Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: 2mffDZyXFxy1B0xNSZXu6Esxq7qkbRcWShkWv/5n1N8=
Subject key identifier: 5D:F2:DE:08:AD:A7:27:DD:FA:84:87:A0:ED:20:12:6E:58:06:82:FD
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0199FD34670E98FA08D22B15E0AA246ED69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 05D0
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: zeoPtJPesWB2DwV7TsiAcKk+jwu7VVzZQ0m6nWMNwzY=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:67:0e:98:fa:08:d2:2b:15:e0:aa:24:6e:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=5df2de08ada727ddfa8487a0ed20126e580682fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:cd:c0:f6:62:b7:39:33:53:2d:96:16:22:
bd:75:82:b1:6e:32:26:3a:a1:34:38:24:cb:2e:3d:
71:ab:5e:1a:b3:ab:1b:28:c5:c4:8c:1b:00:47:e3:
a1:58:72:7c:d4:48:c2:25:6b:73:09:32:14:22:27:
e4:d1:e3:04:c4:16:8a:e1:d3:2a:93:93:e8:85:55:
bf:e5:7f:f7:68:94:1b:77:14:09:c3:34:58:48:49:
9b:9f:3c:12:84:86:5c:19:f2:36:0c:d0:3c:ef:9a:
dc:e1:b6:37:fd:9e:71:ac:1b:99:c2:4f:66:34:67:
29:7f:b1:83:2e:a3:88:d3:37:d9:28:df:ae:45:e9:
d6:9f:78:9f:5d:20:1f:c9:92:64:09:9e:0a:2d:50:
87:de:a7:d2:d5:87:aa:20:c6:1e:ea:69:e8:51:df:
c4:c4:99:59:2e:9c:92:60:27:e7:01:ad:fe:93:b6:
dd:f3:b7:3a:df:c7:9e:80:7c:fe:b5:8f:14:fe:e9:
e1:c9:a0:4d:81:bc:f0:2a:97:1b:c3:fb:a4:2b:cb:
36:ed:a7:56:ae:44:a1:76:36:10:d9:26:a2:51:06:
b6:a8:1b:9b:b0:65:7b:27:0c:fb:38:0a:2c:c8:51:
d1:27:01:4f:34:a6:73:98:e5:50:5e:e9:23:a2:94:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:DE:08:AD:A7:27:DD:FA:84:87:A0:ED:20:12:6E:58:06:82:FD
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dc:c1:3d:f4:87:a4:4c:8f:eb:54:b6:9f:91:ea:b2:71:93:
5b:10:63:26:e3:84:94:50:38:99:85:71:8f:c4:a4:3a:2a:71:
81:53:bb:57:85:e2:fb:dd:ef:d2:dc:45:d8:88:64:5a:86:62:
21:80:8b:9d:9e:5a:4d:11:39:d6:bd:d8:ee:04:3a:39:2e:f3:
6e:75:70:f9:8e:31:8e:b9:d6:31:57:fa:ba:57:ae:71:67:fe:
2e:a4:5e:31:f2:b3:71:19:3e:9d:00:a4:51:93:8f:c5:ae:b0:
79:39:66:d4:19:bc:c9:4a:7b:42:3a:49:86:62:b0:8f:12:2c:
0f:b0:ae:70:4b:6b:28:5c:c8:4a:13:d1:28:05:40:80:3a:60:
55:b4:58:96:4a:7d:0c:73:46:c1:2e:d5:17:7e:e2:3a:0b:30:
cf:a5:97:4f:4d:7c:79:31:0c:ab:6a:9a:1d:cc:fa:b3:fe:db:
3c:b4:94:a7:df:e9:3c:4e:29:c6:f4:a1:ae:46:17:6c:be:8d:
1a:46:1c:c2:ad:f2:68:cd:f8:d8:a8:47:21:0a:45:8a:17:3e:
ab:64:3f:b8:41:34:40:62:fa:25:5e:f8:df:90:4d:38:02:50:
2c:47:13:2e:c7:b6:05:82:73:5c:40:e4:e6:8d:dd:92:b3:44:
a6:8c:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:50 2025 by rpki-client