Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: swfd3W1C7RCDOADQ4Kf5W+xLbQx5ucNzY4RLyVUtXBI=
Subject key identifier: C3:67:66:03:32:64:F0:6F:33:FF:DA:14:0A:DF:CB:9E:D6:E6:4D:28
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019A4F2B208F5E91DAF18FD2E8550D5E6A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 08E6
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: b71DbH/73lJ2+mstQFNe/F5rGLMeJwCqBGVy2LxAinY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:20:8f:5e:91:da:f1:8f:d2:e8:55:0d:5e:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=c36766033264f06f33ffda140adfcb9ed6e64d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:94:bd:8a:01:48:96:09:1e:fa:46:a2:b6:
04:a2:c4:fa:b6:d8:81:1f:92:23:1c:8b:01:8a:b5:
80:6a:30:35:19:46:9f:bc:fd:da:09:78:71:2a:81:
53:43:63:0c:c8:dd:e7:af:fa:b3:60:f7:39:a2:c6:
06:36:b1:74:a4:39:ba:bf:fe:f9:61:b3:fb:b8:64:
33:bb:7b:d0:7b:d0:47:7b:e0:62:ae:d1:b2:cd:61:
b3:91:aa:af:11:af:83:5c:76:b6:74:ec:f7:ff:8a:
fb:b3:d7:27:eb:2b:f1:82:41:38:c0:de:40:0b:0c:
be:59:71:f1:73:b3:f8:85:3c:b7:d8:21:53:ab:58:
d5:dc:27:d2:77:ec:4d:60:ac:e3:75:c7:17:9d:63:
30:58:33:fc:f9:d5:45:92:32:36:e4:21:74:b2:f4:
e5:d4:a6:04:13:45:85:8e:90:ac:73:43:b6:5f:64:
7b:83:37:22:79:f1:64:c5:e8:79:35:36:c4:1f:68:
7b:a7:85:36:4d:0b:57:62:ce:7f:45:1f:21:bb:ae:
c5:18:73:00:47:29:97:45:e5:ab:5e:83:56:ba:c6:
c7:3e:f1:09:bd:f2:f1:29:b1:ea:08:08:01:93:02:
31:b1:08:d5:95:49:ad:c7:d4:25:a7:41:c2:a5:96:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:67:66:03:32:64:F0:6F:33:FF:DA:14:0A:DF:CB:9E:D6:E6:4D:28
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d8:ae:cd:46:70:c5:20:bd:ed:cb:1e:0d:b8:cf:b8:e4:9e:
1e:24:96:1b:1f:b3:46:8d:a0:fd:83:66:81:dd:4f:5e:66:eb:
07:78:7d:08:49:5a:59:07:7d:80:3d:d4:07:6e:c5:1d:02:b3:
08:84:cb:78:61:fc:bf:31:28:63:45:ce:a9:4e:b7:ff:4f:40:
a0:c6:1d:4b:b4:5c:fe:ea:5c:aa:ab:c9:7f:a6:5b:50:0c:ae:
2b:e5:71:83:37:3e:45:cb:71:02:9e:19:0b:50:e0:f5:ec:90:
92:34:b3:dc:f4:ed:94:43:5e:72:70:b0:7b:63:11:be:68:92:
60:ea:e5:9a:1d:17:27:06:6e:b9:c4:e2:f7:07:08:84:3c:13:
d7:23:e3:d0:13:8f:c4:3e:05:01:55:05:a9:5e:54:90:35:cc:
ad:ce:27:4a:cd:5b:b7:10:b0:9f:29:71:17:98:16:a4:2c:04:
82:a0:c3:c5:04:02:2f:b6:cb:31:68:fe:43:d7:5d:44:28:c9:
58:5c:bb:24:40:95:36:6f:42:42:99:a1:b6:86:02:a2:e0:b2:
43:f4:b5:d0:bc:e6:64:96:02:35:31:3b:9f:ea:f7:55:1a:09:
08:af:3e:24:ea:86:a3:07:ac:f7:57:b4:56:5b:19:4d:47:c4:
da:21:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:19 2025 by rpki-client