Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: SOtGKUJ92e3XgyZ5bj2NWbnEt3fZ4/4hlmiYXi6eMwg=
Subject key identifier: 86:FC:79:33:56:E1:FC:3B:50:73:3C:3A:74:10:2A:68:49:85:8A:40
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 019A3E00C5D70E9EFB503BE58F35B60E8F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 04C7
Signing time: Sat 01 Nov 2025 06:00:29 +0000
Manifest this update: Sat 01 Nov 2025 06:00:29 +0000
Manifest next update: Sun 02 Nov 2025 06:00:29 +0000
Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: it3ayOdYL+64wt3s5gIFGiL4ayz27uWu0a1QW1CdKHY=)
2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:00:c5:d7:0e:9e:fb:50:3b:e5:8f:35:b6:0e:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Nov 1 06:00:29 2025 GMT
Not After : Nov 2 06:00:29 2025 GMT
Subject: CN=86fc793356e1fc3b50733c3a74102a6849858a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:ae:3b:d6:38:43:58:9b:41:be:3f:4b:30:
00:12:3e:76:ec:9b:f2:8c:e6:f3:f7:9d:02:1d:13:
1c:9c:d3:a2:8d:e0:59:10:a5:fd:b5:7b:b7:55:ab:
78:6b:b0:94:d4:fa:7d:21:1f:59:71:f3:9a:b7:7a:
41:b2:9e:bc:05:75:fd:c2:0d:cf:2e:40:7f:1f:28:
2a:65:a7:84:ce:7e:05:de:25:8c:83:f4:99:8a:62:
02:39:61:f3:81:a4:84:9f:90:39:88:4d:49:3f:85:
44:b3:41:a6:87:36:9e:ca:c0:6d:f2:72:cf:2d:dc:
19:cc:a8:07:3d:ba:79:e4:7f:2f:9d:14:75:c5:d7:
50:0e:95:aa:71:04:89:00:d0:08:95:b9:20:3a:78:
38:ed:e8:74:26:15:24:b2:7c:f3:e9:dd:4d:ae:d8:
52:c7:6a:51:96:d3:46:51:01:31:60:40:33:52:c5:
f3:2c:2f:5b:aa:33:e9:9d:e6:46:bd:e1:88:38:cb:
65:20:2f:d0:a4:fe:b5:0e:a8:83:80:56:37:a7:db:
08:e3:92:f9:17:79:4d:6e:81:7a:ec:2d:2d:39:76:
60:dd:82:f8:79:99:15:db:3f:a4:59:73:a9:a8:3e:
39:e5:4c:fa:1b:a0:9d:56:88:b5:f0:9c:a0:f2:f8:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:79:33:56:E1:FC:3B:50:73:3C:3A:74:10:2A:68:49:85:8A:40
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:a7:96:97:a1:be:51:44:de:f8:8c:49:c6:87:ec:83:a6:
72:71:ac:4c:19:68:5d:22:0f:b5:a2:79:ed:c5:15:00:55:a9:
c4:69:b3:7b:e9:40:31:71:42:ab:31:a6:67:84:88:32:e9:4d:
3c:fe:16:56:fd:54:34:48:8b:5e:fd:f1:5c:09:f9:d6:f8:ac:
b2:72:2e:9d:ff:c3:10:25:66:85:02:ed:b4:f2:f3:4b:26:2b:
90:1f:87:b5:1f:53:b9:1c:16:01:ec:bc:ad:d0:27:68:83:5b:
1a:bd:cb:68:03:d1:bb:0f:9d:b4:8f:08:48:57:e1:b0:85:99:
b0:1e:59:e5:bb:a2:0b:47:b3:08:dc:84:73:41:62:b5:b2:05:
1b:e1:07:8a:85:ac:b1:cb:8d:79:08:d6:39:cb:cd:80:34:19:
62:2e:42:c2:d1:6d:84:1a:ee:aa:8d:96:d0:75:6e:ff:59:90:
c3:cc:48:64:4b:76:be:54:8a:dd:ac:a5:44:a6:c8:46:bf:18:
18:5d:7b:83:63:2f:fe:82:c7:b3:03:4e:a4:fe:3a:39:bd:2b:
cd:68:89:96:b6:7c:da:69:f0:e1:b1:af:3e:05:fb:9d:a9:a1:
3d:93:7c:5c:df:ad:6f:fd:40:82:a9:b1:1f:a6:ab:6f:ee:61:
33:3f:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:28:11 2025 by rpki-client