Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: 3Ll4ZgKMuqvmkJ7a0NqrYxrzFpG3CkdZFzz8J75HI7o=
Subject key identifier: 29:B8:6F:A9:B8:50:77:E0:0A:87:DC:11:A9:E6:B2:A5:BD:19:C1:74
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019A0B5D9BF8C27FA19036B50FBA4BDB1702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 16E8
Signing time: Wed 22 Oct 2025 10:01:15 +0000
Manifest this update: Wed 22 Oct 2025 10:01:15 +0000
Manifest next update: Thu 23 Oct 2025 10:01:15 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: w6zXeK/D/AhyHmtTN7/5s6HshZIT7Tkyc/n0t43fv6A=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:9b:f8:c2:7f:a1:90:36:b5:0f:ba:4b:db:17:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Oct 22 10:01:15 2025 GMT
Not After : Oct 23 10:01:15 2025 GMT
Subject: CN=29b86fa9b85077e00a87dc11a9e6b2a5bd19c174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:92:d6:0c:e6:8a:91:cd:3e:97:72:17:72:
eb:7b:ed:70:3e:4f:cc:38:2c:5d:d7:3f:69:16:5c:
2d:c8:50:a0:ff:85:55:40:3b:39:4a:39:dd:04:0d:
27:50:c1:ba:0b:62:db:79:18:b2:21:e6:06:e1:94:
92:10:96:25:38:fa:1a:fb:0b:0c:8a:00:71:e4:ef:
ad:9b:9d:d9:f9:7e:8b:8d:56:33:13:f0:9f:a9:5e:
ef:5b:46:bc:27:d0:f6:3a:95:cd:a3:b4:04:14:a9:
74:46:1f:c5:e8:37:b3:2d:de:69:80:cf:65:b1:fe:
f1:02:b1:ec:18:83:b2:a6:11:f8:14:1b:74:24:92:
2a:16:16:be:3b:c0:b5:a0:a1:8f:a8:3c:64:45:37:
a6:df:e8:b3:36:ed:c0:6b:61:25:5a:a3:15:9d:6e:
3d:30:29:4e:71:c3:af:d9:e6:45:bf:36:2f:60:b5:
e0:4d:bb:05:01:0b:16:93:72:6c:d1:10:00:60:07:
1d:32:f7:47:f2:e0:be:ef:6a:ed:25:70:9e:51:6a:
4c:06:fb:c0:76:d0:eb:b1:da:eb:db:bf:c9:7d:4c:
d2:8f:52:8b:00:c8:60:bf:f1:61:c7:b1:2e:37:72:
4a:3b:10:19:21:e6:61:9b:22:ed:d1:a7:d5:ec:65:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:6F:A9:B8:50:77:E0:0A:87:DC:11:A9:E6:B2:A5:BD:19:C1:74
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1b:ca:b6:27:cb:a5:e0:50:b9:9c:f3:09:f8:7a:b7:bf:9f:
16:dd:55:b9:86:a1:85:33:54:11:0f:86:7d:d8:f7:ba:be:42:
f9:34:6f:e3:34:f4:8e:5b:6c:28:3f:a4:b2:8e:12:af:28:7e:
46:73:fc:28:5a:ef:b9:4a:99:76:b1:da:cd:eb:71:a0:c9:d0:
c2:a0:a1:d0:64:02:4a:eb:96:27:f9:89:ce:ed:fa:d4:cf:f3:
43:9e:75:23:f3:38:80:f1:02:9e:ba:c9:d0:18:12:34:c9:c4:
a7:8c:dd:d8:4f:b3:e2:e2:9f:c0:71:16:84:95:ac:4a:8a:c3:
f3:9c:2a:30:49:c7:af:ee:9d:40:5a:c6:a5:f7:b8:51:dd:64:
8d:f9:ca:0a:08:b7:4b:ed:4e:68:61:11:3d:d7:38:02:6d:f5:
48:c4:ee:e1:25:80:a6:7d:06:11:87:b3:05:06:14:51:19:03:
2b:00:c8:d0:e1:ee:1d:3d:f0:36:45:a6:2e:8a:fa:36:08:65:
fc:c7:96:55:65:74:2a:b4:c9:b6:01:2a:7b:65:2a:2a:19:3a:
a4:e6:a1:4d:8d:85:a7:c0:87:a5:fb:74:28:bf:62:30:a2:c1:
fd:98:70:a2:c6:e7:6b:78:29:a1:64:8e:5b:c8:45:0f:70:74:
4c:0b:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:07 2025 by rpki-client