Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: 9MavARhF/K6SkFgQs7bEQ3LM1LmYYrF8N/CD8tOrPbE=
Subject key identifier: 92:82:5B:32:9A:A3:28:57:F1:43:EA:F9:AB:A3:B3:ED:A7:66:4D:22
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019A56AF0CC680C4F9E117DEF340ACC6D9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1173
Signing time: Thu 06 Nov 2025 01:01:43 +0000
Manifest this update: Thu 06 Nov 2025 01:01:43 +0000
Manifest next update: Fri 07 Nov 2025 01:01:43 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: AXjiHNs4KnuN1aMag6v1do2WkHTDF8c/7vfaeML75uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:af:0c:c6:80:c4:f9:e1:17:de:f3:40:ac:c6:d9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Nov 6 01:01:43 2025 GMT
Not After : Nov 7 01:01:43 2025 GMT
Subject: CN=92825b329aa32857f143eaf9aba3b3eda7664d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:0b:ac:f4:1b:d1:e6:ad:ec:2d:56:ed:c7:
36:6c:2c:ec:c0:49:71:99:6f:bd:a5:1f:72:d4:79:
3d:ad:4c:e6:45:18:8a:99:8a:a8:ea:6a:11:c7:95:
30:59:d0:f6:eb:8c:f3:c9:a0:00:ad:84:f9:9b:3d:
77:cb:d5:79:72:cd:12:5f:e5:66:93:f4:7a:5c:a8:
3e:3b:c8:77:c4:bf:f7:36:8c:b2:ec:be:39:bf:27:
e7:21:98:5a:b7:fe:c6:67:cd:db:13:ce:b2:96:e6:
43:47:70:58:e2:43:60:c4:f7:5f:a3:90:9e:9e:66:
35:2b:ab:80:bf:57:f7:f5:09:55:e7:7c:51:e2:79:
84:fc:d3:a6:d1:13:78:db:94:50:5b:1d:59:a1:ea:
ba:89:fe:4b:88:59:c5:e0:24:22:00:ba:13:8a:cc:
40:e2:96:3e:07:5a:75:ce:0e:61:e7:b4:da:f2:87:
75:16:3d:b5:2d:29:6e:23:61:0f:46:9f:79:c6:32:
86:9d:9e:2c:0e:46:82:32:51:f7:7d:17:79:91:0d:
08:ff:4a:1e:dd:7b:f5:f0:65:19:db:b7:b6:6b:3c:
74:0a:47:15:6e:b6:8f:36:63:a1:0d:f4:9d:a2:3a:
ea:81:e9:2d:34:79:92:4a:39:02:d3:12:2f:46:62:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:5B:32:9A:A3:28:57:F1:43:EA:F9:AB:A3:B3:ED:A7:66:4D:22
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f1:f9:1a:a8:af:b8:8d:f5:14:a6:62:ab:8e:c1:bd:35:a8:
0d:96:16:d5:6d:4e:a7:77:f2:47:53:6d:aa:25:ec:8b:62:07:
aa:59:61:44:97:80:17:aa:42:f8:b2:f5:d8:05:fa:69:74:e2:
7b:a6:e1:79:ea:c3:48:53:2d:9d:e6:5f:0d:38:78:99:98:15:
26:87:25:46:29:0c:6c:42:9a:ea:d4:8e:24:d1:c0:1f:57:a9:
d8:5e:10:76:c4:6d:9e:1d:23:2a:40:13:b4:82:17:c1:35:9d:
23:ee:7b:8f:cc:28:c0:6e:b8:93:17:52:49:fa:da:dc:89:2a:
d1:4a:e7:db:cd:5e:39:b5:f8:1c:f4:a4:5c:c4:1e:80:bd:70:
96:cd:2e:63:e0:5a:37:bd:49:70:80:16:cb:4a:b6:86:99:17:
df:04:84:7b:28:23:2e:59:7f:11:40:f5:3b:09:6b:b5:3a:ff:
52:0b:79:25:4e:64:f5:77:79:7c:6c:73:01:68:d8:c7:a7:9a:
1e:f4:09:c9:54:23:2e:42:3d:94:19:4a:42:56:d7:64:47:b7:
39:56:e3:99:4a:3c:f0:f7:8a:63:20:0c:93:38:fa:ca:2f:61:
41:8d:ca:77:40:da:05:2b:eb:f4:93:16:da:3c:52:db:ec:02:
db:99:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:04:31 2025 by rpki-client