Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: /70iytHE9z7hmlAakYSTZhBTFalLD5Nb7OGLJcy3FSE=
Subject key identifier: 44:DF:CF:92:39:00:93:8F:F2:CD:13:E8:10:01:A8:67:31:E4:29:62
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019A4D3D2D67B2453BA8621F6FE304E96AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: KpdjyDNFWz3xF34alZfaZ7kXPps.roa (hash: esX9PQgUe5/lICxLP0x3doHLhF8XKXX5g+pfJtsxi+M=)
2: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: ebdRQXZ5RHNm39v2jcd+fur+e16eQQoFecKC3Fz6e04=)
3: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
4: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2d:67:b2:45:3b:a8:62:1f:6f:e3:04:e9:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=44dfcf923900938ff2cd13e81001a86731e42962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:1b:6a:8d:68:e2:55:49:49:7a:6f:97:de:
d3:74:fc:d7:a0:be:4a:89:d6:8b:f8:b2:69:54:5a:
c5:70:20:4b:32:4f:72:7b:91:ff:87:28:82:11:1d:
41:39:c2:c1:68:a9:58:7e:4e:60:d1:d6:ab:4a:74:
30:a5:80:eb:51:18:1c:46:fe:97:f9:84:11:4b:33:
50:af:69:cc:a2:ca:52:af:65:c4:a7:8b:b8:d1:b5:
f7:fe:1d:6e:f3:e9:3b:f4:f4:b8:33:f2:ca:db:3f:
87:a4:5e:d9:a3:40:05:64:60:8f:d6:c5:34:90:fe:
05:fa:6f:40:f6:92:41:3b:01:cc:1e:9e:ff:3b:70:
5b:5a:18:e0:20:43:9e:7b:b2:f8:b6:6c:b4:66:ad:
19:6b:d2:2e:7f:31:f4:e8:94:a3:94:d1:ee:fd:b8:
13:c6:e4:ae:f4:6a:c0:2c:e5:f7:d7:13:00:8e:01:
2a:c8:95:ec:34:60:b9:69:b5:75:34:c1:68:13:48:
f1:db:9e:76:d4:59:22:94:6f:13:08:15:2c:d7:51:
ca:5f:5b:56:e5:a3:64:3d:10:eb:49:ec:bb:89:ad:
93:90:77:1d:a4:e7:ae:c4:08:e0:a5:56:d2:1c:06:
85:33:cf:66:f1:34:97:e2:b7:ee:ad:78:ac:b8:e2:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:CF:92:39:00:93:8F:F2:CD:13:E8:10:01:A8:67:31:E4:29:62
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b1:5b:9a:f4:fd:b0:30:14:cc:66:84:19:51:4a:d7:ef:65:
fc:37:41:ea:41:80:82:04:e5:1b:7f:ac:4b:28:40:bc:43:a3:
d9:c2:ee:1a:fc:2a:76:64:b4:65:98:c5:23:74:43:a6:ad:aa:
dd:0a:ed:85:a2:95:e9:77:8c:03:ce:b1:01:18:ce:19:45:ba:
59:cc:0a:08:1d:87:eb:06:d7:d1:45:f9:ac:a4:b8:bd:4a:78:
42:17:6b:b6:1a:d9:ec:4e:e7:71:8c:73:6f:cc:6e:6c:21:01:
14:9d:56:5a:11:a6:22:2f:55:af:c9:b7:70:37:4f:2a:f0:06:
2a:62:60:61:f7:6d:75:a5:3c:f8:33:c4:a0:7e:00:51:38:fd:
4c:d8:18:cb:a1:1e:90:70:e8:a8:47:84:90:af:cd:6e:89:23:
09:09:0f:ee:0b:bb:9c:df:a1:b4:c9:95:64:9d:cb:0e:c1:7a:
15:44:4f:b8:b9:a7:79:58:7a:c8:2d:db:e5:fe:fb:4b:89:94:
1a:9d:82:ab:97:4b:6f:db:71:64:1d:3d:0a:82:db:46:93:3e:
a9:c4:12:d3:80:f3:2d:91:9e:af:be:f9:c5:b3:b4:79:99:93:
bd:6f:8e:eb:5f:9e:0d:dc:90:9e:0b:d9:b1:d9:cc:f0:fb:09:
aa:15:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:30 2025 by rpki-client