Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: 1mo4m1dElHTUdjo/NFs+4dWgKrOeoDGATh/xvAuszfY=
Subject key identifier: 39:07:3A:DA:7F:3B:AA:E3:4F:85:61:3B:6E:8A:A0:D1:2D:B1:6E:13
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019A435F1DC00952A29FF7C22D11B2FCED95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0966
Signing time: Sun 02 Nov 2025 07:01:38 +0000
Manifest this update: Sun 02 Nov 2025 07:01:38 +0000
Manifest next update: Mon 03 Nov 2025 07:01:38 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: mBfF+I2qZXnVMJtEICAiw481IvW/JTeGdISWMDnehlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:43:5f:1d:c0:09:52:a2:9f:f7:c2:2d:11:b2:fc:ed:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Nov 2 07:01:38 2025 GMT
Not After : Nov 3 07:01:38 2025 GMT
Subject: CN=39073ada7f3baae34f85613b6e8aa0d12db16e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:e5:5c:cd:ed:5e:6b:17:21:5d:3b:cf:f3:
8f:91:12:3a:f7:d3:e5:5d:f6:2a:4a:ca:ed:13:b5:
fc:ac:dd:f6:f2:1a:f5:02:03:0d:e6:b6:81:a3:0f:
32:61:a9:6a:0d:f2:76:e2:01:e5:fd:f7:86:d4:dd:
af:09:80:6d:5b:08:c8:81:93:ca:50:05:ad:c2:c1:
88:9b:ad:6f:c1:c3:04:fc:d2:44:b7:58:32:42:3d:
8d:80:a4:8d:79:75:0b:59:84:4f:f2:21:d0:88:64:
bf:34:f7:b7:24:6d:e1:2a:31:cf:9c:8c:9a:b3:99:
f0:86:59:dc:d2:be:f4:ea:c2:95:60:58:e1:33:4b:
c1:5a:94:e4:ba:bd:4c:34:a8:27:26:34:dc:8f:23:
8f:ac:e4:9f:2d:6e:ab:c6:d8:c1:46:b8:ca:83:6e:
09:13:8b:e8:03:05:36:74:2f:14:61:b9:4d:7d:9e:
27:27:90:ad:b8:9f:a4:2a:9f:0f:95:7a:43:d0:2e:
c7:ab:33:f7:b1:52:4c:0f:67:bf:81:ca:7b:a5:86:
ce:2d:68:75:c4:39:ac:6a:c3:d5:75:19:b2:4e:55:
1d:0a:2a:5e:5b:93:41:13:49:ae:b4:2f:b5:4c:3b:
70:bd:1a:9f:66:d5:f6:d3:7a:56:f2:e0:67:c6:99:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:3A:DA:7F:3B:AA:E3:4F:85:61:3B:6E:8A:A0:D1:2D:B1:6E:13
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:dc:26:dc:05:56:ea:2b:71:f9:b4:62:e6:c8:7b:01:f9:
f3:f8:36:ab:55:3f:f7:7e:48:36:46:3b:7c:f4:87:af:7b:cb:
9d:62:ab:05:98:42:0a:37:01:38:40:74:22:c8:3e:57:e6:63:
78:db:ea:16:9c:21:d9:9e:ad:9d:24:82:a6:81:78:a4:87:f1:
b8:ae:a9:4f:f4:49:7d:f8:d5:94:e2:50:f9:dd:d1:51:4a:27:
68:2b:54:3c:d7:ce:de:5f:df:c3:e1:63:1f:be:8b:7a:bc:83:
0d:02:50:a3:f8:24:45:4a:5a:81:db:dc:3c:bb:9f:d0:1d:9e:
c9:eb:f4:dc:ab:5d:cb:cf:9e:5a:3d:ac:1c:2c:6e:5d:20:09:
d4:e4:9c:e8:78:31:21:5f:fb:14:8a:e7:f9:03:2a:fc:c8:0d:
26:9d:6b:94:3a:72:9c:84:97:ba:3d:af:a7:a3:0a:22:cc:df:
cf:10:4d:39:4d:6e:fc:ae:e7:b2:5d:2f:67:99:74:00:0c:eb:
9c:67:de:de:4f:da:e3:a4:9d:c6:46:72:a5:42:96:91:49:da:
07:11:79:c8:19:74:50:67:3f:91:08:28:1b:3f:f2:00:e3:5e:
19:75:bb:35:e9:75:43:a0:d5:2f:02:fd:6f:96:6d:8a:15:08:
a9:70:4b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpDXx3ACVKin/fCLRGy/O2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl
YWE5OTcwHhcNMjUxMTAyMDcwMTM4WhcNMjUxMTAzMDcwMTM4WjAzMTEwLwYDVQQD
EygzOTA3M2FkYTdmM2JhYWUzNGY4NTYxM2I2ZThhYTBkMTJkYjE2ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIXlXM3tXmsXIV07z/OPkRI699Pl
XfYqSsrtE7X8rN328hr1AgMN5raBow8yYalqDfJ24gHl/feG1N2vCYBtWwjIgZPK
UAWtwsGIm61vwcME/NJEt1gyQj2NgKSNeXULWYRP8iHQiGS/NPe3JG3hKjHPnIya
s5nwhlnc0r706sKVYFjhM0vBWpTkur1MNKgnJjTcjyOPrOSfLW6rxtjBRrjKg24J
E4voAwU2dC8UYblNfZ4nJ5CtuJ+kKp8PlXpD0C7HqzP3sVJMD2e/gcp7pYbOLWh1
xDmsasPVdRmyTlUdCipeW5NBE0mutC+1TDtwvRqfZtX203pW8uBnxpmNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkHOtp/O6rjT4VhO26KoNEtsW4TMB8GA1UdIwQY
MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt
MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3
LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPvcJtwF
Vuorcfm0YubIewH58/g2q1U/935INkY7fPSHr3vLnWKrBZhCCjcBOEB0Isg+V+Zj
eNvqFpwh2Z6tnSSCpoF4pIfxuK6pT/RJffjVlOJQ+d3RUUonaCtUPNfO3l/fw+Fj
H76LeryDDQJQo/gkRUpagdvcPLuf0B2eyev03Ktdy8+eWj2sHCxuXSAJ1OSc6Hgx
IV/7FIrn+QMq/MgNJp1rlDpynISXuj2vp6MKIszfzxBNOU1u/K7nsl0vZ5l0AAzr
nGfe3k/a46SdxkZypUKWkUnaBxF5yBl0UGc/kQgoGz/yAONeGXW7Nel1Q6DVLwL9
b5ZtihUIqXBLZw==
-----END CERTIFICATE-----
Generated at Sun Nov 2 16:52:53 2025 by rpki-client