Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: KdNORiUKHqskwBrd1VxJzUi4j/jrJTi8D4f5Z4aEuDQ=
Subject key identifier: 90:6C:E8:C3:05:FE:CD:7A:5A:53:5D:40:A2:D6:C9:82:AC:94:1A:A6
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019A2F69C72456CA41FA355856DE14BBD463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 10:00:52 +0000
Manifest this update: Wed 29 Oct 2025 10:00:52 +0000
Manifest next update: Thu 30 Oct 2025 10:00:52 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: EVVEpkyoTXOyVoH0W7jht0AfSRoNo4Vdo96AapSWVuE=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:c7:24:56:ca:41:fa:35:58:56:de:14:bb:d4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Oct 29 10:00:52 2025 GMT
Not After : Oct 30 10:00:52 2025 GMT
Subject: CN=906ce8c305fecd7a5a535d40a2d6c982ac941aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:d8:c1:ca:f8:3d:ad:32:6a:7c:d9:dd:aa:
15:dc:ad:12:70:9f:18:50:eb:59:b0:15:eb:14:09:
0f:6d:b6:d3:bf:da:47:17:27:ee:4c:16:84:b7:04:
90:d3:9e:98:e0:46:ad:66:be:8e:9f:b9:ed:db:24:
78:36:52:17:c9:eb:c4:ff:6c:4b:93:f7:ec:40:63:
4e:4e:bc:ae:13:51:bd:e9:e4:c9:8e:ec:d2:c0:c2:
2d:e0:dd:bc:fe:a0:9f:0a:5f:12:93:a9:92:2d:89:
f5:0e:37:61:3d:7d:a5:a9:d1:93:0c:fa:87:23:83:
45:26:11:22:b4:68:fb:47:60:7a:d5:f6:7e:29:bb:
00:de:72:29:f3:d7:3f:24:09:bb:61:e4:69:82:be:
1e:3f:39:ed:c0:63:cc:1e:aa:5f:d8:09:5b:70:e0:
d6:04:fa:39:a6:e2:46:eb:2c:46:ec:4a:bf:31:1c:
8d:bb:bc:02:e8:e4:b6:bc:59:df:ee:46:51:3b:bb:
f2:0f:93:dd:b4:5e:95:b1:81:4a:45:41:66:72:1c:
ba:5c:0c:df:8d:af:7d:4b:94:5b:ea:6e:2f:bf:d3:
ef:b9:f9:d5:14:08:22:c1:be:98:e9:47:34:31:a7:
8f:b1:bf:a4:10:03:39:ba:f2:86:8f:37:b4:22:a8:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:E8:C3:05:FE:CD:7A:5A:53:5D:40:A2:D6:C9:82:AC:94:1A:A6
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:ab:4e:ab:57:4f:b5:96:50:01:c7:d9:84:99:6b:19:0f:
5f:76:a9:86:35:97:1e:81:22:b7:ab:84:34:e5:57:21:d1:0d:
2f:c2:e8:19:04:1b:9d:5b:56:d7:f8:0d:52:e8:bd:ec:f1:e2:
61:99:98:ff:cd:ff:de:3f:57:ca:4c:c3:4a:1f:f8:cf:9c:55:
9c:4d:66:c3:da:ca:5c:0a:00:84:fe:44:2a:4f:f9:de:d0:66:
75:c3:00:77:18:30:2c:38:c4:74:b3:40:c0:8e:4b:e9:df:3c:
f8:e8:57:e2:8f:a0:f9:39:17:fd:3f:15:1d:6b:c8:a5:da:2b:
ee:d7:49:19:77:69:2d:91:e3:21:e7:68:42:1c:e2:35:e7:f2:
a2:5e:65:ac:c6:90:fc:f4:c2:63:c3:d0:3f:2d:29:94:02:f0:
17:e4:33:82:ed:ce:92:64:3e:fa:68:d4:bd:87:ea:e2:be:c2:
be:f8:73:79:34:4c:5b:09:15:26:25:71:2d:9f:cf:c6:ee:a2:
d9:41:e3:e4:c2:a3:92:2f:50:4d:1d:76:09:f8:7c:50:c4:59:
ca:03:30:43:08:1d:7c:27:fa:e3:f5:ee:3d:17:fb:67:02:b5:
07:6c:4e:bb:05:37:66:44:17:0f:0d:1d:3d:ca:9e:ee:2c:80:
f3:22:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:47:42 2025 by rpki-client