Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: WhAZOL9gMcxlUYrZN0zSo33G6gBWz40pmps2zL4sTcM=
Subject key identifier: C6:80:FB:22:49:02:D5:73:2A:EA:09:71:FC:79:16:E0:FD:73:CB:1F
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019A70A521C924ED3F7C64F5A06A5E2E0BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 064A
Signing time: Tue 11 Nov 2025 02:01:01 +0000
Manifest this update: Tue 11 Nov 2025 02:01:01 +0000
Manifest next update: Wed 12 Nov 2025 02:01:01 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: hVvuWAsBcQ/eZ+QOwfvu5qrrLf45z6JDNT49ZWLsX5E=)
2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:21:c9:24:ed:3f:7c:64:f5:a0:6a:5e:2e:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Nov 11 02:01:01 2025 GMT
Not After : Nov 12 02:01:01 2025 GMT
Subject: CN=c680fb224902d5732aea0971fc7916e0fd73cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:19:17:3d:f1:f6:fc:9e:bb:0b:48:69:d0:
9e:dc:af:7e:1b:91:5a:36:cb:e3:2a:4b:cf:0e:d5:
a3:13:14:a1:c7:13:75:64:c6:5e:2a:e8:02:1a:16:
82:c6:d9:d3:c7:05:69:9c:d4:fb:bf:c8:4d:ef:60:
aa:eb:2b:b1:b9:7e:c1:a8:70:37:28:a0:dc:2c:97:
6f:78:9a:18:7b:d2:e8:41:7a:35:3d:11:cd:21:6b:
ee:cd:14:2a:1c:b9:f9:d8:f1:9e:c3:d4:55:ba:7f:
58:e2:52:ba:8a:7a:8e:0f:58:8c:25:8c:4b:b8:0e:
d2:18:2b:00:96:db:55:de:ca:90:aa:1c:be:58:f5:
cb:44:fe:4a:b3:cb:6e:b1:b1:37:3a:11:68:63:ad:
f4:f6:a1:23:6a:60:a6:e1:05:30:23:f5:0a:f9:9e:
64:8e:df:10:56:0e:83:54:c3:10:b2:de:3b:93:fe:
f3:05:6c:d4:55:9e:38:99:87:b7:9a:29:40:33:c6:
a0:2f:14:a3:d6:03:9a:17:68:e1:23:aa:83:71:91:
fe:34:19:35:d4:36:89:55:7b:e1:5c:ee:1c:d6:60:
a7:29:f1:d5:90:98:7f:75:de:0d:6f:6c:c4:32:6f:
8e:45:c4:4f:f6:c8:50:96:ff:e5:2b:c5:a2:1f:b5:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:FB:22:49:02:D5:73:2A:EA:09:71:FC:79:16:E0:FD:73:CB:1F
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:8b:0b:b3:f6:98:79:f4:27:dd:70:49:00:53:5b:b9:a0:
0f:a4:97:e4:bc:92:9f:e2:3f:54:27:a8:b6:43:45:b3:76:a7:
41:4b:79:1d:8b:bc:32:12:55:45:55:97:ed:5c:92:50:17:a2:
2a:28:ca:23:08:f4:42:98:2d:f5:17:16:78:68:19:c5:01:85:
60:42:51:4f:0c:62:99:18:a0:80:a9:35:5a:5d:33:b2:f5:06:
40:49:13:76:35:34:2f:eb:09:fc:91:fd:7a:9f:01:06:d2:f1:
05:86:c7:cc:db:11:94:c7:51:24:d6:20:11:7b:a0:82:91:cc:
5e:11:da:35:3d:68:3e:e9:34:3c:81:fc:d1:ec:17:45:91:72:
09:01:dc:00:cc:36:c2:fb:57:93:68:9b:ca:3f:18:bd:4e:2a:
d4:8b:00:ed:2d:83:36:02:d7:f6:a6:a2:28:56:af:2b:af:24:
ea:9a:fe:8f:69:b0:bd:e3:c5:68:e8:be:5f:7b:54:d1:3a:37:
27:62:f4:f5:ea:5d:a9:fc:78:75:dd:c5:f7:ec:8f:be:b8:3f:
ca:c2:d0:32:ba:27:0e:96:76:07:29:78:3b:7d:59:31:26:74:
b4:fd:59:c0:2d:5a:b4:d7:5c:39:2b:f1:34:a9:26:e6:f4:0a:
2b:80:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:15 2025 by rpki-client