Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File: o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier: 5OhmE+KTGwzrND2/17HiiMGFxB+rQ4b14l3h/Vu/BJQ=
Subject key identifier: 87:8E:90:43:96:F2:EC:5E:2B:21:A2:BB:44:DC:93:DF:DA:2E:5F:14
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer: /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial: 019A50E33BECCEF7FD5552BA224A28BBF2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number: 1003
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: Ln9TnfmWXa2uktKkG70E9YgUa9EezcG1Iz5ZG6fVqho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3b:ec:ce:f7:fd:55:52:ba:22:4a:28:bb:f2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=878e904396f2ec5e2b21a2bb44dc93dfda2e5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:59:65:68:ce:49:65:4b:14:36:7c:71:22:
17:3c:4f:f3:7c:b7:2c:33:31:b8:ea:b5:a3:b5:76:
f2:18:4f:1f:68:81:13:00:11:64:b8:57:cd:0f:03:
d0:de:04:be:9d:f0:5d:54:c0:eb:c2:65:10:b9:4d:
1c:d4:ef:c1:79:62:42:9a:d4:60:51:d9:97:fc:52:
31:c3:8e:b6:ff:a2:4a:b6:2e:bf:7c:a4:59:4e:b1:
16:78:f0:50:c4:a1:b3:18:aa:84:0e:af:80:56:33:
71:19:f1:4f:57:2a:8a:1e:74:ec:e5:08:1d:5f:0f:
21:78:cf:a9:fe:c2:15:a8:d6:68:6a:39:10:b1:3b:
bf:e1:d2:86:f8:28:57:c4:3b:19:c5:92:38:f3:bf:
0f:57:c5:f3:ac:eb:b4:a5:21:d9:96:ac:29:34:96:
c8:77:97:7c:7a:d7:40:e7:8d:da:d1:68:d9:df:03:
44:d5:d2:9e:5f:dd:e5:a0:39:79:7c:93:e1:22:67:
22:76:de:7e:21:8a:92:58:2b:05:92:06:06:2f:5c:
0d:56:f6:97:a0:7b:c3:1c:47:ee:39:7a:50:d7:99:
9c:c9:89:92:5c:7f:ed:6a:91:8c:d3:51:71:b9:64:
5d:d2:ac:84:14:0b:15:1c:bc:04:ec:19:ae:73:2d:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:90:43:96:F2:EC:5E:2B:21:A2:BB:44:DC:93:DF:DA:2E:5F:14
X509v3 Authority Key Identifier:
keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:6e:bb:47:0b:26:4d:97:7e:b0:e5:99:42:cf:34:78:8c:
a4:a6:f5:eb:41:dc:b6:01:f5:ed:6e:fd:21:25:71:2f:4b:3d:
5b:dc:10:18:ba:66:3d:46:4a:ce:e9:2e:3e:e6:0a:d2:03:6e:
7c:12:8d:88:4c:01:19:00:c7:7c:35:f4:87:f8:97:d7:fc:8b:
f3:de:12:19:43:fa:5b:2f:49:fd:80:8a:c2:fd:28:6c:a8:26:
90:16:c7:9a:da:71:73:76:26:cf:a8:eb:ae:7f:76:58:3d:72:
e8:c7:d1:92:83:7c:e4:e2:3b:20:19:43:80:05:13:5d:f2:03:
c9:3b:a2:65:6b:63:48:cf:8f:c7:97:10:a5:0d:4f:40:9b:2b:
61:ba:20:87:54:21:a9:72:2c:26:1b:1e:cf:a6:be:d5:94:3e:
e9:3e:a1:af:fb:ef:f2:e2:4c:29:2b:bd:e2:95:13:fe:c4:d6:
14:e2:42:cf:e9:15:75:64:c3:37:25:44:04:01:f6:6b:55:0c:
63:34:c4:b1:07:c6:1a:b3:f2:c8:1f:a6:0c:66:42:f2:bd:7b:
71:d4:7f:49:f5:e1:9b:2f:e7:57:c9:5c:0e:5a:9c:4c:94:f6:
ab:22:02:69:06:05:b9:b1:c2:a6:df:7e:4e:0a:3e:9d:83:04:
4c:01:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:48 2025 by rpki-client