Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: B/djKU95avmals7Bu1FMwep/FnE3iLbXYA9X4byQ+Ks=
Subject key identifier: 7C:27:E7:86:E6:47:39:C0:51:BD:7C:AD:E2:20:21:3A:14:D0:A9:9D
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019A4D078425759390F8AC3CBB915F2D84B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 04:02:09 +0000
Manifest this update: Tue 04 Nov 2025 04:02:09 +0000
Manifest next update: Wed 05 Nov 2025 04:02:09 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: kmmUXzksts5KYVEprwSWOzsP3ljLhHknUIrF9Q+OpEw=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:84:25:75:93:90:f8:ac:3c:bb:91:5f:2d:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Nov 4 04:02:09 2025 GMT
Not After : Nov 5 04:02:09 2025 GMT
Subject: CN=7c27e786e64739c051bd7cade220213a14d0a99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:aa:1e:40:79:a5:ef:c0:83:d7:7c:4d:49:
e6:b9:16:c7:b4:8b:01:24:8c:89:42:1a:6f:62:3a:
50:d5:1d:50:49:4c:fb:20:86:f5:6b:b6:8a:d8:ca:
85:c9:07:7c:6a:a5:3c:d9:8a:59:5e:5f:db:ca:af:
fa:1a:9a:b3:e1:f1:27:aa:2d:4e:a8:61:f2:82:38:
ab:42:a3:3e:e5:ce:1a:2b:92:0b:dc:96:a8:b8:cf:
22:c1:d2:9a:01:db:ee:b0:af:f9:8f:23:3d:41:2b:
11:9b:d9:82:b5:b3:a6:b7:5c:d5:ce:a5:bd:36:25:
b0:3e:74:86:de:c7:7b:57:b0:cb:8e:d8:38:0e:ee:
66:50:70:19:b2:0b:66:f1:f5:bc:4a:be:71:1e:d0:
f6:cd:a2:dc:b4:4b:d9:1b:9e:37:fe:cc:ca:49:ca:
10:fc:0a:68:1b:9e:04:f4:de:c9:51:67:67:07:f6:
38:a5:cf:55:7c:26:2a:d9:78:4a:a3:18:fc:f4:6e:
c7:92:52:ef:52:b0:6a:e3:fc:98:5a:bf:56:99:84:
9e:40:33:66:06:ac:ca:94:93:03:98:5b:55:69:5b:
12:1d:4e:24:48:66:9a:fc:aa:3c:36:4f:a4:3a:fb:
34:49:22:44:99:13:47:3a:f1:ec:c6:78:14:cb:2f:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:E7:86:E6:47:39:C0:51:BD:7C:AD:E2:20:21:3A:14:D0:A9:9D
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:e9:df:c6:cb:94:fb:41:84:fb:b6:e5:b3:21:db:67:7b:
09:99:c0:99:4e:22:c5:90:94:e9:58:60:99:ae:cb:61:1d:e9:
77:ef:7d:3d:1e:8b:9e:7e:42:36:b6:6c:37:f4:49:bd:11:5d:
22:fa:f0:da:34:6a:e9:35:a9:4a:aa:94:1a:2b:f7:05:c0:b6:
0d:86:66:be:5c:d4:80:e7:ea:4b:6c:7c:6d:b7:d1:41:79:73:
85:55:a4:0d:be:60:82:87:e7:11:d4:6a:21:d5:2d:b4:bd:bd:
8c:c9:83:52:40:c2:c6:6a:09:1b:2d:0e:19:6f:9a:8c:9a:5c:
20:4d:ec:95:65:d5:51:c5:bb:1e:54:4a:13:be:63:6f:9e:79:
59:1a:f0:9f:85:cb:e5:12:36:64:f3:4c:e4:1a:5f:a7:5b:d6:
ac:7d:c8:3a:02:04:86:83:77:83:78:3e:bd:c9:44:63:9f:e2:
e0:6e:17:1f:fb:33:57:4a:70:f2:04:15:aa:89:32:c1:38:f8:
4d:82:e1:68:f5:1f:cf:e8:ef:ef:0d:90:41:ac:26:a6:3b:23:
41:af:b6:9f:fe:e5:2c:2a:41:c5:51:f2:90:61:1e:90:2d:85:
be:34:cd:ab:4e:cc:b1:fd:67:28:da:b4:b2:34:42:9f:be:a7:
f8:47:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:17 2025 by rpki-client