Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: rAVuhVfcFVeATSerT5PNa1C8lSXYRvTFpOmAfd5ndvY=
Subject key identifier: AD:69:12:B4:44:53:DF:5A:F6:50:73:1F:D3:2B:05:C7:A4:C9:7C:91
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 019A5308287D139AA70A5C3480F62D44757F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0ED4
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: cg5H8mgNTU0JhyVJw7lQHBuzbZlSRBP4tCrfYQq3URM=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:28:7d:13:9a:a7:0a:5c:34:80:f6:2d:44:75:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=ad6912b44453df5af650731fd32b05c7a4c97c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:48:2c:56:4d:41:dc:75:b7:ff:d3:3c:9f:
b3:88:ea:2f:1c:1b:cb:8f:ce:01:10:4e:e7:c7:94:
74:11:6c:46:47:ab:ee:6a:da:a9:e3:cb:a6:dd:b0:
c4:52:c7:3c:17:42:b5:5f:93:be:63:65:d5:2f:36:
dc:b4:93:16:e2:48:91:c0:fa:bd:59:03:a2:cb:09:
ef:dc:f4:11:7b:e8:15:96:4e:e3:81:40:fa:e3:00:
3a:02:06:d8:bf:48:43:c1:56:64:c4:40:db:18:f0:
5f:49:3a:12:7b:35:64:9d:01:56:28:74:d6:a0:f1:
46:22:e0:38:09:2f:36:f3:64:51:73:f3:bb:7d:c6:
7b:7d:8c:cc:44:78:c6:79:d9:a3:b6:7e:63:b6:c2:
4a:85:b7:c2:c0:95:ba:89:6c:0f:ba:fc:e5:c9:b7:
4f:59:63:f0:a4:46:1c:b5:f2:eb:70:f9:2a:14:2e:
92:45:d9:47:a5:5f:39:29:13:87:4f:67:24:f4:cc:
4c:1b:4a:ec:85:77:b5:47:9f:e3:e4:23:cd:65:a1:
5f:36:3f:78:fb:73:9e:81:59:7d:b3:c5:dd:8d:57:
b0:5a:b0:8e:02:1e:a6:f7:78:51:42:c6:cb:5c:8c:
05:68:18:de:89:e0:75:df:eb:43:2e:ef:db:a5:cb:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:12:B4:44:53:DF:5A:F6:50:73:1F:D3:2B:05:C7:A4:C9:7C:91
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:41:b0:f0:a3:ca:a0:56:43:a7:93:e3:86:e5:6e:50:1f:
45:ab:7a:a0:6c:6d:f2:3c:d3:8f:93:a7:e2:81:12:b9:3a:40:
61:be:e3:08:6f:c8:c1:fe:97:52:66:08:95:ce:53:cd:1d:6d:
06:19:52:aa:e1:0b:dd:db:d2:2d:3e:ad:0a:61:67:b3:bb:03:
b3:88:2a:aa:59:8d:f1:ed:8e:a2:8f:b6:6f:11:58:01:b8:89:
1e:5e:88:fd:70:e4:59:96:bc:13:2f:55:de:0f:14:dc:f9:a2:
a8:22:e8:a2:5c:a7:8c:29:ce:52:21:64:04:09:99:f3:c8:1a:
f4:75:99:2b:9f:3c:31:1a:8a:6e:96:35:8b:60:7c:f8:63:a6:
3e:ec:77:d6:ac:73:fb:68:48:0b:ff:d2:ba:c1:fe:2f:31:49:
a0:54:fe:14:11:47:ed:90:ff:8b:f2:39:97:c1:90:93:69:eb:
12:dd:07:22:c9:3d:22:e7:68:bc:32:46:12:a3:59:49:e0:b2:
ec:23:74:f6:ce:87:cc:bf:a5:5f:5a:a5:ee:7b:7c:af:88:3f:
57:70:8b:4c:dd:25:3f:4c:ce:44:ba:3d:34:ef:f0:db:17:37:
1d:11:9e:e8:2b:00:08:97:66:8a:69:c1:c1:2e:bd:97:b1:7c:
20:73:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:31 2025 by rpki-client