Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: u+WfAidN0dA/Nhvqz0AVr3nyUKtzKsUnNBZafAqBsaw=
Subject key identifier: 87:12:03:A1:C7:AC:26:BE:5B:17:C0:0B:F0:66:44:D8:FD:8B:FD:8C
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019A5375971A922C8AA037F120DCC9A0375F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 0177
Signing time: Wed 05 Nov 2025 10:00:06 +0000
Manifest this update: Wed 05 Nov 2025 10:00:06 +0000
Manifest next update: Thu 06 Nov 2025 10:00:06 +0000
Files and hashes: 1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: vKlQ7Fqmq1XxkC2l3d47SJio6ap+2Lk4uZM+KeohRjg=)
3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:97:1a:92:2c:8a:a0:37:f1:20:dc:c9:a0:37:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Nov 5 10:00:06 2025 GMT
Not After : Nov 6 10:00:06 2025 GMT
Subject: CN=871203a1c7ac26be5b17c00bf06644d8fd8bfd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:47:05:05:6e:d2:36:91:16:de:52:04:6a:
57:70:16:62:92:48:2c:7f:5b:29:9f:ca:42:92:43:
01:56:c8:a3:de:34:31:bc:f0:cc:29:1c:21:f5:92:
16:13:d0:cb:bb:3c:19:07:06:1b:63:27:2a:89:5c:
25:f7:03:77:ee:79:7e:b1:11:ab:43:37:58:d9:7a:
c3:ae:26:bd:db:eb:89:b2:ba:44:04:5c:bb:a1:71:
4f:4e:3e:c0:7d:d0:8e:5d:7d:fb:9b:32:69:8b:a7:
90:44:5e:e0:d1:4c:39:3c:c8:4b:ec:e0:6f:1f:56:
48:cf:9a:f0:c6:24:d4:98:40:c1:89:1c:63:d2:c8:
4a:0d:bc:11:3a:24:44:3a:4d:c4:b4:30:89:62:fd:
16:fe:d2:d9:4c:dc:a8:4f:df:23:63:88:f5:61:f1:
31:e1:c3:06:d8:34:66:0f:f8:cc:de:e1:09:2b:37:
41:71:ea:d6:7c:24:1a:7a:f9:43:55:cf:53:2e:f2:
9f:91:5a:80:ad:c0:69:24:a9:ed:60:ca:5b:4d:18:
10:38:83:62:2f:26:1d:44:3f:5d:70:99:42:be:de:
3d:30:33:49:3d:eb:64:70:52:5c:b8:97:15:6a:48:
98:6f:1a:c8:11:b8:18:98:13:65:af:a8:6b:8f:1a:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:03:A1:C7:AC:26:BE:5B:17:C0:0B:F0:66:44:D8:FD:8B:FD:8C
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:45:a4:45:9f:0e:7a:f6:2f:40:21:42:98:5c:bd:9c:01:90:
b6:8b:f7:12:94:23:86:56:bb:8e:21:e5:e6:c2:4e:78:76:10:
57:98:0a:cc:c7:03:26:98:c7:e5:a8:90:a8:94:f3:84:f7:da:
d0:b0:00:41:18:1a:4a:8c:67:2a:8c:76:b0:2a:33:5d:8d:98:
ba:af:25:22:ee:06:c9:4c:5d:47:6c:79:32:21:a3:6a:c3:9e:
b9:81:a4:aa:3b:ad:55:99:e3:6e:66:77:f3:9b:b5:70:28:db:
3d:2f:c0:dc:fd:50:a7:1f:4f:77:38:3e:38:20:67:1a:88:d8:
2b:a8:e4:76:79:7d:81:33:47:c5:61:23:e9:f3:39:f0:30:1a:
c0:9c:3a:fe:46:bc:81:b8:3a:53:a9:8b:65:5e:f8:58:37:a9:
f8:59:25:c0:4a:f7:a4:bc:38:b7:b9:f9:71:30:96:1d:1a:2a:
f6:e3:60:96:b5:da:28:93:65:56:85:ef:9b:0a:60:84:69:af:
02:e8:4c:35:9d:79:70:cb:70:28:1e:2b:1d:8c:0a:f8:d6:cd:
8f:59:b3:14:25:c6:ba:c3:ce:80:a1:91:8e:b7:55:f1:46:2e:
f2:9a:ec:31:08:fd:e4:a6:86:9e:4b:88:04:a6:1c:bc:da:50:
95:8c:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:39 2025 by rpki-client