
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: HkzL7YxDxlHMewqhrQvhxeoyoLhS0R4gnciXkjZCzjQ=
Subject key identifier: FA:4C:E9:95:97:DF:8E:F8:82:A7:2F:28:D5:AB:73:86:0D:16:EE:F1
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 0199FBEBF4535E8C4128ADFD4054E0CCF27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0DB8
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: 2QCi3OzLJjobSDfElAyPIe9GOmdicaVXbvxoRIuhU2o=)
2: cQgNKWK-mfm6f4cfHvy3mXBeUkc.roa (hash: Eznu0WnXIaaF/obgJMif142Kzoju4lKJjzxlXuNlG4c=)
3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=)
4: qnpsS1IYjsvMaOko98oEnyZdTNQ.roa (hash: I8xfQRtglbJjeOJDoN+r4tmjRQM6wlmlXVGeos6jp20=)
5: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:53:5e:8c:41:28:ad:fd:40:54:e0:cc:f2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=fa4ce99597df8ef882a72f28d5ab73860d16eef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:f6:e6:ff:c2:85:c6:58:a1:d8:f9:8e:1e:
87:66:5c:91:2b:4c:45:b0:0e:24:9c:02:8b:91:90:
22:2d:7e:7d:8f:62:01:da:fb:f8:34:8d:6d:5a:f5:
f8:ba:35:cc:0c:4e:81:81:c2:a5:31:1d:4a:3b:fb:
6a:48:33:57:de:ad:a2:4a:a1:ea:17:21:0e:0c:d4:
85:9c:97:87:d4:5f:c5:b1:5d:2c:b6:d9:d7:66:d1:
92:bb:fd:a8:bc:83:f3:55:ed:5f:01:25:be:48:72:
b8:ad:ec:38:f0:68:97:ac:2f:34:17:51:c2:7c:76:
b3:a9:9d:73:d1:5e:ef:04:47:cd:8c:0c:cf:a3:1a:
71:4e:8b:12:fd:e6:54:46:39:74:fd:5c:a8:0e:ce:
1a:7e:3a:36:29:51:3f:c7:09:f1:63:f3:4b:02:0d:
70:4b:f7:62:c3:b4:af:75:0a:9b:09:b6:0b:27:07:
b1:11:52:38:ed:5b:60:4a:7e:63:cd:51:36:03:af:
c7:72:4d:dc:33:85:b1:bf:84:e3:f0:ae:de:b5:94:
49:25:db:40:1c:98:8c:57:3d:cf:52:7e:bb:84:8d:
ae:7f:da:e6:4a:2a:6e:be:4c:ff:ff:5b:d8:6d:45:
e8:f7:ec:d8:73:ec:59:30:f1:ca:37:c3:38:e9:a1:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:E9:95:97:DF:8E:F8:82:A7:2F:28:D5:AB:73:86:0D:16:EE:F1
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:b5:6a:cf:0b:c9:96:56:20:a8:f3:29:b7:3d:00:4a:b4:
ee:f0:11:b8:d4:a7:a4:ab:f7:0c:63:43:8d:59:f3:f7:cf:76:
53:e3:69:b4:a3:7e:3c:9d:04:cf:e0:e9:d0:08:1d:14:61:95:
c0:0b:86:0f:42:fe:0c:72:47:2d:7f:4f:09:f5:7a:f0:5c:c0:
a9:20:c1:44:dd:34:1f:97:93:c5:6e:2d:69:ae:34:c5:b4:53:
81:90:95:1c:ed:09:f8:4c:52:4e:a4:77:bf:36:e7:d2:25:3f:
a3:6c:6a:39:84:9c:66:3e:1d:63:dd:77:06:70:45:01:af:ce:
5f:f2:bc:fa:23:7a:d5:f1:67:2e:9b:7a:63:a2:92:c0:60:7a:
78:6c:63:60:11:1e:68:e5:3b:b3:79:59:e0:16:83:b0:fe:40:
89:f4:94:4e:9d:d6:0e:d9:c2:a4:3a:f5:2f:f6:da:e4:50:d2:
2b:37:c2:a6:c1:95:ad:e3:53:a2:8e:f1:bb:15:89:0a:26:01:
05:0a:9e:ff:31:b2:44:86:c0:60:28:65:59:58:14:6c:2b:20:
ef:26:6e:ce:c6:d4:b4:99:31:4b:0f:99:2a:42:12:58:0e:95:
59:8f:b3:89:91:1b:cc:9b:f0:ce:fe:54:40:75:46:52:6e:34:
79:63:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:39 2025 by rpki-client