Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: Hi4alrPRyGTrfh6uzvIbbf3mYtYNNPP07VNLIk3RE/Y=
Subject key identifier: 91:EC:80:7E:6C:20:87:C6:76:EF:1A:0F:C4:33:AB:36:72:16:46:60
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 0199FC8FA26C59E34285CF18074AD695FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 0323
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: e2hjr+hReOUXTFrAspQiXqt6g5elzdORSb3ZEMEGkSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a2:6c:59:e3:42:85:cf:18:07:4a:d6:95:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=91ec807e6c2087c676ef1a0fc433ab3672164660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:f6:3f:d5:a3:1c:10:65:e9:d9:f0:f4:6b:
39:0c:c3:2b:01:76:81:15:5a:77:9b:b5:a7:23:87:
bd:47:33:55:2e:39:c8:77:42:19:e7:f8:f7:78:a3:
75:cd:cf:c3:6f:47:eb:3c:be:86:5d:1b:4a:c0:83:
1a:62:29:d3:e8:02:96:cf:45:ad:26:53:1c:f7:5c:
e7:61:b1:3b:7c:3e:4f:05:c6:5f:cb:9e:97:a6:07:
6a:e0:06:7e:72:f8:86:94:54:5e:ff:ba:ad:11:71:
8d:33:ed:66:f4:e1:2f:6d:9d:e9:b6:50:54:45:70:
4d:90:88:58:63:2f:31:ab:51:66:9b:15:46:e3:bb:
f4:f3:d5:09:af:6f:bc:d7:41:1a:81:33:a3:72:dd:
0a:00:80:f7:1d:f4:27:bd:eb:8f:2b:2d:42:35:43:
df:65:85:8f:0d:ec:4d:88:30:e4:ca:da:dd:67:83:
12:96:ed:ca:f0:9a:4a:8a:7c:8a:de:bb:2d:22:40:
d9:d7:2e:1b:16:96:f3:b8:fb:6a:c2:0f:3a:3e:7f:
c1:da:0c:47:9a:b0:33:01:8f:af:c1:c3:7a:c0:27:
35:b4:32:fa:de:52:5f:8b:2f:82:0e:39:ea:41:75:
87:82:ac:83:aa:8d:9f:f2:64:b7:9a:b0:4e:20:de:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:80:7E:6C:20:87:C6:76:EF:1A:0F:C4:33:AB:36:72:16:46:60
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:15:54:8a:11:74:fe:f8:3a:6e:b0:3e:b3:91:2f:3a:b9:c3:
76:2f:64:f9:c5:93:ad:31:ee:3d:b4:ea:43:18:de:65:ff:0a:
ba:b8:53:9d:e8:d3:aa:4f:c4:17:49:c5:48:53:ee:3f:25:9e:
4c:e7:9e:4c:dd:f0:0f:48:2f:ba:79:7a:a0:68:53:1d:e5:4c:
19:05:50:56:32:98:f5:52:5e:a3:df:42:49:9d:3d:bf:5e:3d:
0e:79:b7:fb:01:e1:1c:f7:79:e4:7d:bc:c2:a6:3b:16:af:e9:
df:e8:1e:28:0b:ab:7b:08:c8:f0:fd:95:6d:ba:1d:81:5d:da:
7a:5d:ec:f2:43:3e:dc:1a:72:69:36:48:66:48:20:5f:19:f8:
42:db:47:d2:4e:17:a7:8b:a5:d4:e9:06:25:ac:cc:21:9d:6b:
68:78:d2:6b:d7:d5:5d:7f:07:ed:63:cd:69:08:68:e5:9e:28:
4a:83:82:b8:22:c5:3d:49:9a:d2:9c:31:e7:5e:f1:9a:99:81:
ae:c0:3b:9c:a0:c6:50:85:13:d6:d2:bf:94:0e:6d:cb:32:e4:
65:b3:67:c9:a1:f9:6a:09:c3:da:14:39:b7:cf:08:05:a9:98:
89:72:f5:cd:c3:4b:16:22:db:56:7e:0e:72:c1:8a:c8:4a:49:
46:d6:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:16 2025 by rpki-client