
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: TET+j68UaphmoaJ+YxOZIbQhww9TaKwSktREJJhV8JI=
Subject key identifier: D5:79:C1:9C:B9:72:58:C6:CC:C4:12:37:15:1E:9D:9E:55:99:EC:CC
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 0199FB0F29CF06E21B7D416BFBEA7C089A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0FAB
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: lmZEWX1JdmPea6MqV2/uaxGpnv/FHJ6Rhj8bU8+gBSE=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:29:cf:06:e2:1b:7d:41:6b:fb:ea:7c:08:9a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=d579c19cb97258c6ccc41237151e9d9e5599eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:93:92:93:43:e5:c1:27:93:53:15:2e:3c:
a2:1a:7f:06:10:5a:ad:1f:9f:bb:d8:bd:82:16:32:
3a:b6:e7:4d:af:f7:d5:ca:74:a9:b2:e9:1a:17:82:
02:01:ba:57:16:21:e7:59:15:1d:8d:ad:7f:cc:86:
48:3e:f6:7b:7c:af:4d:e2:78:9a:73:10:b1:2b:24:
89:d2:3d:4d:b5:af:bd:77:46:de:73:58:a4:ef:7f:
db:74:2f:66:5e:a6:8d:6c:ac:1f:04:37:13:64:1f:
8c:72:45:c3:46:7d:c3:f3:ea:41:1f:89:fa:d5:bd:
90:2a:80:cb:43:bf:ce:f4:58:d5:56:fa:88:c3:33:
26:01:b2:12:b6:be:49:83:8b:fa:5c:b2:a8:da:35:
e4:f6:32:61:8c:66:b4:a8:96:f2:87:e0:1a:60:28:
d2:04:4c:6c:d1:fa:0e:15:47:e6:fa:70:83:70:8b:
16:d7:50:49:28:14:5e:71:ee:85:95:c0:3f:9c:c6:
93:dd:ad:57:5c:c1:0f:02:43:bd:ee:86:2a:c0:8d:
41:e8:90:e0:f5:fa:fd:00:10:4a:86:c1:ce:ec:61:
27:35:75:b8:d9:af:c2:db:a8:4b:32:e9:83:3c:7b:
5f:d6:4a:1d:78:45:5f:21:15:e0:c6:fd:7b:3d:5b:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:C1:9C:B9:72:58:C6:CC:C4:12:37:15:1E:9D:9E:55:99:EC:CC
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cc:66:ec:e3:72:b5:25:64:b2:53:27:a7:32:c6:e2:e5:aa:
52:b1:be:7f:b0:82:d7:a5:6e:64:a6:c8:ca:d1:98:85:c1:fc:
24:1b:14:3a:81:96:f7:50:b5:a4:cd:a8:5e:74:5c:a0:a9:14:
9e:59:41:8f:6a:ca:a6:24:4d:6c:63:66:10:99:64:b7:d4:06:
0c:bf:30:a8:73:eb:4b:eb:53:7b:64:bf:c6:a6:2d:61:b9:b3:
e2:99:c6:8c:82:b7:25:ee:ff:ff:11:22:c0:47:ba:ca:ae:ec:
5f:20:25:7d:ab:14:71:5b:bc:d4:b5:2c:96:ef:13:f4:43:c4:
35:7b:c8:0d:90:46:4c:58:d9:04:12:40:47:04:d7:ea:85:a1:
86:c7:35:65:2d:b9:32:a3:95:1e:fb:e3:33:56:51:99:65:62:
b7:88:76:14:2b:29:bd:3a:ca:99:09:43:70:56:ba:98:ed:d9:
20:57:25:05:50:5a:fe:a2:eb:2c:b3:3c:e2:02:2d:32:cf:67:
18:bb:a8:75:33:30:7e:1a:8b:c9:cb:df:62:82:b9:26:17:3a:
1c:46:12:af:5d:a4:9f:87:b6:96:ed:de:de:29:41:d7:8f:f9:
74:f1:29:84:e2:9f:b0:73:f6:db:50:58:fb:2a:5c:82:7a:b1:
2f:86:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:20 2025 by rpki-client