Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: Mdjo3ez6snFDYIR+RTfhEyXTzE72X+tbzyCGRidDk8U=
Subject key identifier: D5:54:14:2F:86:86:A8:43:06:25:BC:FC:82:62:61:7C:80:E0:90:0E
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 0199FC218F5E883B3EDFDF689048DA401F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: ncc5Ff3EfPWmzpNTU/VMzX8QEDMwtsMOKUJT4xshEak=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:5e:88:3b:3e:df:df:68:90:48:da:40:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=d554142f8686a8430625bcfc8262617c80e0900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:95:69:da:bf:42:9b:61:23:b7:86:9c:80:
dd:36:39:f6:d3:7e:60:dc:a6:b3:e4:ab:e9:8e:3f:
1a:86:f1:b6:02:cd:f9:f5:b8:c0:c4:b5:87:8d:3f:
32:e9:c4:69:d1:d1:90:bc:34:94:e2:15:c3:d4:21:
cf:c0:d2:aa:d1:7e:78:ea:4f:9b:f4:25:27:ea:cf:
b3:e6:3b:a4:f2:da:2e:b6:c6:b1:dd:02:51:25:14:
da:67:a3:31:5f:30:b1:f2:f1:d3:e3:32:09:c0:7d:
ca:28:6d:a8:e5:38:47:71:ad:81:87:65:bd:f3:96:
2e:81:ef:2d:69:20:e2:d0:2b:ad:65:b1:c2:07:a2:
fc:32:8a:a8:aa:90:d1:a7:90:89:82:65:3a:51:d3:
a1:49:5e:88:3d:cb:6b:ff:ce:81:41:4d:b3:f1:50:
b9:61:cf:16:dc:56:9d:b2:7a:2b:25:ce:09:fb:dd:
d3:57:a8:23:1b:b8:be:e3:3f:e1:ae:1a:e4:b2:ac:
a9:32:fd:79:28:5a:14:f6:90:4d:7d:ce:33:1c:82:
8a:2a:ed:7a:96:d9:a3:d3:0d:bc:89:f2:f8:36:72:
5d:41:53:76:9c:78:18:ce:d1:e6:2f:27:c4:14:15:
56:4f:79:bf:a4:ba:50:98:a1:75:49:3a:c6:3e:ab:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:14:2F:86:86:A8:43:06:25:BC:FC:82:62:61:7C:80:E0:90:0E
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:00:64:e2:a3:b4:40:e0:43:cd:f6:2b:63:ef:0b:32:69:
e8:b5:51:80:b5:50:ab:7e:dd:41:12:12:b4:0a:23:1b:28:bc:
98:36:84:30:44:e2:e0:93:37:4e:27:d3:9d:af:3d:5c:d7:62:
83:38:93:ae:a1:b3:04:03:34:c4:68:1b:e6:a4:2d:24:9f:64:
77:d5:27:27:22:aa:81:47:0d:2d:8d:b5:26:a5:e7:1a:c1:2d:
38:4e:38:34:04:6a:c2:3e:71:76:62:fd:1e:05:3f:12:98:dc:
8c:e5:8e:f2:55:ce:8e:30:25:29:a7:c8:11:a9:d9:48:fd:86:
74:87:f8:1e:90:e6:8d:b3:cc:ea:64:82:aa:c9:31:46:7c:da:
ba:f7:cb:e7:48:85:69:95:bc:f6:bf:67:12:1c:08:2f:52:de:
7b:cd:9e:f6:5f:ea:14:08:50:b2:7d:d4:09:36:08:a2:14:2c:
7d:24:f6:7b:c2:d8:73:b6:76:a3:a3:56:ea:99:67:40:cf:8e:
47:f4:cb:61:a5:8b:60:e8:8b:62:04:34:d4:2e:1e:d2:a6:bf:
ac:85:cd:85:cc:cf:41:c1:d1:89:ca:31:9a:55:2a:88:d3:54:
ac:74:ae:ae:42:dd:d7:3f:f8:b6:d1:42:04:ce:bc:89:19:53:
b9:82:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:10 2025 by rpki-client