Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: CAG0u0cleDAf3UNHAS2c6spyBab946js8bCi2r2ztfc=
Subject key identifier: 00:BA:F8:B3:D8:01:48:A4:1A:F6:F6:A4:9D:BD:C4:54:29:34:E5:E2
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 0199FBEBBB7D269F1AA589BCBC8DDEAD8A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: 51GtJ4YiSmf7PcD6Z/FybQ6bPNwUdKIgZha4Vn/vQBY=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bb:7d:26:9f:1a:a5:89:bc:bc:8d:de:ad:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=00baf8b3d80148a41af6f6a49dbdc4542934e5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:79:3c:e7:e3:ae:f5:0a:cb:9b:7e:73:db:
5a:1e:55:09:d5:d8:b7:e5:1d:0e:1c:30:3f:aa:f9:
3e:56:d0:fa:a1:f6:98:3d:47:1e:2d:16:c6:62:08:
2a:40:64:06:71:8d:07:12:f9:ab:1e:78:46:6f:41:
80:a8:b8:ff:8b:f7:19:59:fb:fd:bf:24:7f:2e:ab:
56:00:a3:5c:93:51:bc:d8:c8:36:ca:12:ad:15:37:
cf:63:3c:fb:57:1c:29:68:ff:36:4c:60:75:81:d0:
15:bb:71:f1:33:13:af:af:03:fc:59:fc:58:06:8f:
ac:53:15:87:2e:83:52:ea:a8:e9:af:70:2d:2f:48:
40:21:9a:28:41:5a:84:0f:d4:41:62:40:0e:b6:b8:
78:4c:05:67:e3:e2:f7:76:54:1c:42:56:cc:f3:91:
49:99:c8:de:ee:72:0f:a4:ff:c1:e2:68:2d:30:d8:
ab:4e:15:8d:e0:d3:87:d1:ec:db:04:d4:44:19:04:
15:ed:9a:f8:e7:d9:3d:70:fe:8b:08:06:98:da:83:
8c:04:14:ae:dd:47:5f:1f:1d:44:eb:fc:a0:d3:78:
72:82:ba:74:b9:34:93:3e:74:d0:dd:98:c0:ba:1f:
82:45:1a:d9:48:19:0a:ab:74:5f:2c:e2:84:9a:17:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:F8:B3:D8:01:48:A4:1A:F6:F6:A4:9D:BD:C4:54:29:34:E5:E2
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:17:1b:b2:dd:f8:12:05:ed:24:94:cf:ed:93:53:09:78:66:
47:82:0a:54:51:fd:83:a8:d5:d5:4c:0f:37:10:86:61:01:ef:
73:a5:f6:67:c0:fa:89:51:a2:59:ab:3d:d6:57:54:0f:bc:8d:
f9:c2:fc:16:05:b3:42:07:56:08:5d:d7:98:3a:72:97:52:fd:
fe:f1:9d:71:58:ba:37:c2:2d:8e:b8:9c:95:db:b6:79:42:d7:
e0:00:54:d3:18:7d:18:c3:a7:06:8c:72:6c:81:33:37:85:8a:
73:73:ad:53:38:d2:5e:02:16:05:fe:d2:3c:86:3a:7d:7d:2a:
0c:c3:60:0a:e4:8f:68:1a:f4:91:a0:a2:c9:2a:aa:e9:0b:13:
95:e8:34:92:eb:88:8a:0b:5c:48:0f:fb:c9:77:58:1b:3f:ff:
58:aa:c0:cf:f4:74:2b:15:0d:52:e9:c0:f5:93:28:ab:41:18:
7c:79:98:ab:d3:c5:d8:d0:3a:ef:c1:0f:e2:b9:f5:53:6f:9a:
4c:8b:87:1f:d8:39:ba:6f:f1:61:d7:7a:e5:1b:e0:f4:14:df:
0b:60:99:7c:3b:12:83:72:46:2f:a4:50:e2:39:33:33:54:24:
36:f5:61:40:6d:0e:af:d6:6f:74:4f:cc:e0:70:e8:e1:d4:0b:
5b:46:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client