Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File: AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier: amw5+yQTsMrF9CGz3/8kHb2G08/oYjskmHXMHpsRM4A=
Subject key identifier: 57:80:18:51:27:AB:03:CD:32:A3:77:E7:5F:1A:C4:02:E4:DD:56:F6
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 019A552DFFDFBB03AC2929008FC95866A251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number: 0C3E
Signing time: Wed 05 Nov 2025 18:01:09 +0000
Manifest this update: Wed 05 Nov 2025 18:01:09 +0000
Manifest next update: Thu 06 Nov 2025 18:01:09 +0000
Files and hashes: 1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: qWlr8mgfyN1UT2bwZYHP3cpcRquMsrWw7VtTo9BsOGw=)
3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ff:df:bb:03:ac:29:29:00:8f:c9:58:66:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Nov 5 18:01:09 2025 GMT
Not After : Nov 6 18:01:09 2025 GMT
Subject: CN=5780185127ab03cd32a377e75f1ac402e4dd56f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:bd:4e:4e:50:24:e8:ca:d2:bb:7d:91:b5:
48:db:f9:0d:99:92:fd:39:9a:4f:6f:f1:fb:df:e4:
74:49:1b:06:1f:1d:2f:8d:92:6c:97:0a:e8:e8:bc:
b6:b1:8f:96:71:4d:20:35:fb:ab:00:f9:32:af:32:
97:e1:cd:e8:28:25:8d:fe:f4:02:69:94:41:91:e7:
f7:57:19:28:51:76:05:91:4e:89:13:ff:d6:a0:59:
d1:d7:29:54:35:8d:85:05:34:2b:e9:9a:78:be:43:
5a:5e:be:ba:31:43:8d:f7:d4:ce:8b:7e:21:4a:c3:
d6:b5:a9:ff:7a:af:65:04:a6:f6:b6:ad:93:8f:c8:
1d:95:5b:7f:b5:90:3c:22:68:e9:21:37:0e:13:ea:
d9:a8:8c:f7:f5:7e:44:9b:d9:e1:6d:59:ea:02:ed:
b7:70:e7:bc:a4:eb:97:8d:80:7e:c1:e4:a3:8d:0a:
ba:e4:ec:93:0a:69:5c:7b:b5:ab:06:11:ca:b6:67:
bb:cd:fb:57:81:71:9a:7b:1e:95:80:27:b9:bc:3e:
6e:af:ff:56:ce:39:4b:d9:87:06:26:cc:34:fd:26:
00:af:66:1d:d5:40:39:3a:0c:da:44:92:ab:2d:6b:
27:ce:59:18:a5:53:92:bc:1b:bf:42:dd:c9:db:ef:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:18:51:27:AB:03:CD:32:A3:77:E7:5F:1A:C4:02:E4:DD:56:F6
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:3b:da:29:8d:df:80:c6:fc:d6:a1:11:1f:94:84:65:af:
54:c6:4c:a0:3b:35:3a:6d:21:af:c7:47:97:da:2d:76:55:d7:
ab:9a:c0:c6:3f:a2:eb:3f:56:c5:2e:af:5d:41:9f:46:aa:e9:
00:e2:14:94:d0:bf:d6:92:76:49:f1:22:c1:46:73:a6:5a:28:
fc:56:39:f4:42:6d:67:d0:da:c6:54:a7:13:e6:b3:17:65:8c:
a8:0f:24:98:ad:88:9e:ef:3f:58:c0:02:bc:bc:79:c2:dc:d1:
79:e9:c3:21:dd:e6:74:c0:0d:86:fa:c7:51:5c:38:ec:4f:9a:
f0:5a:27:74:d3:71:9a:bf:d5:b7:48:04:49:c6:0d:27:72:d1:
57:97:da:5f:7d:d9:9e:f6:fd:7f:da:d0:c1:09:7b:7e:f5:1a:
a3:6c:5a:06:7a:73:ef:6a:ce:1f:08:7e:97:7a:7e:16:35:3c:
fa:ba:f9:44:43:b7:e2:ef:9c:33:46:58:1a:73:99:6b:eb:9a:
3a:4f:c1:05:51:0c:c7:42:33:d6:e0:1e:5c:b2:dd:41:3e:5f:
63:ad:9e:ab:99:ac:ef:8f:a1:c7:3b:9e:8e:e1:75:9d:55:a7:
b7:04:9f:83:ef:03:3b:67:c4:95:7c:88:e3:f8:7f:dc:f2:8c:
ca:ae:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:43 2025 by rpki-client