Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: h91ZGCMw+4rS6fDVY3b9Mq1mbX1hTeYggm3yrgExtjI=
Subject key identifier: D2:C5:71:C2:B5:35:4E:CC:77:76:18:59:CF:0A:1B:DB:3E:84:F7:92
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019A4E861CBE2F823A4D6802E8DD4ABC6A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 05A9
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: fbIoMZ+85ylYA5XCuK/Z85SkM5SOWHAMcQljlGJx/As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1c:be:2f:82:3a:4d:68:02:e8:dd:4a:bc:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=d2c571c2b5354ecc77761859cf0a1bdb3e84f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:12:8d:84:4b:48:b1:08:a4:53:bb:e4:9b:
2a:52:c7:d8:a9:b5:fe:67:41:ad:69:0d:c8:dc:92:
0f:17:00:6a:67:8d:a5:b5:33:f8:81:a4:ff:18:30:
81:b6:7f:96:48:38:b5:e2:fc:37:6b:72:bf:af:04:
62:be:85:08:d0:b4:76:85:87:b4:29:75:ea:0c:3b:
1b:4f:33:09:34:92:25:b3:72:93:d7:6a:31:ad:cb:
cb:76:e5:0d:d8:4d:65:b1:2a:dd:71:e5:c8:07:17:
bb:58:12:55:e4:32:cd:22:ac:3a:e0:2f:e5:51:7f:
df:da:2b:7f:a3:03:89:4a:81:ff:6d:80:ea:08:23:
5a:ae:a7:f8:75:45:54:82:c4:c2:2c:f7:b7:50:ae:
31:a5:9e:ca:92:96:33:10:09:d3:e3:cf:1e:4c:03:
e3:f7:9a:6a:da:37:ba:23:67:00:34:65:be:bf:a3:
c6:d4:85:5f:22:e1:2c:91:db:a7:ef:e3:96:34:03:
49:6e:ec:99:62:21:a6:5a:7a:f6:69:01:19:4f:39:
31:83:e5:fc:0d:cf:b8:24:ef:8d:e4:cf:54:0d:04:
11:63:96:cc:40:48:eb:56:3f:40:a7:61:f3:51:0d:
db:4c:1f:c4:bd:88:41:7b:d5:88:ab:ce:f2:ee:25:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:71:C2:B5:35:4E:CC:77:76:18:59:CF:0A:1B:DB:3E:84:F7:92
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:b9:1f:63:37:07:ec:93:b1:f0:0d:76:2c:2b:7a:4a:6e:
73:cf:1e:e5:c6:4d:79:c6:61:1d:e3:51:52:4c:2c:5c:4a:63:
77:0e:34:c7:22:75:67:56:7a:d8:fc:0a:6a:ee:50:8e:90:e9:
00:84:39:b4:11:d3:f7:04:9b:76:a6:96:04:8c:bf:9b:40:5f:
ee:e0:8f:3d:2c:cb:7a:b4:53:04:37:d8:c3:70:ce:72:0b:fc:
85:b3:80:06:0d:c2:89:5f:cd:c3:ab:a0:58:45:af:a2:e1:c5:
56:b0:c2:52:f7:af:84:c5:8e:39:f8:04:07:88:1c:ca:cf:23:
4a:ac:fc:40:5a:29:3a:d1:5f:d6:c1:3b:ce:96:d5:12:3a:5e:
5d:dc:26:08:aa:d4:72:53:4e:ef:cf:65:41:cb:5b:32:c8:b2:
7f:4c:cb:51:92:ad:d5:4e:bf:e9:a5:91:28:f5:56:94:7c:36:
b6:b2:8e:f7:51:6c:d9:05:10:0c:cf:30:a3:47:ed:30:0f:8b:
c9:9e:a4:ea:4c:17:1f:90:5c:84:d2:06:cd:0d:3b:dc:c9:e2:
0e:6f:d5:4e:5a:e3:15:fb:94:3e:9c:62:64:63:ff:6b:0a:63:
58:e5:a9:a2:37:5e:bf:9c:27:30:bc:1e:ee:b0:ee:52:99:07:
ca:3a:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client