Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: 6Un7BME8eIKaNbUuU6h9soecM2Po5Oj7rthLPMjKOHU=
Subject key identifier: A4:74:28:C7:17:5D:18:D9:D4:81:28:45:36:54:B9:40:FC:8E:FE:E4
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019A552D9B04AD03135D804A28375C45FA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 086E
Signing time: Wed 05 Nov 2025 18:00:43 +0000
Manifest this update: Wed 05 Nov 2025 18:00:43 +0000
Manifest next update: Thu 06 Nov 2025 18:00:43 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: u/W30uSAfeOk/aPrSFtmvYQqZF8gFnLKA4BsKTRsfms=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:9b:04:ad:03:13:5d:80:4a:28:37:5c:45:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Nov 5 18:00:43 2025 GMT
Not After : Nov 6 18:00:43 2025 GMT
Subject: CN=a47428c7175d18d9d48128453654b940fc8efee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:d8:71:1d:fc:4d:31:ca:f3:cb:21:a2:27:
24:98:96:10:a8:4a:19:7d:25:c4:cd:1b:1e:93:31:
92:54:51:69:46:ba:1d:e9:dd:d1:d0:1c:54:53:73:
ec:ba:e2:1c:6c:4f:1a:25:c4:31:eb:61:d7:0e:7f:
62:be:0c:2c:8c:85:d1:dd:f5:96:53:38:8e:36:0b:
2f:de:23:24:a0:74:f6:8b:14:b8:70:17:b7:61:dc:
db:7c:db:71:5e:23:5f:4e:6b:65:10:03:fa:62:53:
75:7b:e6:bb:ca:6a:f4:e3:47:78:02:6a:4d:26:d1:
3a:de:6f:09:c8:04:42:3b:6e:7d:f4:1c:33:b0:a8:
b9:51:84:24:cc:f9:39:ce:74:24:54:a3:18:63:d9:
52:e3:15:74:0d:e7:1d:c6:4d:76:ee:cd:12:c2:8a:
f2:87:28:be:b4:28:94:8d:b9:c4:28:15:32:83:51:
d5:01:d9:42:e0:89:31:cc:10:03:0f:e7:ab:1c:66:
dd:f9:6f:95:75:11:df:cc:a2:3e:4a:7b:cb:69:d1:
2c:7e:ea:06:ae:42:1c:8b:3c:a6:6b:67:7b:46:99:
46:14:a9:42:d4:97:04:cd:66:31:57:8c:e7:b6:77:
58:89:ca:25:5f:05:08:e1:9d:3d:5a:00:4a:d4:1b:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:28:C7:17:5D:18:D9:D4:81:28:45:36:54:B9:40:FC:8E:FE:E4
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:0b:df:f1:33:9e:3e:68:79:67:04:f8:1c:87:cb:80:39:
1a:46:33:d7:3f:97:67:4d:6a:04:ec:39:f8:8b:a2:c9:52:73:
9b:2a:28:54:ec:3f:6c:12:94:56:4f:f3:83:a4:b0:c9:9f:3e:
a3:1e:ee:54:e0:c1:a0:91:f7:ae:92:94:21:a3:fc:b5:a7:0d:
5b:67:1e:db:6a:40:40:18:1b:14:7e:59:5a:fb:b2:0f:1e:d6:
cf:49:49:e5:74:b8:c6:28:9b:91:d8:dc:62:5b:d0:14:f8:58:
19:0b:b5:7d:5e:79:9a:6a:76:87:ac:2e:ca:fb:aa:64:85:f5:
32:5f:9a:6b:a1:38:e1:f2:23:b7:13:05:2a:10:7b:86:17:54:
fd:a1:b5:d6:db:66:95:d3:c7:fa:f6:e1:bd:9d:a2:89:d2:60:
17:92:1e:2d:44:a8:38:8d:e1:93:83:e0:8c:2f:f6:12:4b:f7:
82:fc:5d:3a:b9:22:92:f1:22:b2:f6:b4:4d:29:43:04:62:c6:
ae:2a:f0:3d:ab:a0:bc:80:87:64:00:28:9f:a7:57:93:5e:0e:
f2:6e:a3:95:6f:25:ba:59:5c:8d:54:75:ca:c8:06:27:68:84:
7c:bd:ce:70:c9:8f:6f:af:b3:d2:7d:7f:68:7d:40:b6:c2:51:
cd:bc:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:44 2025 by rpki-client