Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: Hj0mnxSAeu6pFL2t4DzcCYg/OEKnE4obFFCmfudpwg8=
Subject key identifier: 06:FB:49:1D:04:58:17:22:C3:39:73:BE:69:1D:B4:D1:35:93:87:5F
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019963C7795B9D3798E4121C81F40E0E61B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1696
Signing time: Fri 19 Sep 2025 21:00:40 +0000
Manifest this update: Fri 19 Sep 2025 21:00:40 +0000
Manifest next update: Sat 20 Sep 2025 21:00:40 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: 2QDZIATirMqp+vErinFnuj5+8NPiiR3VewtS5ghmZaY=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:c7:79:5b:9d:37:98:e4:12:1c:81:f4:0e:0e:61:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Sep 19 21:00:40 2025 GMT
Not After : Sep 20 21:00:40 2025 GMT
Subject: CN=06fb491d04581722c33973be691db4d13593875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:62:cf:e1:6b:5b:32:21:f1:5c:7c:6a:32:
42:91:72:b3:36:11:e9:70:98:ec:7f:0b:d4:7b:84:
dc:ae:86:68:f7:74:0f:9e:47:19:0b:f5:a3:d7:f0:
61:c6:f1:28:a9:10:72:81:31:d7:6a:02:4f:e9:cf:
55:95:bb:a4:d2:c6:99:90:b1:1c:02:8b:27:b6:3b:
46:97:bc:e3:ae:5b:62:a1:8b:50:6b:ef:b6:57:cb:
84:77:f3:f2:af:20:46:ad:63:aa:52:ec:48:12:e9:
73:04:da:09:ac:f8:52:bb:bc:86:7d:89:9d:c7:d4:
86:79:88:33:56:af:1a:60:36:a7:e9:ab:ba:0e:a6:
22:54:3c:57:1e:cd:01:c3:2b:f0:44:51:8b:23:21:
f4:eb:d8:94:30:09:da:03:f8:9b:c8:2e:1b:6b:b3:
c4:f4:d0:18:f8:ba:61:b7:54:a6:08:63:15:9b:a0:
3a:a3:92:d0:20:dd:c8:18:35:c7:38:20:3d:d2:08:
e0:4c:c1:5b:34:7f:37:1f:ed:a3:e7:81:ee:8f:5c:
3e:0c:96:e6:8c:b4:b8:34:c7:d7:03:4b:09:64:de:
6d:2c:2b:1a:e5:ac:51:2b:ac:5f:58:19:dc:19:b0:
d5:4b:fb:20:92:a9:e2:34:f4:25:7f:e5:85:c1:04:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:49:1D:04:58:17:22:C3:39:73:BE:69:1D:B4:D1:35:93:87:5F
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c0:e3:e6:d7:17:96:00:c7:2e:1f:01:f5:48:c7:45:04:78:
b9:32:ef:c4:a9:96:6d:32:60:c9:67:5a:0a:04:35:1d:c0:28:
a3:64:89:69:98:10:bc:f2:f0:ec:3f:90:08:be:09:12:7b:18:
93:78:69:dd:56:8b:d3:0b:e8:bb:89:b9:91:f0:ce:3d:2b:93:
2a:9c:08:cc:9f:c2:d6:59:9b:c0:5b:6b:5f:f5:93:12:33:ab:
c5:36:e5:7e:ad:07:d4:0f:04:50:73:0f:90:22:e3:b9:9c:ec:
ad:c9:2e:13:a6:59:1a:6e:8a:50:6d:19:31:c0:e0:ab:8c:13:
f6:c6:71:4f:38:0a:90:2a:be:07:fe:bf:f9:ff:0f:6a:53:5a:
13:4a:f6:17:f4:87:66:3e:7e:a8:30:15:12:42:2f:d9:4e:f4:
4e:a5:96:06:c1:2d:97:47:4c:3e:e1:24:d1:60:ac:75:46:65:
50:3f:1f:bf:87:ef:5c:38:9e:c0:cc:56:38:b7:86:e1:02:5d:
f0:bf:3f:e9:16:d7:41:c7:31:69:0b:04:a9:f5:8f:12:27:d6:
75:07:17:c4:45:fe:3e:2d:28:0b:b8:6b:49:e1:48:d6:e7:45:
64:a1:ca:4a:96:5d:8c:e3:60:ee:36:a1:d8:ea:1b:0d:b4:fd:
4e:43:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:38:12 2025 by rpki-client