Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: Tx454nngqhrxMymFUBVxF6L7UauYgGsSWSwu06tvaLM=
Subject key identifier: 2F:85:B5:45:30:E2:17:9A:24:34:63:84:71:69:01:08:F4:5F:8F:EC
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019A533ECDBEEC3AE319714E22951CA62169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 09:00:15 +0000
Manifest this update: Wed 05 Nov 2025 09:00:15 +0000
Manifest next update: Thu 06 Nov 2025 09:00:15 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: fIqATlF8wzvY80wJzTmPcGZDy2Jir7N/WzeJcPxsTy4=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:cd:be:ec:3a:e3:19:71:4e:22:95:1c:a6:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Nov 5 09:00:15 2025 GMT
Not After : Nov 6 09:00:15 2025 GMT
Subject: CN=2f85b54530e2179a2434638471690108f45f8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:70:e0:b1:01:d0:e5:82:b7:b2:d2:09:b0:
b0:6b:d5:58:78:64:dd:15:8d:0b:91:0e:15:62:7b:
62:ec:d0:3a:fd:22:96:21:a9:62:44:8b:fa:f9:99:
48:b8:73:54:79:f9:d3:3c:7d:b6:d1:87:ac:4e:61:
d7:aa:b1:93:b4:91:31:82:62:7e:69:b6:a9:6d:77:
d3:d1:22:37:13:81:a3:20:4f:8b:fd:2d:78:80:87:
99:ac:82:8f:39:61:97:8b:2e:d3:60:1d:43:2c:ed:
15:32:ad:79:f7:52:01:84:e0:55:77:98:2c:83:ee:
03:94:bd:6e:1f:c9:98:3a:1a:6a:00:00:c7:0d:18:
2a:5a:46:39:9f:e9:78:d2:d9:78:fd:70:29:4e:c3:
13:d6:60:16:53:f7:6e:39:6c:c4:8f:d8:3b:9c:2b:
3d:f7:f7:5d:c4:31:6b:9f:e9:db:3b:ad:43:10:1b:
dc:c9:0b:a7:84:13:4a:84:d2:ae:39:9c:b3:31:65:
6b:d0:1e:79:57:fa:f5:e6:1b:06:3a:58:59:46:0d:
1b:c7:3a:d5:1e:eb:bd:5a:0e:df:53:f3:b2:af:13:
d9:93:55:79:e4:92:5a:ee:17:69:d9:12:b4:71:e3:
ed:03:1e:85:cf:2d:83:eb:19:f8:fe:3b:a2:67:8b:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:B5:45:30:E2:17:9A:24:34:63:84:71:69:01:08:F4:5F:8F:EC
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:b2:5a:9a:ed:fa:c0:c5:b2:f8:a2:9a:b4:ba:d5:a7:b3:
a9:70:ff:cc:f5:d9:16:2c:bf:d4:f5:d0:43:4b:ee:5b:9b:fc:
91:9a:e6:63:d3:6e:95:c1:a3:de:c8:97:41:fd:b2:05:ff:5e:
de:c5:7b:26:94:7a:96:f1:fc:05:82:75:a3:f8:7d:d1:d9:59:
d1:0b:03:7c:6a:e6:04:d0:3a:d9:50:40:8b:1f:90:5f:c6:8c:
13:51:de:c9:f1:b2:bf:4e:58:71:1f:93:79:bb:4e:11:90:db:
ad:ba:28:8f:da:55:b0:66:f7:d2:ff:9e:1d:22:bf:27:77:6d:
2a:49:ad:af:52:cf:16:20:b0:34:30:b2:f1:63:2b:a2:85:a3:
64:1b:fd:28:1a:91:91:4e:8c:0b:9e:3d:4c:e9:d4:d9:5b:37:
ce:08:3d:c0:02:8c:a9:4c:87:d0:a1:48:38:01:c2:a3:cb:12:
a9:29:ff:d0:42:2b:f9:38:8a:6c:ce:89:58:05:11:c4:55:76:
5a:e2:64:56:46:d5:88:36:cb:cc:0a:03:bd:76:35:a2:99:4a:
f4:4b:f2:a8:23:cb:65:ab:83:1d:e0:0e:52:27:f5:3c:29:9e:
85:97:12:1f:a5:9e:bb:45:3f:20:30:41:06:9e:d9:56:c7:17:
3b:ba:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:09 2025 by rpki-client