Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: YKwYr4F2Ocy6nAJoApszmvlSImNaHbyFJJHnmBTfk2w=
Subject key identifier: A8:0E:C9:81:F4:1E:48:2E:97:38:1D:7F:81:61:43:7F:E3:37:B1:68
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019A4EF518D3E72427EB4720C81717A7F342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 1183
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: duX6KIMEqEiJNKZmlX/aqBvo9GB7k43Qzwtv9+trkCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:18:d3:e7:24:27:eb:47:20:c8:17:17:a7:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=a80ec981f41e482e97381d7f8161437fe337b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:ae:ab:3c:f5:9b:b4:f0:90:be:20:21:14:
db:1a:cf:60:aa:fa:cb:5b:de:46:c7:b9:26:de:cc:
7c:f5:9a:42:73:6e:d7:c7:74:e3:9d:ab:2a:f9:e5:
8a:93:75:ac:43:2b:58:59:95:53:cf:a2:3e:9e:79:
bb:2e:fd:cf:b7:9e:e6:36:59:ce:c3:00:0f:ca:2b:
f6:be:8f:aa:bd:44:62:4b:5f:e0:ac:91:86:e9:e3:
60:6e:d6:4b:02:74:60:13:49:4f:bb:ab:52:bc:38:
4f:c4:7c:7a:02:09:fe:62:93:e9:b2:ed:bd:b3:2d:
df:f7:74:29:33:3b:76:4d:b6:3d:71:3e:73:a2:65:
c3:52:dd:ab:f2:5b:18:25:bf:82:40:51:44:32:d9:
88:56:92:ff:f7:49:98:fe:35:6d:0a:36:c3:e9:5e:
7c:68:55:49:1b:78:6a:22:1c:f5:06:43:c7:7e:f5:
b8:45:06:58:7f:7e:eb:34:7c:99:2e:22:6c:6b:e6:
27:1a:6a:9b:8d:0f:04:8e:90:63:d1:bb:b6:0e:a6:
74:f4:65:58:66:45:e9:aa:39:07:b8:6f:e3:4f:56:
fb:97:95:14:19:14:43:ec:96:a4:97:0e:b6:d7:45:
a9:f3:98:b3:c7:bb:30:a0:45:03:a7:e9:60:d0:b9:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:C9:81:F4:1E:48:2E:97:38:1D:7F:81:61:43:7F:E3:37:B1:68
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a3:2b:89:63:fd:9c:75:a9:c6:ad:52:45:3e:2f:95:f2:8d:
8e:d4:c9:78:4a:e6:0a:ba:9e:bf:fd:9b:96:e8:1b:f1:e5:e5:
ee:fa:ed:d2:c0:f1:ad:71:79:ae:cd:7d:ff:98:d6:8c:89:90:
12:d7:9e:49:7f:93:55:c8:a3:82:d9:ef:d9:13:e6:5e:87:a1:
42:31:58:0f:4e:d0:3f:d3:69:13:21:19:ad:29:9a:ec:c5:34:
b5:8e:84:46:01:d5:1f:af:67:65:77:f7:12:29:de:35:55:53:
b5:fd:85:21:6b:a5:ad:9a:b1:1f:73:e1:f6:a5:47:89:55:3d:
3a:1e:e9:73:2b:00:85:16:2d:6c:ca:6e:c7:8f:9d:6b:0a:a5:
6f:36:24:39:04:1f:a2:2c:f2:7d:a7:3e:52:45:ee:5f:ee:0b:
0c:0b:b2:a9:47:21:5a:40:79:73:97:e7:23:7e:db:f5:93:a1:
e3:89:e5:b9:17:09:09:f9:51:b4:55:62:95:4b:76:38:94:65:
5d:27:d1:5e:f2:94:2b:96:49:ee:c4:32:ff:cd:f3:e6:41:50:
9f:54:fe:9e:29:b4:41:ea:bf:7a:13:d3:82:d4:18:e8:92:20:
b0:21:0a:f7:ee:10:25:13:51:6b:66:67:77:0c:aa:70:0c:f7:
0c:6d:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:14 2025 by rpki-client