Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: 5HqZlbifBmzjU7vN9Nbl5nBSA6q5DLxInbRUUnpVy3Y=
Subject key identifier: 6A:AC:A1:C4:62:53:8C:63:61:67:0E:9A:3A:2F:9D:D9:CD:8F:6F:63
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019A4F62305EA33CE608878BC3B24FCCB0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: /T8dcSMizqJbrGhON+78CuVfOZ7aiUReXby9HHYmlco=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:30:5e:a3:3c:e6:08:87:8b:c3:b2:4f:cc:b0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=6aaca1c462538c6361670e9a3a2f9dd9cd8f6f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:91:d5:31:00:5b:1a:36:6c:1e:41:ed:0a:e9:
c7:d5:0b:20:84:85:3e:cc:7d:02:6f:69:a0:bc:e4:
8c:7f:eb:e4:e1:e2:c8:18:af:77:b0:f7:33:3d:6b:
6e:25:fa:27:15:48:98:31:cf:63:a7:cf:ae:26:c6:
79:4a:e0:e6:cd:9e:2d:4f:9c:83:c6:ec:ae:7e:da:
f9:d3:58:77:15:00:db:fa:eb:18:03:6c:f4:61:95:
18:09:96:42:e2:6e:b8:da:66:40:41:a8:1a:29:cf:
34:f4:95:80:c8:cd:70:5e:51:5e:f2:e4:eb:18:e1:
ba:eb:e6:63:53:c8:9f:5c:90:c5:0f:0e:38:8f:95:
57:68:47:8c:09:56:d5:05:82:39:9f:87:9d:80:b5:
4e:c6:dd:62:88:5a:b6:59:39:5a:bc:3b:5d:9d:e7:
78:fa:da:94:98:51:36:8a:29:1f:29:f2:7b:f9:4b:
e8:74:c7:40:42:cd:19:56:8c:62:d5:81:ac:35:c4:
7d:d1:37:9b:69:43:b8:8f:12:b1:6b:2b:4e:75:2b:
e4:06:5c:88:3f:4a:22:ab:13:22:84:fd:ad:d7:6d:
53:a2:6d:ef:03:75:91:b7:0a:c8:4e:9b:b4:2d:e7:
68:81:3c:9e:b2:92:cb:04:73:e3:c8:80:6a:15:3b:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:A1:C4:62:53:8C:63:61:67:0E:9A:3A:2F:9D:D9:CD:8F:6F:63
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:30:72:0c:29:c4:9d:64:71:d8:64:3c:41:c0:c0:c5:97:
dc:ca:87:09:aa:fb:0a:01:a7:f2:2a:29:07:39:f0:f0:b2:4b:
81:39:a7:f4:24:54:74:cf:6a:74:08:fe:6d:ac:47:c7:53:ce:
d6:57:e2:61:68:db:35:57:27:c2:ae:ef:34:4d:02:8e:60:8b:
19:bb:01:80:30:94:1a:80:88:be:b7:35:f8:9c:0a:29:b9:85:
f1:52:52:d7:c1:51:d5:54:e0:c0:c8:28:2f:b3:85:80:b6:18:
9d:5a:71:e6:b7:96:5e:82:2d:df:d9:ab:82:9e:44:2e:0f:af:
da:08:fc:79:ae:a2:47:dc:44:58:75:6a:10:8a:bb:b5:13:23:
4e:88:9d:be:e9:6d:d4:77:27:d0:a6:dd:b4:bb:db:38:9e:9a:
b1:83:a7:81:c8:29:73:e3:b3:88:76:48:72:40:e7:ae:df:89:
7b:bb:e0:ab:32:c9:15:5a:f0:8d:91:db:44:76:b9:06:50:0a:
36:61:88:72:74:af:2a:3a:e4:f9:2f:7d:5a:ae:95:a6:9f:bd:
b9:70:39:d9:f9:2b:1b:db:3f:54:31:d0:d7:c0:16:0f:2e:7f:
76:72:40:e0:5f:a9:34:c0:de:96:e7:a6:75:30:73:ec:3f:a7:
55:fb:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:23 2025 by rpki-client