Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: SoBwZh3vt059wpnIY8XtOV7Ao1soTDRDc/TdUY1S/jA=
Subject key identifier: 80:F6:EA:67:0B:3F:F9:D0:A6:A1:23:5C:45:66:8F:05:97:A7:5B:3D
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 0199FFFE5A677A54A8A5C23C5F7A5F69B748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 05:01:23 +0000
Manifest this update: Mon 20 Oct 2025 05:01:23 +0000
Manifest next update: Tue 21 Oct 2025 05:01:23 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 6h3Qb5gaTpLEMavsonhPLPvUbUOgHi7QQbrmIlLT/rg=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5a:67:7a:54:a8:a5:c2:3c:5f:7a:5f:69:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Oct 20 05:01:23 2025 GMT
Not After : Oct 21 05:01:23 2025 GMT
Subject: CN=80f6ea670b3ff9d0a6a1235c45668f0597a75b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:27:58:a9:94:32:2f:94:f1:68:c3:c9:52:
3f:b0:a8:4b:a9:12:8f:42:fb:f0:f9:9f:ec:6f:12:
e9:cb:4d:27:c7:61:60:69:09:e4:fc:31:63:c0:69:
23:d0:10:7f:f0:81:43:1f:a2:87:65:71:66:ad:1a:
62:2c:95:0f:53:2a:f8:81:2e:ef:d9:91:a1:cb:37:
93:db:2d:62:7b:65:a5:ea:5e:f4:2f:48:47:1c:5e:
ba:1a:62:07:cb:d0:aa:86:26:e8:06:63:3f:9a:21:
8b:e9:e6:3e:5c:ef:77:d8:4a:0b:d4:7a:b8:9c:61:
39:bf:97:82:cc:f9:c1:08:d8:fe:8f:6a:ef:51:58:
c1:8e:19:4a:12:7b:70:30:aa:bf:35:b5:d7:55:6e:
3c:73:c3:b7:83:f9:c0:f3:43:b7:ef:33:ab:6f:77:
4c:8c:cf:c2:39:81:5d:a1:8c:c7:2b:22:6b:9f:65:
0b:bd:16:5f:7c:66:88:17:37:cd:c7:e1:88:e4:2c:
d4:e3:62:85:a9:c8:b7:d7:3f:54:b3:ee:f5:67:cd:
e7:d6:67:bd:87:79:a6:8a:d9:7d:53:e0:8d:13:4e:
b2:05:26:cc:d3:d3:44:50:9f:21:36:d4:22:8a:d7:
9b:49:72:3e:98:5d:b1:51:68:9d:2a:49:47:2a:53:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:EA:67:0B:3F:F9:D0:A6:A1:23:5C:45:66:8F:05:97:A7:5B:3D
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:34:8f:8c:09:3c:d2:ce:c8:6f:af:a1:f4:28:1c:f5:cd:
93:57:f1:c6:a1:4f:fe:9c:c6:fd:12:9f:df:df:02:a8:c2:1f:
6c:5c:b0:36:a6:a2:9d:ba:b9:0c:64:91:3d:c0:07:6a:06:87:
b9:92:1b:bd:d3:8e:a1:9d:16:9f:5b:a9:4e:a7:f0:e4:bd:78:
3f:23:20:b1:2b:5a:b4:84:b2:1e:4d:30:45:98:2a:a7:24:45:
db:39:da:48:1e:86:27:af:c7:0f:a2:41:5f:74:f2:3b:75:65:
99:79:92:50:0e:8a:c0:41:66:c5:65:6a:23:76:84:7f:9e:94:
5d:e7:77:78:f8:16:d8:85:46:2b:3d:e6:e9:2c:d2:00:e9:92:
96:50:a6:d8:e0:0b:b5:51:8d:5a:a8:c9:d3:8c:6e:7c:23:05:
4f:f8:c3:d5:41:be:78:29:9a:22:96:5d:fa:9e:db:35:80:b2:
09:f5:04:0e:89:df:d5:f1:ff:dc:d8:07:1d:2c:45:f6:ae:6c:
98:c2:79:f5:f7:da:75:32:14:15:48:41:1d:52:7e:19:d3:d6:
13:7c:fb:13:5e:10:80:a7:ff:1b:75:e1:f4:33:4d:00:a0:50:
67:2c:9b:89:9e:65:2d:c5:eb:8f:33:66:10:d2:b4:3e:51:f9:
be:b6:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:13 2025 by rpki-client