Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: B9jPzVYVpoAAC/G8ajiMbYJhsSrdrWrPRU5gOBK/fRM=
Subject key identifier: 7B:38:11:B5:4A:DC:F5:9B:E0:DA:27:72:FE:EB:0C:8C:69:0B:46:B3
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 019A50E405A69854E8A3C9D837E111157BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:52 +0000
Manifest this update: Tue 04 Nov 2025 22:01:52 +0000
Manifest next update: Wed 05 Nov 2025 22:01:52 +0000
Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: 4WKaPANXGVF2kxWmUpuFOCPJsSdMGzUGNmTF1R/VRY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:05:a6:98:54:e8:a3:c9:d8:37:e1:11:15:7b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Nov 4 22:01:52 2025 GMT
Not After : Nov 5 22:01:52 2025 GMT
Subject: CN=7b3811b54adcf59be0da2772feeb0c8c690b46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:39:44:74:2e:86:82:f3:0c:aa:dd:7e:b3:
3c:ae:de:1b:db:95:dd:de:a3:58:ef:75:d3:c5:c1:
45:f7:91:bf:d2:8e:48:62:a1:58:32:67:6b:d8:5c:
74:6b:2a:e5:78:5c:88:bb:ba:46:df:c5:f5:2a:e0:
ce:7b:c0:ce:4d:47:68:ec:f3:10:6a:bf:59:0c:81:
63:cc:34:53:54:f2:61:08:80:94:78:c6:17:5b:db:
5e:bd:38:14:ae:5b:79:e5:2b:7c:ba:60:30:03:f7:
83:4b:39:44:d2:38:7a:3f:6d:93:1c:96:80:7d:2c:
2f:ea:d6:3b:1d:47:8f:e5:3e:2b:ba:61:52:41:c0:
44:66:6e:5d:70:41:8b:86:2e:c5:ef:03:b1:77:9f:
47:b6:38:65:ae:ef:3d:16:65:d8:e8:35:f2:d8:c2:
2a:8b:91:72:31:ee:b9:91:08:d4:81:38:48:ac:2f:
c5:54:0e:58:a9:84:f1:16:6a:ed:e9:24:43:e5:bd:
ea:81:45:20:30:bf:fe:b0:3f:5a:23:d3:ac:ae:1b:
f1:e2:53:cd:64:03:6e:95:f4:f6:70:e9:60:bd:42:
de:b5:f6:12:5f:ce:34:3e:28:4d:ef:48:70:3e:dd:
3e:b2:f7:b5:11:f7:c7:74:77:9a:80:c4:3b:20:05:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:11:B5:4A:DC:F5:9B:E0:DA:27:72:FE:EB:0C:8C:69:0B:46:B3
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:53:bc:35:eb:56:1a:7b:c0:80:c8:60:3d:80:6d:ba:71:
0d:4e:ec:12:1b:1f:99:8d:f2:a3:b9:4f:7a:c4:3a:71:4d:18:
72:a8:eb:25:51:31:65:f6:5d:2f:b8:17:05:76:4e:00:9c:5e:
c4:3c:37:84:6e:a2:e4:1d:21:6d:a9:42:04:6a:83:dc:1b:ff:
92:58:03:38:1d:0f:d5:54:44:cb:2e:ed:ec:bf:6f:b5:41:a1:
2e:92:f3:cb:f9:84:81:dd:00:f9:6f:a4:ed:a1:5c:66:cc:76:
f7:9e:21:8a:93:f3:39:0b:6b:6d:00:f9:76:74:91:78:5f:6a:
e4:0b:39:f6:38:b9:88:a9:58:13:b5:04:ee:d5:ab:16:0d:96:
8b:a7:59:dc:2d:a0:cd:ee:5a:42:7c:b3:44:2e:cb:63:e6:14:
46:a8:1f:67:99:55:46:b6:6a:d2:03:d9:b9:dc:5a:05:be:a6:
f7:c3:bf:2d:3e:f3:29:04:77:d5:b2:c5:c0:0a:68:a2:64:b6:
66:11:49:26:e0:c6:10:ca:37:2e:c5:04:75:eb:50:42:27:e7:
f2:df:2c:20:ca:a2:40:e4:4f:b7:f0:09:7c:3b:8e:14:75:62:
dc:e9:fe:3c:ae:0c:5e:91:a0:d1:1b:87:53:69:69:b6:2a:b9:
49:ce:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:32:18 2025 by rpki-client