Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: HlMBUqu3CWbGLTA7hRiwbFoZIQUzCelsDgh/sEkNHmI=
Subject key identifier: 1B:C5:08:7F:79:6A:33:29:D2:D5:26:AF:BE:C2:FD:0E:4B:0A:CA:FE
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 0199FE46E6985717118D53B1322BE124171B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: D6fao5IHFBrTPxGT/N1My8Eub6Z8WZp8SNZ399ePCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e6:98:57:17:11:8d:53:b1:32:2b:e1:24:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=1bc5087f796a3329d2d526afbec2fd0e4b0acafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:f4:6c:3a:7f:f2:ee:e3:a3:f6:18:fc:e1:
8b:40:74:16:e9:5d:c7:be:14:be:6b:d9:56:f5:10:
dd:c8:66:78:4a:72:d5:fe:c4:ce:ca:ed:27:d9:37:
2b:a9:dd:8f:1d:f0:a2:aa:c9:3e:1a:65:af:c9:8e:
43:ac:4c:9e:04:cf:68:af:5e:c3:0c:37:51:6d:d6:
61:c4:7e:17:e8:d6:8d:04:0f:fc:dc:27:ae:40:b9:
d2:f3:75:23:71:03:82:00:69:90:d8:5f:26:54:21:
ae:f5:45:c6:30:e6:73:01:ad:42:ff:ba:fa:14:87:
c6:86:68:21:1e:0a:5e:bf:5f:4b:0c:37:bd:f5:d7:
80:e1:eb:62:95:cb:f6:5a:7d:46:cc:93:89:6f:a4:
e0:a2:1a:ae:10:47:80:d3:94:0d:3b:31:c9:0e:92:
95:1f:35:45:22:2f:66:c3:d2:0e:0e:73:f5:1d:a7:
ae:a9:0e:32:6b:05:41:03:3b:ee:77:19:a0:9e:9c:
ec:6a:9a:5f:30:4f:97:f0:58:4d:2c:f7:0d:18:78:
3e:dc:fd:bf:ff:c9:11:a1:9f:5e:14:80:35:e4:ea:
35:eb:dc:87:2a:e6:4e:77:29:2d:5e:55:88:3f:02:
23:39:6a:85:e5:3b:1d:98:d5:7c:a0:65:11:ff:3e:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:08:7F:79:6A:33:29:D2:D5:26:AF:BE:C2:FD:0E:4B:0A:CA:FE
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e4:87:eb:b8:42:62:dc:8f:5e:10:15:bf:cb:7a:dd:38:41:
b1:4f:36:a1:7b:f7:1c:b1:52:66:cd:a6:22:38:20:64:54:60:
45:23:b3:b8:53:33:26:ca:d0:9f:15:dc:8a:34:83:89:5d:80:
8e:ab:28:d6:f1:8b:85:5f:a0:ef:22:57:99:af:0b:d7:e6:98:
fa:a4:a9:4c:6a:6c:c0:39:39:06:42:27:59:a5:e2:8c:93:9f:
37:a7:2c:c6:20:90:5f:4c:1f:d8:c6:d1:60:f5:a7:b6:1a:0b:
65:59:a9:fe:a6:2f:f1:06:9f:51:c7:1d:42:89:ff:43:6e:59:
09:48:e3:69:c8:d1:0f:8d:da:0c:3c:65:c9:27:28:a0:0c:70:
a9:40:69:a2:65:9f:e6:d0:c5:72:ea:a3:04:3f:61:3b:16:0f:
15:df:36:bc:2a:f6:8f:f1:fd:d7:12:82:c9:d3:42:46:96:88:
e2:f5:85:77:c4:4b:fe:03:86:8b:f8:0a:83:40:28:ec:8f:42:
87:cc:09:85:5a:7e:85:f9:d6:b2:7a:af:5f:ef:26:7f:e8:16:
2f:b9:f4:98:85:84:85:2e:67:dc:b8:df:89:6c:b1:7c:9c:50:
8a:2f:8e:d4:f1:23:e7:7b:7e:eb:0a:19:88:60:a0:dd:8c:e8:
91:bf:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:34 2025 by rpki-client