
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File: au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier: qm1Os3AGwAjrOLw6iSk3vhBMSrvHaBSLe+luWV6QHNI=
Subject key identifier: 5F:93:00:E3:97:D0:48:9E:CE:CA:D4:85:3D:D1:57:2D:89:ED:8D:C2
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial: 019A507522D52FB988029843812D7AB9D129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number: 0188
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: SLNfseIE8KrK16-g51WWVsIWzog.roa (hash: PhvvB8pkV5yupURojyUaN4uVfLhKeqMoLY3RiCBeGmQ=)
2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: Kg2a8IyRyUe7l6z+Ieq7mXLiuit5Fb1SOzKH/G8pqps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:22:d5:2f:b9:88:02:98:43:81:2d:7a:b9:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=5f9300e397d0489ececad4853dd1572d89ed8dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:de:07:e3:65:20:9b:49:1e:25:6a:4b:4d:
5f:dc:9d:f6:c1:66:40:e3:de:f8:e8:86:13:44:c2:
83:38:61:73:a6:69:9e:05:57:3a:9e:b0:b4:5a:dc:
a3:a6:ac:2a:17:98:de:9f:a8:6f:3b:7c:aa:d2:0c:
ff:f4:27:77:66:a1:5b:1d:90:63:58:c6:3e:15:d5:
18:25:bd:c6:89:f7:f8:b7:49:62:50:43:8a:dd:e8:
f4:fc:69:cf:62:14:d8:e3:74:a0:f2:86:f4:18:99:
10:d6:41:02:c9:a0:b1:58:a5:5d:fe:e6:8e:53:0b:
2d:fc:50:24:50:4c:34:67:59:14:f5:f1:85:0f:56:
57:13:5f:be:ad:f9:34:17:57:c2:af:d6:12:88:b3:
79:d0:b2:e1:80:1a:0e:ec:de:6e:0b:61:6c:ae:30:
ec:80:49:2a:d0:e5:69:d8:a2:64:51:a9:ef:f4:f0:
c7:86:d9:bc:9c:5a:74:65:d9:54:7e:03:5b:3e:d5:
58:db:94:ea:8a:8f:4f:a8:7f:a9:22:fe:05:13:98:
84:49:fd:98:0e:90:d8:28:32:aa:12:a8:f2:51:03:
aa:86:55:62:b2:ee:57:6c:6c:95:41:22:1b:eb:83:
6c:b1:c1:16:67:20:ff:95:3d:48:1f:e8:00:a5:f5:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:00:E3:97:D0:48:9E:CE:CA:D4:85:3D:D1:57:2D:89:ED:8D:C2
X509v3 Authority Key Identifier:
keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:01:e4:58:a1:4e:20:e1:f5:95:1b:18:9b:c8:41:07:27:
d2:d8:6c:fa:9d:6a:41:72:b4:18:a4:79:0d:95:5f:d7:51:e7:
d0:14:6f:e8:3f:a1:99:03:7b:74:c3:99:e7:67:70:cd:dc:98:
ab:5c:f9:e1:cc:19:7e:27:02:a7:11:aa:02:c3:3f:82:65:16:
80:98:51:f7:54:98:7d:6a:73:de:fc:ab:54:b2:5f:e0:8d:95:
59:20:24:4c:4e:4d:ad:a2:a2:77:75:a7:5d:e9:40:2f:46:f3:
e1:04:8e:d5:95:b6:00:89:a6:68:7d:4d:26:93:0c:77:cf:be:
2f:13:0c:df:4b:07:79:88:76:45:67:a5:48:0a:e0:c5:aa:cf:
8b:48:c9:81:a0:60:9c:df:b7:30:53:89:b3:f7:a2:d1:f4:3a:
60:17:0d:07:d6:e3:9a:9a:14:1b:4b:ba:4a:1a:de:8c:aa:56:
67:4e:da:9c:b4:ba:ec:b6:f6:30:c4:0a:4c:16:11:1d:b7:ca:
57:df:d4:eb:03:e9:95:42:f1:ef:9f:ad:a6:b6:5c:a8:51:0d:
ab:0b:59:05:8a:05:96:8e:26:ff:0a:9b:62:6c:6a:e1:d2:dc:
da:d8:bd:34:17:48:38:cb:ed:a8:3b:5a:79:39:bc:ea:ae:ed:
06:bc:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:39 2025 by rpki-client