Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: RSJO+E5wZICFWTCCKNqPce0OPqGgH/xg0BW6bfucPZ4=
Subject key identifier: B6:FE:9A:8F:50:11:78:24:4E:41:5C:3B:FD:76:5F:FD:01:2F:FD:1C
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0199FDD9FDA57A49A181F2B8A88E640CD8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0AA2
Signing time: Sun 19 Oct 2025 19:02:25 +0000
Manifest this update: Sun 19 Oct 2025 19:02:25 +0000
Manifest next update: Mon 20 Oct 2025 19:02:25 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: cjg+0XgKkbaf7YEdacyvfTTfiq5qA4XQHFLTtvFLy+g=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fd:a5:7a:49:a1:81:f2:b8:a8:8e:64:0c:d8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Oct 19 19:02:25 2025 GMT
Not After : Oct 20 19:02:25 2025 GMT
Subject: CN=b6fe9a8f501178244e415c3bfd765ffd012ffd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:68:38:e9:84:58:ab:12:95:c5:3d:c6:f0:
b7:c2:e2:19:82:22:00:81:22:73:8d:0e:a4:ac:c5:
a5:5b:9d:5c:0c:02:79:17:86:d2:99:84:35:6d:d5:
ba:7c:ea:ed:c3:6b:26:a1:18:cb:41:ea:76:36:85:
c3:53:0f:6f:22:2f:64:b3:7d:3e:9b:51:8a:39:fd:
b8:e6:2c:b3:e3:47:93:04:69:70:04:e4:2b:7d:23:
be:77:2c:8e:5e:f0:1d:d9:ae:58:a8:70:a9:b9:cf:
69:1a:eb:e9:4c:87:0d:7f:90:37:cc:67:e3:9d:54:
2c:b0:53:1c:6a:75:b1:b9:72:5a:40:8e:90:ec:f7:
d4:b9:ae:80:d8:59:f3:5d:42:d1:28:3b:e6:08:10:
fc:bd:15:d2:75:61:f2:58:f8:18:e6:17:10:1a:19:
e9:ff:62:07:f4:19:b2:47:71:12:46:0d:3c:1e:d5:
d0:78:c3:6e:c5:7a:cd:3c:93:19:57:19:ea:6b:bb:
dc:75:7f:2a:5a:6e:7b:f6:63:3b:a9:2b:d0:ed:c1:
da:75:30:3e:19:54:3f:12:35:a6:7d:c6:3e:59:ff:
d9:1c:29:73:d3:7d:ce:a7:c9:22:9e:54:9f:2f:e9:
de:77:c8:c4:9f:47:b9:59:98:2f:18:12:ec:be:9a:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:9A:8F:50:11:78:24:4E:41:5C:3B:FD:76:5F:FD:01:2F:FD:1C
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bb:55:1e:c9:2b:dd:76:39:5e:bb:c1:52:a4:56:50:bc:ac:
72:a1:38:95:34:fa:b9:58:88:a1:cb:3a:ab:23:cc:c5:14:b2:
b3:1d:9f:5b:38:77:33:81:86:23:ee:bd:b1:4b:fe:0d:bd:25:
ce:1a:82:1f:f6:b1:35:27:12:63:30:80:1e:a8:bd:09:86:22:
a7:c3:5c:f0:f8:78:a5:ea:b7:67:c9:a8:22:44:cd:33:e5:85:
0d:5c:ee:01:c2:63:e4:f0:27:aa:d9:db:35:96:f1:96:61:9d:
1e:1d:40:e0:16:43:ca:4d:38:ef:a4:b2:ff:17:d0:26:42:c0:
be:e8:9e:dc:bf:fe:af:7d:6b:83:60:6e:40:30:0c:91:cf:45:
f0:be:4e:e3:a1:de:64:8d:05:7f:1b:c4:34:4a:f1:19:a2:0e:
43:e9:00:a2:a1:3a:5b:82:49:1c:1e:12:a6:3c:9a:46:b6:91:
ef:1d:50:ef:9d:29:73:b5:6a:2f:0e:c9:68:80:ef:cb:76:3d:
bd:6f:4e:fd:2a:46:55:cd:dc:7e:2d:07:0f:0c:fc:cd:70:f2:
4d:31:3e:37:27:ae:30:37:59:ab:15:5c:cf:85:f9:14:3c:ba:
a2:7d:13:fc:f3:82:e9:91:cc:34:1e:81:e4:e2:d5:40:c4:4e:
e1:4a:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:25 2025 by rpki-client