Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: LV3+2z8U1ORLK993YWY82QEbxyAFdADu4CojqXJGbdM=
Subject key identifier: 69:D6:23:FE:75:05:47:36:8D:73:CC:4A:E6:9D:FF:08:F1:E1:97:F6
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019A4EF4483568A53C096B84F9D24CEDFD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: stNiWudzTUxD1DbQCT+BTn0wGsmWZsItF9KCYvn/9z8=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:48:35:68:a5:3c:09:6b:84:f9:d2:4c:ed:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=69d623fe750547368d73cc4ae69dff08f1e197f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:e9:ce:7c:e9:47:4a:e5:0a:64:de:35:97:
cd:17:7f:33:93:73:a5:c0:3f:fd:69:18:3d:7c:28:
68:1f:8c:c2:e9:3e:ab:c6:52:1a:0f:35:fb:d6:83:
aa:bf:ed:d7:fc:eb:13:40:c9:36:44:f5:5c:70:a5:
04:ba:7f:b5:02:31:c3:52:82:70:1d:bd:b6:cd:30:
7f:b4:8d:9a:32:23:a4:cb:9f:fe:8d:a4:82:22:52:
9c:61:d6:c3:1b:e1:bc:86:3e:22:29:b6:29:f2:08:
e2:92:2d:ee:3b:12:ca:ee:90:93:5c:c8:03:33:6c:
ea:70:12:f9:90:d0:83:cd:8a:cf:ca:d1:c8:b8:a0:
b9:51:54:bb:ac:5c:a9:f6:f4:7f:b9:9a:24:25:5f:
b1:03:fb:c1:79:a6:87:37:7d:37:88:0c:a4:f5:14:
0c:18:1f:05:12:7a:34:ff:86:cb:8c:e9:2e:1e:3d:
21:ce:06:e2:9a:cb:ec:67:95:5b:8d:f5:2f:16:7d:
a0:18:71:7a:d6:e5:a0:bb:1c:97:b1:b6:b3:99:26:
10:db:35:32:fe:ab:2e:4e:81:6c:ef:33:5d:4d:2c:
f0:0b:58:70:69:c2:b8:33:1a:41:7d:a9:39:80:31:
d8:6c:61:58:e5:ae:91:01:df:61:5f:bd:aa:15:73:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:23:FE:75:05:47:36:8D:73:CC:4A:E6:9D:FF:08:F1:E1:97:F6
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:a2:02:ab:6b:d8:77:c5:3e:43:61:d8:9f:9e:86:11:92:
19:5b:b4:0d:a1:6e:2e:d8:72:83:97:e6:19:ae:1d:dc:8b:15:
02:ae:e8:bc:16:8a:b5:d7:ea:b0:45:5b:49:04:b0:9d:54:78:
d1:b6:9e:85:f5:86:fd:17:05:c8:47:fa:22:92:62:a9:5e:08:
1a:fa:af:55:40:7d:46:39:9a:e2:bc:e4:25:e5:d2:20:9c:2e:
e2:d7:07:32:bd:14:a7:56:8f:00:cf:ec:94:af:c0:8b:7f:01:
0f:f8:79:f1:f7:70:e8:77:d6:a3:4d:08:7d:64:c0:d2:e6:14:
e6:af:b7:be:0c:28:3c:4a:f5:b8:de:bd:b5:bc:a0:dd:88:8c:
1d:96:14:a1:e4:00:90:42:3e:f3:4d:69:98:9c:8d:8e:08:02:
d8:36:49:40:63:85:4d:55:0e:25:57:f9:7c:70:cd:d4:fc:b7:
54:62:fb:d6:54:f0:55:66:f5:1c:9b:ed:a3:2b:a8:a0:f6:b8:
40:82:c7:d9:31:fb:5e:9b:4b:8c:11:05:7c:59:97:c6:27:c6:
89:c1:d4:a5:9a:71:65:5a:c0:6c:67:4e:87:2e:69:fb:4e:a6:
26:31:a8:63:d1:a1:db:c5:5b:12:53:22:3c:04:1c:43:d2:63:
08:59:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:58 2025 by rpki-client