Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: 3nffKkaEQJq22nu1xDLYp9VI/GgYx+RSErnGEwzDQRo=
Subject key identifier: EA:E5:92:AF:A6:C0:F0:61:95:1F:99:9F:83:EB:4B:28:67:8B:95:C6
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019A4EBD51B01A36F3933640A16324FC1F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 15F6
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: 6FP3Y1fBU0TrJ51eMbgNFd0rKVA.roa (hash: ThVgjuG/r9q2aF5/KHMfIZnIIpHT020uL7K9KYhhSI4=)
2: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
3: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
4: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
5: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
6: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
7: O8qEciVBjDooFokDnHqAMc9PpWM.roa (hash: RGa2nLDp0/bHbVbOkr73dwyquGWNJsV+DHv7xfkWAwg=)
8: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: kaP/X/zc1j/gnRR0EGWFJ/szYPXA1681PMO1oX9I9g0=)
9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:51:b0:1a:36:f3:93:36:40:a1:63:24:fc:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=eae592afa6c0f061951f999f83eb4b28678b95c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:72:40:26:3e:4c:f8:ae:29:ca:45:48:0e:
b9:7b:bc:f6:cf:b6:23:27:43:bc:35:c7:78:23:19:
f8:38:51:ea:4d:84:20:a5:95:32:fa:60:70:31:27:
69:cc:f2:bb:32:55:ba:73:d7:a9:3d:76:f4:a4:4c:
ac:96:fb:c0:81:e8:8c:c8:19:45:56:c6:6f:6d:bf:
3a:d4:46:24:e6:e1:bf:91:01:99:af:67:6d:42:71:
25:e3:a8:9b:3d:ea:80:4c:22:6e:ac:78:06:3a:53:
af:2a:9a:9d:d7:04:5c:dd:74:1a:3a:f4:cc:56:a6:
83:5e:62:b2:45:82:38:a8:09:90:f3:b4:da:5f:87:
39:c8:f3:43:b1:a6:58:65:77:1e:75:38:cb:5c:2d:
81:3c:f0:fa:16:e9:0c:33:1a:60:55:ca:b5:67:53:
f3:69:45:49:8a:70:7f:da:8f:0b:e5:38:a6:13:88:
d3:e9:13:fa:85:62:f3:66:a6:4e:c9:1c:e3:1f:1e:
28:81:cf:e2:8c:b4:0a:c0:62:1a:dc:1a:04:7b:9f:
d9:ee:54:59:59:6b:b5:e3:e5:c7:d2:86:33:f6:f3:
f9:67:86:eb:9d:46:3d:f4:1e:28:6d:6e:8d:36:d2:
58:7a:08:de:93:0f:01:d4:88:08:ad:5c:e8:1a:19:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:92:AF:A6:C0:F0:61:95:1F:99:9F:83:EB:4B:28:67:8B:95:C6
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8c:99:84:16:86:5b:cc:9c:f5:45:98:4c:42:97:e8:da:32:
c8:45:d0:30:7c:ff:93:89:18:4d:ad:d5:89:71:50:06:6e:0d:
29:b5:7d:9b:31:54:c8:5c:c4:d2:52:b5:1f:84:ff:f9:d1:29:
5c:e6:49:74:6e:33:43:63:97:80:3b:0e:71:f3:8e:c1:a1:22:
24:98:e2:82:32:91:f2:1f:c2:a3:dd:76:b3:a8:ea:ef:08:04:
8d:89:e6:76:2d:57:d1:21:90:63:b3:3c:1d:b8:8c:de:8d:9f:
61:b2:c8:6f:a6:82:3f:c4:02:36:0a:e3:01:9f:06:76:e3:fe:
8f:ee:a6:49:02:4b:64:c7:2c:86:a3:06:f2:43:21:4d:99:c3:
00:55:64:26:26:76:34:3e:9c:eb:65:9d:2d:e7:e6:12:9c:ac:
f7:38:54:cd:51:88:5d:3d:74:47:b9:b9:cf:3d:6a:2c:83:d1:
e0:63:c3:8e:ee:f2:44:d4:88:e4:9e:70:75:13:7a:a9:9b:1a:
23:ef:81:4e:f0:20:b9:95:63:68:41:6e:ae:97:2d:d5:84:85:
63:8b:ff:75:9d:d0:10:31:17:f3:04:fa:16:74:18:b7:3d:bb:
30:a9:96:01:1e:a8:02:84:81:eb:58:0c:29:4f:fb:56:c0:e6:
68:8b:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:07 2025 by rpki-client