Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: /2NkJUGtSZ7zK1zcmcLGFCRlejHHifdNZ+KNgVfxMm8=
Subject key identifier: 7E:46:2F:85:27:07:2B:05:7B:36:42:D6:96:9E:92:9F:AA:24:8A:02
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0199FBEB455A2A62EBE1F86EAD9DB867E4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1328
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=)
2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: j7cXoZ7x9yhCLCN8IijEHbd/5UURLlLn5E4N2fRV5co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:45:5a:2a:62:eb:e1:f8:6e:ad:9d:b8:67:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=7e462f8527072b057b3642d6969e929faa248a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:05:b4:a4:70:07:3d:31:2f:43:62:94:fd:
ae:4d:c4:89:f0:7a:16:20:be:fb:f3:79:5f:f5:3b:
b6:16:be:5d:38:f5:74:fc:9e:5a:bc:84:c1:e2:a3:
6b:8e:99:48:a2:ea:e5:02:7e:68:d8:49:93:76:5b:
b7:e1:49:f8:78:4b:53:50:50:2e:1e:29:63:fd:11:
59:c6:54:41:d2:b6:6e:5b:0b:bd:c5:1d:40:b6:0c:
8f:9e:cb:ce:ea:a2:57:f0:28:dc:87:6a:dc:b9:69:
12:8d:2c:7b:0b:59:18:80:67:c7:59:5a:80:d3:71:
e4:d2:ad:dd:16:60:7c:b7:10:7c:1b:7f:1a:36:ff:
57:7f:08:5e:84:ae:4b:d9:87:7d:7c:5f:cd:05:c5:
00:e5:19:76:89:c0:e6:30:14:a1:69:3e:2e:ac:05:
cf:55:46:f9:2a:26:03:84:f7:98:a3:fe:da:a9:98:
b9:69:37:0e:b4:49:fb:df:88:86:e1:32:09:37:f7:
9c:80:e3:a9:b0:52:30:b8:e7:14:39:d7:91:8c:08:
96:99:64:61:fe:14:68:2b:f5:30:92:58:5a:76:17:
5b:51:b6:c5:7d:9f:b2:e8:de:6d:b7:f6:a6:11:8b:
79:c0:d3:d4:42:cc:68:62:4a:f5:24:db:d3:e6:4b:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:2F:85:27:07:2B:05:7B:36:42:D6:96:9E:92:9F:AA:24:8A:02
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:2c:9f:a6:e5:3b:32:d8:b9:db:03:27:66:75:93:8e:7a:
b8:c6:32:62:9f:97:f7:cb:bc:93:e6:7a:04:0f:a3:98:7b:f4:
c4:dc:12:8b:1f:d8:f8:1a:d5:46:26:ed:58:17:4b:a0:59:14:
86:e7:9a:79:c7:a4:ad:8d:95:a0:cf:59:82:be:63:4d:07:55:
45:a1:0d:63:43:b9:45:30:95:18:87:5f:76:39:11:58:4f:22:
30:64:d0:c1:4a:0a:ea:87:24:77:aa:5e:1b:58:78:03:52:48:
63:e0:d4:00:c8:04:b2:f2:a8:2f:35:04:ba:ef:6a:16:25:0e:
04:ea:45:86:94:27:fc:57:42:c9:86:99:11:5b:e0:c6:fc:d3:
aa:4e:c6:50:fa:a0:64:a9:b1:79:9e:2b:ca:ac:d6:8f:c7:04:
df:eb:3d:27:03:11:87:3a:5a:87:dd:ce:ce:1f:4d:b7:60:58:
d9:c7:f0:63:4e:bd:3a:20:d0:5e:ff:df:0d:5e:d4:1b:f2:cd:
8f:d4:91:0d:fc:bd:e7:ab:d5:e1:99:a6:72:2e:83:fb:fc:13:
57:ea:a8:ec:ea:42:79:99:0c:11:c0:d5:1e:02:bf:ec:6f:a2:
bc:8a:b4:df:09:6a:19:36:f3:9d:f1:c8:86:99:d6:73:66:8f:
28:0b:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:55 2025 by rpki-client