Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: YwPB296uCkeKNFUbzPH9eh6qWnkKc8qD2zQ0YtTVaVo=
Subject key identifier: 55:D5:0E:65:87:93:4B:95:A9:36:71:FF:3D:CC:F9:E3:E8:F8:7C:44
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019A4DE1E2463ECA7A754FF7F1C29ADB6BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0360
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: JMhfJx6Dbcb7k2DnEEZHxExbbm1jtOv0mgTOxBhLe8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e2:46:3e:ca:7a:75:4f:f7:f1:c2:9a:db:6b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=55d50e6587934b95a93671ff3dccf9e3e8f87c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:d6:de:3f:cc:fd:90:99:95:87:5f:60:27:
3c:4c:33:31:d6:4e:69:2b:d1:ca:8f:f9:07:ef:18:
0f:9c:ce:db:ea:7c:6d:e0:7b:97:ea:fd:59:59:80:
fd:3e:85:58:71:69:b0:a8:74:fd:bd:93:3e:45:d9:
8f:71:1d:35:eb:58:f1:98:f2:06:6f:9b:bb:4c:68:
ff:0f:1c:e1:34:2b:5a:d3:7a:ed:ce:87:15:56:3c:
48:9b:b4:e2:bc:bc:9f:36:af:a4:77:70:0f:75:a6:
65:48:54:ec:ca:18:b3:f8:17:df:15:2e:ed:fd:35:
c4:b4:42:47:76:e4:14:82:0e:d0:1d:23:26:67:09:
24:ac:d0:31:ce:fb:d2:68:2b:03:59:95:a7:68:52:
c6:79:78:ce:c8:97:0d:40:5d:9b:ec:1b:05:e1:bc:
e4:9a:c3:bc:da:83:b3:ce:15:0d:9f:bf:13:cb:44:
2b:11:c1:60:71:4f:a9:50:b7:ef:3a:06:13:96:57:
42:9e:8d:50:bb:31:f9:03:e9:66:aa:22:5f:66:ee:
1b:7d:99:a8:75:14:d7:38:a1:21:86:cb:43:75:54:
64:37:a4:ff:f1:0a:b1:02:41:2a:1c:10:49:f6:7e:
1c:9c:d2:b5:29:53:2b:97:fa:26:71:b6:e4:e1:b8:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:0E:65:87:93:4B:95:A9:36:71:FF:3D:CC:F9:E3:E8:F8:7C:44
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:65:5a:cb:67:71:2c:d1:56:34:3f:80:57:02:be:92:03:4d:
b1:b7:d5:7a:05:3b:d6:4b:33:e8:7e:f3:28:0f:10:c6:4d:b8:
2d:60:27:e4:cf:13:88:d0:1f:20:69:2d:0c:e0:06:e8:41:3e:
71:85:a4:a7:e4:e0:e6:15:18:77:73:f6:01:5b:6b:18:66:83:
54:f3:11:68:cd:4c:e4:a8:fb:75:87:b5:93:92:8b:8d:36:28:
b2:a5:bb:9b:9b:ee:03:0f:cd:3a:17:4b:0b:0a:ac:70:44:66:
8b:bb:b9:e4:0d:cb:0b:f0:87:32:4b:b6:31:6a:5d:5d:68:e8:
ed:90:f5:7f:a7:62:e4:21:4f:98:de:c5:b8:06:b4:bf:eb:2e:
66:83:f0:69:6f:cf:9a:60:90:e2:b9:71:36:df:20:85:99:15:
99:a7:ca:5b:fe:fe:5c:8e:35:e3:f0:a2:03:07:09:31:98:11:
cd:ee:ff:d4:a9:33:8e:64:30:4e:87:f6:c3:51:69:21:9b:2b:
6b:15:40:1a:04:78:6d:09:d2:46:2a:29:bf:03:ad:7a:94:1d:
7f:7b:71:fa:2a:b3:43:89:bc:a3:0b:87:aa:cb:6c:77:28:f6:
9b:67:cb:04:bf:cd:99:04:be:c6:a5:04:54:a7:79:e6:f8:59:
ac:13:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:20 2025 by rpki-client