Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: EnR1jTMNvu7bbE2Xfm2tDi0oM4Aa3KLpNQVjA+aoXYg=
Subject key identifier: F1:E5:CD:5E:B1:23:48:23:04:48:8C:6E:B5:10:FD:B7:7A:74:2A:ED
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019A4EF4BF32FA29B97F17799C8EDDDA9F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 084A
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (hash: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=)
2: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=)
3: CSQOd1Ivsq7SauN1-IwPUSzYm48.roa (hash: dGIueTuGLpuTY7iHF/OWsqSj5IRgJq+ixisf6vrNlv0=)
4: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=)
5: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: EpD47UkZNh6Gk2xUPLzf5sn1w7NFk+oJucyzUNf9kw4=)
6: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bf:32:fa:29:b9:7f:17:79:9c:8e:dd:da:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=f1e5cd5eb123482304488c6eb510fdb77a742aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:a0:e0:42:a2:ab:6c:68:a5:41:56:49:cb:
94:a7:06:e4:1f:1f:c1:4d:b7:b2:f2:83:77:f0:0f:
57:62:78:c0:f6:82:d9:b7:62:2d:af:78:4e:b9:98:
4d:9a:85:70:4b:25:1e:0f:85:84:26:69:ab:11:80:
c8:6b:43:e0:45:c5:b5:12:a7:8e:94:17:19:f7:84:
97:aa:fd:af:1b:78:b8:66:d2:e4:f1:36:d4:64:35:
3a:60:23:03:cb:b6:4a:bc:ed:33:1e:91:21:b9:63:
aa:d3:4b:11:26:6e:0e:a2:42:19:e3:ac:8f:a0:f4:
40:23:ed:3a:fe:30:9b:bc:94:8a:e5:ff:a8:c0:d1:
4f:89:18:7b:b7:4d:ae:c0:a0:fc:bf:69:d3:a6:6d:
5a:c7:a0:af:ae:09:9f:6a:f7:79:10:63:49:42:c4:
de:e4:f1:0c:9e:9e:b6:06:a2:eb:37:26:9e:74:f2:
a1:6f:d6:05:5c:4a:b6:76:7f:7d:8b:46:40:ac:77:
6d:97:31:4e:b2:08:03:9d:ed:4f:28:24:da:38:cc:
f4:7d:43:88:18:48:04:2a:31:84:37:68:94:6f:f4:
7f:fc:3f:32:6e:85:3e:d6:ff:8d:af:b8:a8:9e:1e:
6a:22:92:64:fb:73:27:e5:36:e4:db:e5:bb:4b:4d:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:CD:5E:B1:23:48:23:04:48:8C:6E:B5:10:FD:B7:7A:74:2A:ED
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:2c:1e:30:9b:b8:7d:3b:b3:40:6a:1b:a9:b4:19:0c:df:
f7:b9:cd:2b:f2:85:9d:6d:bb:bb:2d:fd:84:5d:62:db:e4:e7:
30:aa:45:9b:8f:51:b9:1f:76:5a:e7:c6:26:fc:f9:34:fa:f7:
d0:6d:f6:5f:7d:9c:f5:3e:3a:b2:3c:d2:2c:8d:bc:ea:87:73:
67:4a:72:50:27:75:63:c1:ed:33:11:4f:d7:46:88:da:bc:4b:
cd:f8:6d:79:90:1d:21:80:77:83:3a:94:03:2b:56:14:4c:9c:
ba:d0:26:dc:de:01:6f:ff:58:83:6d:7b:1a:0d:0a:fc:2e:cb:
73:16:17:3e:7e:16:b0:d0:63:aa:2b:74:22:78:ef:0a:69:0a:
9a:d0:19:1e:5c:79:a2:7c:60:e3:b2:fb:c4:2d:3a:0b:38:7b:
57:68:22:d7:fc:d6:01:bd:60:e7:77:21:4d:ca:bb:35:2f:1d:
70:4a:36:37:e3:3a:e4:40:d7:bd:0c:f6:42:87:16:1a:0e:79:
9b:66:80:6c:28:57:ac:17:8f:d7:3e:63:02:26:10:9e:4b:87:
b0:66:93:ac:3b:07:fb:ce:8e:16:a3:f6:b3:e4:65:e9:53:90:
29:89:b2:32:98:a5:b3:ce:a5:61:cd:f8:54:75:46:1f:a9:36:
a0:23:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:05 2025 by rpki-client