Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: TctS4mwtydcHGGtTaD04HV2zvgwbtV5/Z7W0V8ri48Q=
Subject key identifier: CA:A7:28:D6:0E:4A:F0:98:43:A8:7D:DE:2F:D8:B0:8F:21:DA:F7:11
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019A522CC5F138545FAD8955330119C269D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 0435
Signing time: Wed 05 Nov 2025 04:00:57 +0000
Manifest this update: Wed 05 Nov 2025 04:00:57 +0000
Manifest next update: Thu 06 Nov 2025 04:00:57 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: KBQvlyurzAagFyjrAfZzDQ5iiJA7001MzZFbFnGoUKI=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c5:f1:38:54:5f:ad:89:55:33:01:19:c2:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Nov 5 04:00:57 2025 GMT
Not After : Nov 6 04:00:57 2025 GMT
Subject: CN=caa728d60e4af09843a87dde2fd8b08f21daf711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:38:30:6d:65:f9:9c:44:99:cf:26:90:49:eb:
2b:45:d0:2c:17:53:74:f9:c7:80:23:e1:e1:43:24:
de:c5:ab:20:57:df:df:26:bf:ee:09:28:a8:b0:b2:
49:f3:22:cb:2b:27:49:f7:c9:3e:0a:77:62:f0:52:
00:87:ad:b4:40:89:a0:4a:39:b3:e3:7b:d7:81:b5:
62:b7:dc:76:a4:51:3c:8c:fb:04:b3:85:e9:8f:3f:
a7:6c:89:25:fd:d9:60:96:aa:fa:6b:11:6e:06:e5:
83:b5:52:14:ec:f1:ad:93:12:e1:de:02:3a:0a:78:
34:d5:ee:a2:fc:1f:7f:c3:43:18:02:7c:ce:46:df:
56:23:05:18:ee:f2:b4:a2:48:14:48:65:06:94:71:
1f:7d:d5:13:2b:a8:83:e7:9b:d9:18:68:11:dc:41:
75:a2:7e:1e:2b:e3:cb:e5:a9:a2:79:df:20:96:ed:
d2:8f:46:b8:ea:f3:4a:1a:0e:71:eb:e7:15:9d:21:
b2:33:ca:75:13:1f:b1:5b:12:a5:ee:69:6f:0f:9e:
e9:f2:6b:0c:73:f2:28:ce:0c:57:3f:51:52:b0:06:
cd:56:82:00:8e:59:c8:64:7e:22:5c:0a:3d:2c:17:
02:4b:d4:e7:73:f5:69:06:87:99:9f:0d:fa:42:1b:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:28:D6:0E:4A:F0:98:43:A8:7D:DE:2F:D8:B0:8F:21:DA:F7:11
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:6f:0d:61:15:01:c7:2e:17:a1:42:1a:94:0f:03:44:b0:
74:55:f7:3c:9b:86:a4:25:2c:c0:21:83:96:e6:b3:e3:cf:54:
a1:fc:26:b9:59:06:7a:92:a1:a7:97:29:e7:2c:87:fe:66:91:
5a:99:bd:95:3f:b7:44:33:e7:bf:b2:55:30:db:ea:46:81:a4:
18:b7:4c:a1:bd:f5:20:25:89:e5:ff:99:64:52:89:35:9b:0d:
e1:5e:8c:a8:0a:2d:7a:75:ca:07:0e:2e:07:06:2c:10:c5:72:
2d:f3:e9:a9:52:76:da:49:d1:f6:c2:4f:b3:30:c9:14:e8:78:
68:dc:8b:f2:36:f3:f3:e0:ea:29:48:c5:35:fd:45:9f:39:18:
85:f2:01:f7:86:e4:eb:20:9f:ee:6f:8c:62:16:5b:72:86:be:
7c:59:fd:f8:95:63:56:b0:fd:3b:c6:95:95:f3:ce:9b:b1:25:
9d:93:38:bd:f0:13:af:e0:fb:df:69:fa:af:8c:a4:d5:4f:ff:
e0:a6:4a:82:d9:2f:5d:e0:cd:13:a7:82:e8:a9:ac:29:65:dd:
af:09:03:85:cf:3f:01:f2:40:4a:f4:86:95:0a:bb:08:20:7a:
ac:a6:4b:b4:c5:fd:20:0d:b6:de:1e:ab:da:c1:bc:78:2c:a5:
38:e3:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:35:11 2025 by rpki-client