
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: CO03ySedgYj9OiCN9FBOppLsRx2XxiTjCa50Gpnr5Ro=
Subject key identifier: AE:2B:6E:02:6B:DB:58:03:2D:31:5C:7E:A4:5F:8E:87:63:A2:8E:AB
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 0199FB460D5CF92FDF48619C75A497C8DFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 03C7
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: lA/+6l1c4VRpgGeZkCK7YHXn+YG/CnBTL11pJdUYraE=)
2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0d:5c:f9:2f:df:48:61:9c:75:a4:97:c8:df:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=ae2b6e026bdb58032d315c7ea45f8e8763a28eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:08:ed:0d:84:e7:a0:a8:e0:df:db:8a:8e:
77:b9:7e:99:73:35:af:2d:d1:44:db:8b:e9:03:b9:
bd:b5:a3:48:ef:f5:ea:69:30:93:3e:33:f7:c3:5e:
38:b5:43:b6:67:19:f5:9e:5e:86:08:a7:08:29:35:
4b:19:42:e3:3e:07:53:4c:ae:46:b0:8a:7d:5e:13:
ca:ba:23:5e:6d:22:47:3c:9a:75:44:8e:8a:9e:7a:
ea:5c:a4:8e:41:c8:e9:80:8e:53:a5:0f:9c:02:0d:
42:1e:88:c9:d1:54:04:35:30:c9:eb:e3:83:69:e2:
9e:1b:43:c1:0d:ef:ff:69:c8:1e:fe:8c:15:8a:ab:
d8:c7:13:98:73:d4:a8:09:0f:59:cc:14:2f:80:67:
04:f0:e3:ea:a1:fa:42:d4:ac:8e:8c:c7:79:48:10:
00:99:3f:ed:9c:31:89:7f:28:cd:d7:d3:7f:04:db:
1a:8f:5b:fc:03:97:dc:90:16:48:cb:3b:10:66:38:
3b:4d:40:f2:1b:e5:7e:72:32:ca:b3:ce:9f:b9:8b:
a3:a4:a7:55:ca:24:db:4a:cb:0f:39:41:55:3d:49:
a6:c5:3f:61:80:d1:91:b1:96:b6:d0:1a:33:cd:31:
30:b0:14:89:d6:1c:16:67:f0:62:34:6b:1a:53:49:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:6E:02:6B:DB:58:03:2D:31:5C:7E:A4:5F:8E:87:63:A2:8E:AB
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:ad:5c:cc:5a:48:cb:ff:e8:b0:cd:aa:d5:2a:55:40:5a:
e4:a4:0b:55:15:00:56:82:da:d8:13:93:8d:45:ec:53:42:4b:
45:93:36:3d:75:5b:11:6f:d7:9e:cf:2a:6d:a3:f5:3b:ad:f6:
a2:2e:9b:c1:81:5f:ce:71:4f:d1:6c:73:32:ec:eb:1c:ea:ea:
07:fe:c1:cb:fa:bc:20:bb:3b:32:ca:16:2d:c8:29:d5:a1:26:
32:5d:47:e7:f6:ea:70:56:c7:7e:0b:5f:50:f9:f0:02:e3:47:
12:01:22:1b:c0:d9:13:5f:55:f7:bc:ab:49:5e:a5:9b:38:db:
82:61:9a:50:c0:53:61:3f:7a:a9:86:b1:cf:31:62:13:73:61:
11:ba:c9:49:37:a4:cf:e5:4c:f7:68:95:18:db:eb:a5:04:e2:
a6:6e:c3:e4:d3:85:63:72:0e:87:11:3e:64:aa:48:98:f3:40:
9a:af:cb:9d:85:74:69:37:ce:be:4e:67:1e:8b:c8:99:f5:e1:
e4:ae:d3:b4:df:49:00:fa:18:f9:27:41:2e:e2:4d:eb:ae:fc:
da:5d:cf:01:d0:13:18:1b:14:ec:03:2f:54:73:3f:54:61:6e:
7e:64:60:e8:c8:8a:3a:4e:b1:ef:b8:f9:ac:cc:52:87:5a:70:
f4:49:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:43 2025 by rpki-client