Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: +0q0yFzEl4kg+a0F3jq+v4AcuiQne8egdFBBPe/73Es=
Subject key identifier: 0C:81:81:6A:2A:33:5C:2E:A2:10:03:E9:FA:5C:F0:2A:3A:B3:AC:56
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 019A503E5930D08B878EBB147AF24758CB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: qWPPF7UAuOVsihnv3V5hXKG9kq6dG6IBAm/E/pKMDPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:59:30:d0:8b:87:8e:bb:14:7a:f2:47:58:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=0c81816a2a335c2ea21003e9fa5cf02a3ab3ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:b9:76:f3:20:e4:94:f2:f2:07:aa:12:9f:
26:e0:cc:1e:5a:40:cb:65:c9:68:2e:e1:04:4e:8a:
24:de:34:d2:a9:46:9f:ad:78:71:0e:aa:de:88:cf:
29:04:f3:4d:2a:96:63:62:4d:dc:62:6e:dd:fc:7a:
49:47:5c:96:26:51:f1:aa:8d:1c:73:5b:6c:01:0b:
02:0a:74:71:87:74:c2:8a:b9:39:60:60:70:70:51:
7e:72:3e:09:cb:d2:89:1b:19:11:32:21:17:ee:1f:
3c:55:37:52:92:39:cb:0a:da:43:da:66:6a:20:ab:
72:81:95:85:4d:64:09:12:67:54:c3:8d:f2:a5:e9:
f9:62:93:15:d8:a6:e8:66:24:9c:c8:d0:00:36:10:
49:11:dd:4c:b8:e8:b4:8e:98:10:c0:bc:a9:ab:b4:
3f:0d:05:7a:f5:78:19:ae:47:86:80:eb:50:61:cb:
77:ca:78:38:7b:91:f4:b8:4c:8b:3b:51:91:37:ad:
0c:fe:e5:3f:62:06:7b:49:d6:3f:7e:05:4f:7e:25:
ab:a4:29:b2:29:f5:43:c6:9d:ca:6d:ca:f2:ed:a5:
01:28:67:96:03:9b:94:3f:29:3d:15:4d:f1:96:c8:
7b:0e:88:05:04:50:78:c1:fb:8d:65:66:d1:b5:13:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:81:81:6A:2A:33:5C:2E:A2:10:03:E9:FA:5C:F0:2A:3A:B3:AC:56
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:f4:25:66:de:8a:2f:bb:40:1a:44:04:7a:4a:e9:a9:82:
a6:64:d8:d7:66:14:01:1c:a6:11:15:76:43:b5:6f:a2:2c:30:
26:bd:55:ef:8c:39:75:bb:db:94:69:9f:89:c2:c9:f6:13:11:
ad:76:bd:28:fc:f7:87:2c:a3:aa:cc:30:1a:cf:95:8e:f3:c0:
ec:ee:59:00:59:f2:7f:4d:40:f0:3f:99:0f:e8:fa:bc:29:a7:
b5:37:42:5c:83:54:89:43:70:b0:28:75:32:da:ed:78:f7:a0:
0a:af:07:7d:9c:8f:39:ac:09:66:cc:8e:bf:5b:f7:3b:4b:83:
9e:ca:1f:15:ca:12:93:0d:93:94:ae:0e:eb:fd:84:6e:16:d2:
85:b5:18:05:ed:cb:11:89:98:2f:20:f7:28:96:f9:12:82:87:
d8:2f:9d:4b:2a:61:84:f1:a1:50:e8:c6:e9:2f:95:55:18:62:
ef:52:15:bd:a4:28:84:a7:b6:cb:32:16:0f:18:b0:aa:eb:8c:
2e:bc:6b:9a:b0:ba:3f:a2:f8:ca:97:e3:d3:4a:c8:b0:9e:e1:
52:d4:a0:a3:97:78:41:5f:62:7b:ac:5d:95:81:23:b9:fc:6a:
a2:b1:59:05:71:08:be:fb:a9:3e:a8:1f:4d:41:ba:27:06:31:
31:1e:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:44 2025 by rpki-client