Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: nEouesuC9L0ofl6lNee41PGAb58dXxB2vOcyov18Hrk=
Subject key identifier: 76:98:C1:1E:9B:C9:5C:CA:EB:81:50:A4:60:74:4B:A1:17:78:29:6F
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019A53082648F86B02E615B4922C081CA9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: xBNq5KXr106XwrNcE09aXhgoJezrVQpSITm7i95L2ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:26:48:f8:6b:02:e6:15:b4:92:2c:08:1c:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=7698c11e9bc95ccaeb8150a460744ba11778296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:a8:f9:ec:55:ba:72:2e:f6:b7:2f:bc:39:
30:8d:32:2c:86:be:4d:0d:16:c2:47:e8:12:1f:21:
3c:c6:c8:80:bd:8a:7b:fc:e6:f8:d4:df:aa:40:bd:
a1:09:6d:b6:24:2a:d6:7c:8c:69:b2:56:de:31:3e:
fe:50:0a:27:0f:74:0c:0e:5e:ff:d9:98:4e:b1:02:
c4:3d:df:2c:d8:59:99:bc:59:02:80:00:b7:07:ac:
1e:44:3a:3c:da:ab:b8:ef:ea:54:6a:bd:56:36:d3:
f9:9e:5f:f5:b4:02:a9:42:96:17:cf:33:5b:d0:0d:
55:19:a7:2f:c1:43:88:cf:7e:83:61:ac:20:b2:46:
66:fd:04:9e:63:98:47:a9:0f:12:f3:3d:db:9b:c3:
ae:40:63:91:a1:87:48:e2:ca:b9:3a:2d:6c:3a:ca:
7d:2c:2e:f1:22:ac:19:6b:6b:af:54:bb:31:15:db:
ef:4b:89:d7:77:31:f4:a8:f7:b2:9d:6f:08:a3:10:
9b:81:55:f2:f0:c5:99:99:fa:08:18:2a:80:9d:fb:
1f:fe:2c:8c:4b:6e:8f:f6:9c:a4:5b:10:d5:7c:0d:
8e:cc:b0:7d:fa:2a:64:fa:0d:3f:e7:2a:6c:fa:ad:
ea:76:c2:69:39:71:df:c7:4e:fd:ee:dd:f0:f3:23:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:C1:1E:9B:C9:5C:CA:EB:81:50:A4:60:74:4B:A1:17:78:29:6F
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:20:79:3e:cf:46:18:9d:40:23:d6:9d:9d:99:89:04:81:13:
98:34:71:c4:60:ac:ef:1f:bf:0e:62:b5:5c:b1:2c:91:fa:5a:
de:80:ac:86:57:e6:aa:cf:88:fc:c6:4d:60:9d:ff:22:3a:e3:
d0:b0:25:cf:46:e9:71:b0:33:e4:0e:bd:e0:44:41:0f:72:fd:
c8:bb:fb:f7:9a:0f:8f:a5:e4:3f:32:a9:77:60:7c:38:1e:3f:
b4:8c:15:b7:fa:1f:95:7c:50:c5:38:e5:55:8a:5e:12:6b:21:
2f:2e:da:9a:52:c2:37:35:f4:a3:e8:96:bc:75:f8:81:93:81:
e3:7c:e8:8b:11:16:ef:9e:2f:ae:63:db:5f:49:1b:60:a3:ba:
d4:a0:df:08:f7:68:eb:f4:e4:53:8a:44:6f:19:73:d7:26:df:
6a:9d:f7:64:b2:c6:f6:af:f0:1f:aa:f6:4a:a0:e7:3f:4f:2b:
61:b4:75:f0:ee:49:dc:3c:e2:88:a1:3b:7e:89:f6:89:09:39:
b1:ba:20:3e:00:91:68:c3:94:85:1f:08:4b:d4:a3:35:aa:c0:
78:30:e9:bc:11:a7:de:42:05:89:c1:4e:9c:06:7c:37:d5:fd:
50:9f:8e:46:49:07:59:fe:13:4f:43:a6:db:9d:1d:0a:f8:89:
ff:05:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:35:56 2025 by rpki-client