Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: RK391wPpcRNAbhdt3bhy5SIHq4disnhBcP41nguuzu0=
Subject key identifier: 49:D4:2D:0F:8A:1B:23:B4:71:43:53:08:44:E3:C5:46:36:2B:46:43
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 0199FC58DDD4B66602280AAE0218FB318B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: 5mPv+vgzPE8aOs0Ed+UnqpeJ4N3skRqeTd20I+OW4/E=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:d4:b6:66:02:28:0a:ae:02:18:fb:31:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=49d42d0f8a1b23b47143530844e3c546362b4643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:c1:04:9a:1e:ce:28:32:75:05:d9:46:bf:
00:be:d8:3f:f2:88:f2:4b:9f:25:f3:1c:46:da:cf:
91:08:f7:9b:40:1b:47:73:d8:3f:72:24:92:5f:87:
8e:da:52:01:cc:68:7f:1c:1c:00:53:1b:19:3f:6a:
1b:58:f4:7e:22:99:8a:9a:53:47:e0:10:6c:c8:ad:
33:1b:2a:c0:3f:42:e1:1c:ed:4a:d0:36:18:17:59:
48:28:37:38:ef:f9:8c:5b:1a:e4:7f:3b:2e:a5:5e:
08:d6:8d:d2:ad:c8:93:62:7a:df:70:9b:f0:70:84:
e8:5c:7d:f4:17:92:a8:4e:3d:e8:04:2d:df:69:31:
12:77:fa:20:ef:da:a7:33:72:08:c6:1e:5b:6b:8b:
e5:6c:f1:53:6c:64:2e:34:b2:53:e5:98:56:75:65:
84:a4:5b:88:85:37:ff:e0:75:92:97:cb:62:cb:b9:
6d:45:8d:3b:3c:f1:e4:a4:c0:37:c5:2d:c0:4b:7e:
41:cd:a4:4b:34:3a:0f:5f:0a:04:47:dd:32:95:ca:
d2:78:58:7e:86:dc:2f:a6:f1:ba:b1:47:ba:f4:ae:
81:e7:27:f6:17:86:21:62:48:31:06:00:2b:37:d6:
c2:66:9c:2e:cf:67:f1:5d:c4:9e:92:2c:9e:f4:72:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:2D:0F:8A:1B:23:B4:71:43:53:08:44:E3:C5:46:36:2B:46:43
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f7:27:21:a9:65:ac:24:a5:85:ac:68:42:53:86:35:37:91:
00:e5:83:43:cf:9f:e2:cf:a6:d2:20:35:bd:a8:e6:10:1d:38:
a5:e1:97:62:b0:16:28:36:7c:bf:45:47:c0:26:6a:83:54:22:
b8:ab:25:23:e3:f3:77:f5:d2:c9:be:38:94:3e:4c:b4:ab:3e:
fc:a8:0c:3b:f8:af:1d:08:a3:f4:68:7f:9c:cd:22:4c:4d:fb:
dd:70:bb:d7:7c:6c:a5:0b:bd:b4:69:ab:61:ff:6b:2b:e5:6a:
c6:da:87:c6:4e:63:95:47:59:b8:a2:86:2b:43:ab:a0:ca:e1:
eb:76:a8:4a:cd:6d:d5:ef:7c:e3:3f:d4:f0:89:57:d7:5e:fe:
04:f2:00:58:7b:86:90:7f:50:df:3b:3a:e9:bb:96:f4:db:d8:
50:fb:ae:1e:7b:e7:e1:e3:e5:ac:ff:5c:36:ec:c8:d9:00:11:
ac:93:a9:f7:b4:05:5b:63:89:cd:f4:b9:27:fb:19:a7:0e:90:
8e:57:43:f6:a3:17:7a:2d:58:31:5f:2e:80:db:e9:b6:31:08:
16:e5:0a:dd:4c:48:24:2c:67:a8:28:d2:00:53:ee:e8:5c:bc:
6f:42:51:07:78:d2:58:f4:f6:a0:4f:4f:be:d2:63:a1:d5:2d:
d5:6e:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:00 2025 by rpki-client