Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: QxJ+felPs5RxErz8OsloUZXlEqT+xqxUFyNiuHbuPQ8=
Subject key identifier: 83:76:E5:55:24:49:EE:34:23:70:F6:D3:0E:17:76:D9:9D:50:22:98
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019A4EF3FB77C1CFBD895D44EC971140F1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1353
Signing time: Tue 04 Nov 2025 13:00:03 +0000
Manifest this update: Tue 04 Nov 2025 13:00:03 +0000
Manifest next update: Wed 05 Nov 2025 13:00:03 +0000
Files and hashes: 1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=)
2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: HLWR9yipOvopSZaRGQylaWSVxwnR8UbyJyEgeU+GXcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fb:77:c1:cf:bd:89:5d:44:ec:97:11:40:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Nov 4 13:00:03 2025 GMT
Not After : Nov 5 13:00:03 2025 GMT
Subject: CN=8376e5552449ee342370f6d30e1776d99d502298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:74:89:df:0f:95:f6:fd:5f:16:e5:a6:d3:
fe:61:3c:3a:86:b3:02:6e:a5:35:dc:94:b5:36:3b:
44:d0:58:a2:42:c7:6b:57:9d:73:e7:f7:29:83:35:
45:35:bc:9f:65:f2:ff:8b:1d:51:f7:06:d7:d3:6d:
a4:26:24:16:ce:d9:e4:b4:87:ce:9f:d9:55:a5:ee:
ba:3e:8d:e0:02:b1:ca:34:4c:cc:a1:58:10:f0:6f:
a9:55:e9:43:ff:46:6e:1f:34:e4:7b:88:e9:99:80:
d0:68:33:e4:8d:73:de:92:2f:f8:f8:83:18:32:60:
d2:2c:b7:80:87:6c:7a:e3:85:ef:c8:8f:39:a8:6b:
08:70:8a:21:6e:1f:cc:b8:ce:3c:7f:6d:c3:80:e6:
96:10:1f:e5:56:6b:1e:a7:7b:47:f8:a7:b3:83:81:
71:ad:94:4c:74:c6:3e:61:f0:d8:47:1c:4f:6a:15:
d4:d5:02:9c:a4:31:b0:d8:1f:87:ad:0e:38:1e:8f:
55:31:84:dd:24:82:1f:fc:6e:a1:ab:ca:54:25:0f:
53:46:51:86:2e:08:ae:cc:60:45:db:0c:73:ac:d1:
2c:c5:ce:39:95:64:47:ea:f1:18:92:22:c9:d5:9f:
ab:48:f0:dd:a4:d2:28:12:92:1a:64:f5:26:0d:55:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:E5:55:24:49:EE:34:23:70:F6:D3:0E:17:76:D9:9D:50:22:98
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:39:05:26:97:e8:d2:de:e0:1e:c7:e0:84:e6:79:0c:12:a5:
d4:db:77:5b:f9:92:1f:a4:ad:65:16:2e:c5:c7:90:49:04:64:
28:e8:b2:10:43:ab:61:74:cf:65:90:8b:a7:91:06:38:b8:26:
b2:2e:54:68:c3:1f:a6:27:17:43:ef:25:89:b6:00:07:20:2d:
bf:db:c2:f0:ea:27:fc:69:02:fb:20:ad:9f:96:ea:17:d7:de:
e1:27:36:31:bd:17:91:e1:04:a1:f8:13:fa:3c:bf:33:73:3d:
cd:3c:78:1b:bb:75:60:4e:72:68:3e:d6:6b:cf:92:ed:19:a1:
5a:14:55:de:2f:82:18:39:96:b7:25:1f:a3:80:f4:03:e7:33:
1b:3b:8a:db:58:d3:94:08:d6:12:14:91:ac:44:8c:dd:06:63:
72:93:77:8f:23:88:fc:64:d8:02:f5:9f:5b:4b:c1:38:3c:66:
fd:b8:51:7a:3c:53:ce:bd:61:20:38:37:2d:96:1c:a3:8b:33:
b7:32:fc:11:73:d5:50:92:53:6d:e0:55:8f:83:76:8a:a7:2b:
d2:a1:45:de:81:cf:f1:df:7a:8b:5a:1d:f0:57:65:cd:5a:f4:
bb:fa:e6:0b:7b:85:09:a4:b0:68:7c:48:af:de:f6:e4:64:2d:
bb:20:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:39 2025 by rpki-client