Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: 3kN2dfDaqr+CgJ/mccvdJ+dq4p0aUH0UzIvi/cERCwE=
Subject key identifier: 55:A9:86:A3:49:67:ED:FB:9D:47:D0:7A:22:65:B5:83:C3:B4:98:65
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019A52630A8B02A6BD8AEA95DC6C7B8A1CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 18
Signing time: Wed 05 Nov 2025 05:00:13 +0000
Manifest this update: Wed 05 Nov 2025 05:00:13 +0000
Manifest next update: Thu 06 Nov 2025 05:00:13 +0000
Files and hashes: 1: 3Gh8OdXmWQdIZ4mk5HiPN4TPVh4.roa (hash: Cp0uJqQCCfVS+mC0KewqKWaLegack3UYWeQPqXDJvvI=)
2: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: sRQZ6vtVfgD2z4taq5L85Qmi4vpmlQ0NyXQuFhxcL5c=)
3: sChO2wUfE9hSdmv4khdrkrYtnMk.roa (hash: /INpfWnZY160HpcHDvzWJGinUo9LuDU7A4NCloJUW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:0a:8b:02:a6:bd:8a:ea:95:dc:6c:7b:8a:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Nov 5 05:00:13 2025 GMT
Not After : Nov 6 05:00:13 2025 GMT
Subject: CN=55a986a34967edfb9d47d07a2265b583c3b49865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:5b:80:69:c2:f1:3d:66:cc:17:cf:99:b0:
c0:80:3a:b5:7a:14:9d:a0:b5:ad:99:e6:67:71:39:
2f:9b:73:33:3b:38:a5:68:c8:5e:60:9d:63:23:03:
58:2c:f2:8e:e4:c3:40:10:9d:68:a1:a8:bd:62:4b:
51:fe:b3:dc:9e:4c:44:54:34:6d:3d:cc:bb:65:9a:
02:64:51:76:58:ca:af:83:65:27:e6:74:9e:9b:6d:
4a:83:6f:74:20:d8:a5:f2:e8:37:2f:74:15:93:a3:
23:8f:14:7f:15:c6:e8:df:0b:56:c6:48:56:61:60:
22:60:99:3a:fc:27:a8:05:c8:9b:e9:29:cd:3a:28:
2c:24:be:69:f8:bc:b6:6d:86:39:4c:cb:21:be:d0:
43:2f:0b:ce:55:f1:7f:f4:43:2b:de:f5:72:a6:89:
2d:ef:0c:1c:05:8a:a8:f8:f5:f0:d1:6f:cd:c9:ba:
79:13:24:a9:64:10:1b:34:70:d0:31:40:33:b8:d9:
a1:eb:98:e5:72:d2:2f:79:f3:e7:9b:1c:8a:15:8c:
21:d5:d5:2d:2d:54:cd:14:ea:c1:65:e1:c6:2a:fa:
38:61:b9:70:cd:61:ac:22:cb:1a:b0:7d:2f:5c:a2:
31:37:1a:1b:1f:89:b7:f8:da:c4:44:00:67:e6:58:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:86:A3:49:67:ED:FB:9D:47:D0:7A:22:65:B5:83:C3:B4:98:65
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:03:e3:7a:12:50:9c:da:f9:c6:c6:56:20:21:c5:3e:71:
98:27:f5:a4:b3:98:b7:3a:6c:2e:60:a2:12:9f:74:fd:3d:35:
05:53:0e:7a:66:49:b9:8f:b6:8d:83:ba:fb:7c:f2:c2:7c:b0:
b5:84:55:28:3c:ad:18:f9:7e:ca:a7:1c:dc:ef:1f:23:a4:78:
de:bc:b6:b0:27:09:ea:2f:b8:ac:9c:a5:79:90:89:2f:ab:48:
0a:83:44:0d:bf:f3:10:65:a8:11:50:f1:8b:18:3b:4c:d4:65:
a6:4c:41:7d:20:96:ca:b6:42:ab:ba:37:52:7f:b0:c0:84:60:
42:ad:8a:47:5e:f1:17:97:59:03:18:28:6b:d4:4e:6a:27:d9:
01:42:24:ea:3a:34:2f:5e:3b:09:c3:d3:3f:0b:97:f3:1f:22:
c5:e0:58:e0:98:09:b0:65:37:5d:6d:07:00:ac:f2:2d:cd:c3:
70:eb:a7:78:ff:4d:7f:a1:37:af:44:b8:68:5f:3c:d2:be:92:
19:c9:76:05:fb:e4:48:b2:f6:08:2f:f8:bb:74:39:54:0a:0b:
70:65:ff:d7:df:9e:a4:69:1e:5c:06:12:f7:ce:fc:31:62:d3:
a3:cb:ea:48:6e:ed:cd:43:12:86:71:f1:a6:fe:17:92:d4:e0:
43:8f:71:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYwqLAqa9iuqV3Gx7ihyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz
ZDZiOTEwHhcNMjUxMTA1MDUwMDEzWhcNMjUxMTA2MDUwMDEzWjAzMTEwLwYDVQQD
Eyg1NWE5ODZhMzQ5NjdlZGZiOWQ0N2QwN2EyMjY1YjU4M2MzYjQ5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZpbgGnC8T1mzBfPmbDAgDq1ehSd
oLWtmeZncTkvm3MzOzilaMheYJ1jIwNYLPKO5MNAEJ1ooai9YktR/rPcnkxEVDRt
Pcy7ZZoCZFF2WMqvg2Un5nSem21Kg290INil8ug3L3QVk6MjjxR/Fcbo3wtWxkhW
YWAiYJk6/CeoBcib6SnNOigsJL5p+Ly2bYY5TMshvtBDLwvOVfF/9EMr3vVypokt
7wwcBYqo+PXw0W/Nybp5EySpZBAbNHDQMUAzuNmh65jlctIvefPnmxyKFYwh1dUt
LVTNFOrBZeHGKvo4YblwzWGsIssasH0vXKIxNxobH4m3+NrERABn5lhpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWphqNJZ+37nUfQeiJltYPDtJhlMB8GA1UdIwQY
MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt
ZWNkNjcxMjgyYzFmLzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm
LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzQD43oS
UJza+cbGViAhxT5xmCf1pLOYtzpsLmCiEp90/T01BVMOemZJuY+2jYO6+3zywnyw
tYRVKDytGPl+yqcc3O8fI6R43ry2sCcJ6i+4rJyleZCJL6tICoNEDb/zEGWoEVDx
ixg7TNRlpkxBfSCWyrZCq7o3Un+wwIRgQq2KR17xF5dZAxgoa9ROaifZAUIk6jo0
L147CcPTPwuX8x8ixeBY4JgJsGU3XW0HAKzyLc3DcOuneP9Nf6E3r0S4aF880r6S
Gcl2BfvkSLL2CC/4u3Q5VAoLcGX/19+epGkeXAYS9878MWLTo8vqSG7tzUMShnHx
pv4XktTgQ49xgA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:45 2025 by rpki-client