Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: eHc+Ak3y7jaX/KtttHvHSVvFG6CjFN6GiOHPIj424lU=
Subject key identifier: C6:A0:05:3C:CB:23:08:CA:23:D0:26:49:75:FB:00:A1:5B:7D:82:AD
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 019A5563F9D1ABBFF89EE229AF1EB918500E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 0351
Signing time: Wed 05 Nov 2025 19:00:06 +0000
Manifest this update: Wed 05 Nov 2025 19:00:06 +0000
Manifest next update: Thu 06 Nov 2025 19:00:06 +0000
Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: nji/oR1/uhihuS5oImGJJqIFqG/GjikB7vi6BWpXVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:63:f9:d1:ab:bf:f8:9e:e2:29:af:1e:b9:18:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Nov 5 19:00:06 2025 GMT
Not After : Nov 6 19:00:06 2025 GMT
Subject: CN=c6a0053ccb2308ca23d0264975fb00a15b7d82ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:7f:71:00:8f:e0:a8:b3:46:e5:b5:1f:2f:
c0:3d:3e:6b:ec:91:02:2d:90:35:c3:4c:c5:17:f4:
ec:a3:ea:53:05:60:16:80:85:4d:54:a0:18:91:45:
6d:8d:de:2c:f3:34:ad:4d:d4:31:5e:fb:6a:b8:53:
73:b2:2a:05:17:c2:77:f1:8b:c2:2b:a0:36:8d:40:
3a:80:52:ef:94:42:36:4e:bb:9a:07:b3:d3:27:29:
94:29:5c:01:d9:f4:74:78:17:67:b8:c8:60:6e:04:
1e:cf:9d:11:ec:ba:c0:0b:ce:3d:d6:da:ad:33:d7:
0c:f9:16:a7:63:30:89:5c:d8:8a:6d:2f:b6:f8:cf:
2a:32:62:f7:ca:df:0b:ba:c5:5d:25:84:70:d1:6a:
3b:27:83:cd:9b:65:dd:47:3e:1b:0b:83:d1:91:19:
40:04:61:5b:ae:62:22:1d:14:36:1a:55:7f:7b:f1:
e4:f9:58:f0:c5:14:a8:83:53:3e:18:e9:a3:a2:b7:
d8:70:4e:7d:6f:95:e7:f9:fb:92:cb:5e:4e:38:fc:
14:77:1f:3c:b3:48:1f:1f:d0:ca:1f:b8:88:00:e7:
06:f6:0c:8b:c5:a0:84:e0:b7:49:4b:2c:15:e6:f0:
75:5b:b5:5c:0a:d8:6a:63:3f:b4:77:14:86:ed:a7:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:05:3C:CB:23:08:CA:23:D0:26:49:75:FB:00:A1:5B:7D:82:AD
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:40:91:ab:94:55:c3:ff:eb:c4:33:e1:66:c7:0c:15:08:
65:d1:03:4c:97:ce:40:6c:49:a2:a4:0a:ec:9f:87:21:6d:1e:
e1:0d:e6:78:de:c0:3a:3e:d5:aa:d0:55:7d:3d:33:65:23:3c:
07:90:f6:81:f8:45:4b:69:a9:3f:f4:14:87:11:c3:02:cb:d9:
34:87:2d:ec:1a:8c:84:9c:c1:29:f8:16:93:25:36:1e:8b:f1:
57:95:b0:b4:20:3e:21:c6:58:aa:85:e5:45:ff:36:52:91:2c:
d4:fb:99:3d:36:53:ae:8c:ed:a8:df:a1:2e:bc:23:9a:0d:7f:
bf:94:49:e4:56:f9:a8:dc:2c:09:1d:1e:9c:82:c7:0f:36:ab:
f0:1e:19:07:e3:0f:44:58:a8:aa:3c:e4:e4:11:62:8c:30:4c:
b9:44:4c:cf:f1:f3:88:27:54:1a:0b:1b:d1:c2:dc:5e:c0:b4:
19:dd:0b:6e:df:67:50:46:b7:b2:d7:69:ce:c4:85:3b:39:2b:
be:0b:19:5d:c2:6d:b4:45:12:e9:72:7d:49:a6:d2:a4:30:bd:
bb:18:dc:94:ed:57:69:09:bd:79:99:58:2c:d1:ae:f4:76:25:
74:ba:4a:74:1a:1e:b7:02:8e:ba:eb:26:31:da:b0:64:fc:4d:
8d:fe:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:12:53 2025 by rpki-client