Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: 7PnjXRkDnhBR2hyuUexeNJGtmHB+HiZOT3AulmLOVzQ=
Subject key identifier: F4:E8:7B:3A:A1:A4:E1:A5:E7:C9:3A:89:B0:B3:EE:AB:02:14:AC:F8
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019A4E18F00A3824F2E014260DDD4FB8D99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0FD6
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: jRgQJYOiKJ/MdCi2aHHv9quiNx4/gaUaJ8gYpCwAg2w=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:0a:38:24:f2:e0:14:26:0d:dd:4f:b8:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=f4e87b3aa1a4e1a5e7c93a89b0b3eeab0214acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:9b:63:e2:13:6e:53:99:51:ec:b3:1b:18:
a6:cc:12:d7:fd:f0:b3:70:14:74:e2:65:f4:46:0f:
51:0e:e0:01:7b:52:32:ca:54:b0:a1:4c:9c:71:df:
91:5c:92:95:ed:68:15:d2:53:d9:bf:52:6f:ee:dc:
91:09:ed:a7:98:a6:ba:25:07:95:18:e2:c6:63:f3:
72:9f:1a:eb:31:64:9a:74:5f:21:f6:13:28:d0:20:
95:1f:19:ec:e8:0f:1c:d2:6c:ba:cc:5a:8d:58:01:
a5:24:8b:0d:21:28:6f:95:56:25:cb:43:b3:e6:b6:
ae:25:a7:c3:13:47:1e:5e:50:f7:a1:88:dd:5c:9b:
e2:a1:9d:25:06:eb:c1:82:68:84:02:5d:82:1d:43:
09:b4:f7:15:a3:12:45:98:af:d8:df:15:7b:51:29:
19:5a:4d:4e:44:f3:2a:75:3c:9c:45:75:cf:2d:3e:
ed:06:70:f1:b3:fa:e5:08:86:83:3a:39:e2:8b:72:
e4:e3:fb:4c:60:23:ed:06:17:ce:e8:df:87:79:11:
e9:d1:23:eb:13:ea:b7:3a:52:dc:5a:8f:96:4e:14:
83:de:ba:24:14:59:7c:62:34:6f:eb:d8:63:27:67:
b7:0c:37:2c:4f:31:31:84:e6:e7:38:3c:c5:b5:74:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:7B:3A:A1:A4:E1:A5:E7:C9:3A:89:B0:B3:EE:AB:02:14:AC:F8
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:19:57:2b:bb:bf:5c:23:6f:72:29:36:7f:79:66:5d:29:c6:
12:e6:2c:c7:81:64:57:3d:5a:df:fa:ef:60:3a:c6:a0:a8:3d:
09:d6:56:d0:3c:9a:fd:5e:19:9e:dd:2e:f6:16:d3:ec:59:48:
c7:4c:84:63:c9:e4:02:93:87:9d:4a:b8:83:93:fe:c2:f2:fb:
0c:e7:13:a3:06:4e:85:38:42:ca:e7:69:ff:3a:5a:4d:f3:33:
b7:01:b2:f8:4b:61:df:b0:7e:d5:93:fc:e0:1d:d6:c9:7c:fa:
bb:1c:95:cc:8c:9c:c8:28:62:44:0b:1e:5b:f6:37:53:83:f7:
1d:65:db:ce:39:c6:86:78:c1:22:b8:2c:a5:1e:de:fa:34:c1:
e2:56:e7:d0:60:20:01:16:28:15:59:f4:60:ad:d1:f6:ca:a5:
91:79:07:c6:98:a6:16:8b:5c:49:9a:ad:fa:30:9b:ed:b9:da:
dd:f9:05:a5:2f:0b:c5:77:61:f6:00:df:98:11:f4:35:8a:91:
29:67:dc:ec:99:ab:90:d6:b4:3e:49:b6:c2:63:29:d9:d2:94:
73:d6:97:58:0a:b5:e4:5e:df:2f:09:3d:0f:6a:ac:93:a5:59:
45:15:d0:e9:68:46:37:9d:cc:b9:42:73:38:44:bd:42:67:f0:
12:ec:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client