Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: ylgGta9z7LhLNk3V1iH+sgurRkhXAaNvL1lGYqDKsCA=
Subject key identifier: C2:4F:AA:2F:17:89:A2:00:F6:2D:F6:20:7A:BD:82:26:92:01:45:D4
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019A4F2AFB1CE74F48A7C003C8FE5A457CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: HJxAKryraBHpw9hEeDVLsTSiU3TViGQ3Ao3kfK1+NAk=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fb:1c:e7:4f:48:a7:c0:03:c8:fe:5a:45:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=c24faa2f1789a200f62df6207abd8226920145d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:37:95:6e:85:bf:a1:5d:51:9e:d8:3d:9e:
4f:f7:8b:16:7e:4a:ee:7f:56:a7:b9:bc:3b:7e:0a:
a7:1e:f2:2c:d5:a1:50:f2:8a:83:cc:ee:22:5d:8d:
6c:2a:30:bb:91:59:11:b6:24:3a:92:ed:26:2d:e6:
2a:d5:18:8d:9c:85:c2:e5:de:8a:67:c4:39:d1:ed:
df:8b:41:1e:32:ba:64:d9:9c:13:12:d8:c7:5f:47:
c8:cc:cd:bc:fb:ea:52:f8:01:00:be:a4:69:c2:35:
09:77:ec:41:a4:95:33:69:8a:cc:b8:1b:f0:92:7b:
e3:76:44:da:b8:70:1c:be:67:4c:a5:34:6a:f2:6e:
69:52:1c:95:98:62:a8:60:1f:8c:6b:21:29:e5:94:
ca:ad:46:fc:16:c3:52:4a:68:a1:cd:66:38:ac:ac:
7f:82:bc:68:39:8c:c7:79:1b:40:6c:90:d5:d2:20:
b9:4f:13:a0:72:59:b4:ef:34:d8:c6:6f:48:34:9a:
75:97:27:cd:4f:4e:4f:26:4e:b1:4d:82:09:4a:de:
cc:f1:1b:ee:3b:85:0e:66:58:93:57:04:48:09:24:
8f:f4:88:f9:cd:87:e1:e2:8f:0b:4e:45:ac:8a:a8:
aa:78:d0:8b:96:59:1b:a1:c7:3c:23:01:84:21:18:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:AA:2F:17:89:A2:00:F6:2D:F6:20:7A:BD:82:26:92:01:45:D4
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:44:9d:a2:c3:09:94:90:a9:9f:fa:39:08:26:0e:76:84:
9c:54:f1:08:dd:ba:d6:9c:f7:73:66:b6:e6:69:3d:df:53:9b:
0f:18:b9:a9:d7:fc:c2:ba:93:7c:4d:79:0d:b1:52:ec:f7:9f:
f3:f0:90:c4:3e:e2:fc:12:65:b7:d3:97:2b:6b:22:aa:99:31:
6b:b3:8f:cd:ac:51:17:cc:2e:88:65:c6:ab:3a:9d:6b:3d:d6:
ba:61:62:15:8e:63:c0:02:0f:a1:b8:d2:bd:0b:30:15:a4:a0:
b4:98:86:c0:28:6f:d0:98:d3:c1:4a:1e:4c:cc:6d:19:d9:86:
4f:e1:e4:59:f8:9d:3b:be:17:cd:8d:a2:50:44:b2:06:ae:fe:
f5:09:56:62:c2:26:5a:cc:ac:ec:56:16:17:89:fd:65:d5:0f:
3b:97:45:a3:1e:ef:1a:be:0e:86:e4:c4:73:51:2a:d1:1c:ed:
42:61:fd:da:fc:55:0c:cd:ac:c6:9d:e0:21:42:39:81:cf:19:
b9:fc:18:a0:89:c8:eb:42:9b:27:8e:fb:a3:c5:50:f3:77:40:
bd:a1:bc:93:68:e7:07:93:a8:91:b5:be:60:ae:50:5b:f7:a3:
c1:52:62:ae:4d:f1:2e:81:4d:a7:b8:82:25:ef:0f:0f:7c:27:
3b:a9:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:10 2025 by rpki-client