:38:7d:e3:9f:18:9f:5a:6f:0e:cd:20:b4:93:
97:e3:6a:c4:ed:05:87:5a:d8:c4:30:14:97:1d:49:7f:c6:aa:
6f:32:e1:26:69:60:54:39:83:b6:ef:dd:0a:e8:0d:60:b7:f6:
0a:d6:00:2f:65:70:d7:1a:b7:78:4c:46:9c:2d:9a:06:64:a3:
08:73:9b:26:30:5c:73:56:69:d9:ac:3c:94:42:c9:e2:80:c0:
80:b2:15:a4:fa:9e:83:61:44:9c:44:93:9c:e7:70:ea:af:77:
00:3b:11:6e:54:48:cf:04:f8:51:90:fc:ac:c7:58:1e:97:2a:
27:86:8d:52:2f:99:27:f7:72:66:1d:a7:e2:15:fd:a8:43:ea:
39:0d:8a:94:46:55:cd:91:38:e9:5a:89:b8:f2:ef:c9:2a:cf:
ae:a2:c6:c9:a9:64:6a:28:7a:e6:8d:ac:52:71:a6:63:e3:36:
9c:df:e3:2c:6c:2e:21:2d:07:0c:32:40:a3:45:cd:25:e9:47:
ee:2f:b5:48:2d:3b:05:70:84:bb:d2:af:98:8f:2d:46:8b:bf:
51:40:51:43:21:6b:17:c9:20:03:dc:fc:54:e7:75:15:a5:34:
83:06:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:40 2025 by rpki-client