Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: vrL0sk6aD/7wwr3mf8xqHAbw0VU8bPusQmPJHbYHNoA=
Subject key identifier: 46:B7:A8:A1:00:93:C9:A9:DF:80:42:3D:77:AB:F6:8C:F7:0C:A1:BF
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019A4F624C3A67922DEAA5BC80B99FD6E7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: wC8jPjfdqCsW04ONX27WPcK8RIdjBTd5a7QW5afMg0k=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4c:3a:67:92:2d:ea:a5:bc:80:b9:9f:d6:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=46b7a8a10093c9a9df80423d77abf68cf70ca1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:f7:29:bb:5f:01:58:2e:1e:09:97:5a:08:
8d:d7:a3:59:ec:39:c5:c9:a0:87:5b:a6:fc:0a:05:
ed:6e:f3:9e:55:70:36:ed:20:32:52:bf:08:9a:a4:
6b:50:70:09:b2:50:8e:98:7a:59:eb:8d:a8:34:03:
5d:5e:0e:b0:d4:f2:9d:f5:14:d1:68:66:dc:c3:ca:
7a:ad:f2:9e:38:61:ac:d5:9b:db:c9:00:d5:40:44:
2a:0b:ec:ee:ff:a9:fc:41:cd:a7:b0:cd:08:01:44:
a2:0d:28:6f:fc:aa:83:9d:b1:9a:10:fd:7b:a4:27:
16:31:eb:e5:21:72:16:c6:20:e5:f7:a7:f9:77:85:
4c:c6:a9:8a:1b:33:d8:50:3b:b7:36:33:46:3a:d6:
67:32:10:14:f0:99:55:c8:6d:9d:ab:cb:49:76:f9:
6d:b6:d4:e9:b6:d3:19:a7:7d:31:8b:ee:c6:b9:4e:
e6:91:02:91:21:83:d8:15:2e:c7:ad:fc:61:50:fa:
d7:8b:8a:ed:78:45:6a:7d:a5:1b:6b:98:d5:41:78:
cc:04:5f:c1:f8:e3:70:8a:5b:fd:64:22:32:7e:37:
c5:54:fa:67:93:fb:47:a9:0b:49:b6:d7:7c:4f:f6:
2c:46:7c:18:3d:22:4c:51:d1:ab:15:d3:1d:22:95:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:A8:A1:00:93:C9:A9:DF:80:42:3D:77:AB:F6:8C:F7:0C:A1:BF
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:e7:4c:72:ab:62:84:d4:3c:27:27:09:79:3e:eb:57:ff:
3a:d1:f8:3b:a7:11:29:6e:69:7d:39:f2:95:2b:94:fd:58:76:
1e:1b:5a:cd:96:c8:fe:03:df:d6:4d:ac:54:a5:33:cb:27:2b:
5b:82:2a:1f:39:fc:b3:7a:d3:f9:95:d1:52:f0:99:63:09:56:
84:d7:bc:05:d9:ed:e0:dd:20:2f:7a:3f:e0:87:4b:20:0f:22:
85:a1:84:b7:09:14:f3:fd:41:a2:76:21:75:f4:1f:67:52:ec:
f5:06:7d:45:64:ae:44:8d:5c:c8:cb:95:da:e5:52:b6:52:48:
53:8e:85:92:b2:18:0e:15:68:a9:7b:d8:7c:d0:b1:7e:a0:90:
42:17:22:1e:4d:74:f9:46:cd:53:64:f8:aa:4b:59:49:97:e5:
4f:39:1e:c5:4f:17:00:c3:39:07:69:3a:ed:54:ab:4b:7f:71:
5b:59:bb:52:24:66:4d:81:56:3c:c8:22:aa:97:bb:b3:b5:9b:
06:60:49:8d:af:c0:5a:43:60:f4:2c:5f:58:80:fc:3a:83:73:
7b:62:59:44:b3:dc:02:f9:45:79:28:0f:13:13:b9:87:9c:76:
be:45:0e:f8:1a:e9:99:00:01:2c:af:48:39:a5:13:48:22:ed:
6e:7f:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:20:49 2025 by rpki-client