Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: VuHmjvuukI6KblCgY3gYp29mzD9LJdnf1beWMs2WLa4=
Subject key identifier: 4E:89:A4:F6:A3:1C:4A:10:96:F3:8E:81:E6:7F:7E:5A:D0:E7:74:52
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019A2EFB961282B2199F9EF286957FB51EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1186
Signing time: Wed 29 Oct 2025 08:00:31 +0000
Manifest this update: Wed 29 Oct 2025 08:00:31 +0000
Manifest next update: Thu 30 Oct 2025 08:00:31 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: aXXFjbNbdS4Sw4EQzr/GtN72pCJ5iPz0FVu+skMyhFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:96:12:82:b2:19:9f:9e:f2:86:95:7f:b5:1e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Oct 29 08:00:31 2025 GMT
Not After : Oct 30 08:00:31 2025 GMT
Subject: CN=4e89a4f6a31c4a1096f38e81e67f7e5ad0e77452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:db:de:de:52:f3:9e:a1:ea:eb:3f:6f:8f:
0f:22:30:f3:13:4f:c4:1d:8e:87:4c:e0:42:74:2e:
f9:83:bc:71:89:2d:75:de:ed:66:09:87:78:ef:3a:
13:cc:9d:2c:cf:82:ce:c5:52:6b:12:66:5d:09:e4:
02:79:28:9c:c0:0b:d6:ec:6c:18:33:ac:2c:46:10:
91:96:20:90:c5:d8:37:c0:e3:ba:f8:cc:35:31:13:
50:72:d7:58:e2:40:62:32:77:6f:37:fb:55:10:93:
63:03:7e:7d:fc:1d:0d:8a:64:c1:46:c1:f8:b3:9b:
13:c8:5e:1f:fe:38:e0:8d:d2:0f:7c:04:29:28:f3:
4f:60:37:ef:4f:9f:2d:27:05:7f:ec:1f:b6:72:df:
aa:de:9a:4f:08:60:ff:31:df:b1:c3:83:b5:61:24:
7e:e0:02:dd:f2:39:16:4f:6a:cb:9e:32:79:ae:0a:
73:96:64:76:21:2e:c4:82:80:f8:89:bf:cc:69:ae:
ff:fd:bf:d0:eb:0b:ae:78:fc:e9:b3:98:77:2e:14:
65:3a:48:33:16:68:3c:ea:d0:15:a0:2e:b8:0b:17:
a6:d9:6d:b4:15:c9:10:64:f9:ff:79:f2:ce:d1:94:
00:a3:f8:fe:94:45:c3:98:7c:eb:a4:b8:c4:fc:b6:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:A4:F6:A3:1C:4A:10:96:F3:8E:81:E6:7F:7E:5A:D0:E7:74:52
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c7:35:f5:c8:3b:f4:88:e2:67:3b:74:04:2f:47:ce:b8:83:
3e:d0:48:70:d4:b7:21:21:51:13:63:70:02:d4:72:80:17:34:
74:2f:46:ea:da:15:65:04:be:90:3e:f6:2d:4f:9f:17:57:e0:
b9:3a:95:2a:43:b9:ea:66:08:25:d9:28:d1:ba:94:d2:e1:66:
71:e9:fe:35:66:bc:f1:a0:66:77:62:a8:5b:cf:1c:86:8f:b6:
34:a7:de:ff:4c:bd:2c:90:e7:82:69:31:7e:92:67:da:2d:a9:
14:40:26:d8:46:70:29:7f:b7:04:d0:2e:ea:c6:aa:9a:50:d1:
b8:e8:80:0f:59:95:6b:ea:0e:dc:03:77:63:5e:76:ad:4d:a7:
1a:9e:b2:34:a0:1c:3e:68:b6:6f:d8:5d:aa:e2:7e:17:fb:aa:
49:71:f2:c5:44:82:cc:f0:79:65:5b:44:7f:57:5d:6c:ab:65:
4b:ea:a2:cd:78:3b:93:93:c5:e0:42:0e:1a:2d:dc:70:82:77:
15:79:92:a1:b7:6a:38:ba:c1:13:95:4c:ee:8d:92:d5:8c:54:
74:d6:5b:ec:51:93:26:26:6c:1e:b3:34:a5:b2:b6:84:0d:84:
3a:c2:e0:eb:63:1f:90:89:75:38:e4:07:67:45:b0:9f:4e:ee:
7f:27:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:53:54 2025 by rpki-client