Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: p+9Fmj+pz4qo41n5OwrgRT7C5e4nwLVykrQgapdvli0=
Subject key identifier: EC:6A:FF:7C:92:E1:03:1B:7D:92:4E:91:50:43:97:E0:BA:AD:A1:19
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019A72939EEAF9CEE35449AE1B434103F75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0940
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: nbm5zuvVE+ucXYgaLvX6cldcjfqNUKd8Nty301jBASg=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9e:ea:f9:ce:e3:54:49:ae:1b:43:41:03:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=ec6aff7c92e1031b7d924e91504397e0baada119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:1c:0e:65:5b:1a:3c:60:ca:1c:a4:69:d6:
79:3f:ca:4b:d4:5c:65:d5:be:45:01:98:68:f4:4f:
b3:fe:c5:50:59:7a:1f:b0:1f:32:9c:18:f2:af:27:
77:5f:81:9f:a9:cf:66:fa:f5:b1:cc:9a:cb:f6:96:
0f:09:f8:a4:9a:ba:49:3a:de:1c:76:9a:27:ed:de:
ac:a8:d5:68:e9:26:7b:c8:6f:e5:97:f9:3c:d6:b1:
d2:81:98:5e:2f:48:67:55:76:68:c9:0b:df:24:ca:
f2:b3:e6:c6:7d:db:e6:d6:86:06:e6:5d:96:d9:56:
41:4f:35:96:c6:62:fc:c6:21:83:56:b7:65:1f:24:
a1:8b:b2:ef:31:85:94:7d:03:d9:b9:dd:b8:34:08:
a0:32:1d:06:de:3e:22:69:d6:0f:a4:3d:ae:9f:fc:
7e:ae:11:21:38:3f:33:da:95:03:15:1c:ea:82:df:
b7:68:50:8a:c6:db:95:cb:7b:5b:ee:30:1f:ed:3a:
0f:b0:8a:ae:71:20:f7:32:e6:17:44:66:84:0d:60:
d5:ec:07:a2:cb:45:9e:a7:dc:b3:47:5e:e3:6d:e9:
1d:7d:25:96:f1:72:e3:24:0e:8b:c2:ce:cd:94:03:
d4:08:4f:bc:95:9c:c8:62:07:64:f5:00:6a:1b:5e:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:FF:7C:92:E1:03:1B:7D:92:4E:91:50:43:97:E0:BA:AD:A1:19
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dd:65:b2:3d:50:c0:f1:a1:be:7d:87:77:aa:89:51:3e:04:
be:ff:39:6f:96:65:4b:be:a1:f1:d9:8f:1f:28:e5:5e:50:7f:
98:55:06:6e:2e:e6:f6:1b:e1:42:48:15:ba:fc:94:8c:5f:ce:
05:3e:9f:62:4d:44:ee:11:af:51:44:d7:24:93:74:a9:43:59:
cc:1a:04:92:1e:5b:1a:6d:81:8a:32:a8:dd:06:a5:55:38:76:
8a:dd:48:ae:b3:29:f6:6b:86:ac:6d:3f:16:8b:d1:9e:17:48:
8a:f0:1a:22:e4:4d:a2:a0:0e:c0:70:91:78:d2:b6:20:64:d5:
b8:d9:bc:61:61:0b:a8:10:2d:9b:71:68:6d:9c:63:b9:9c:1b:
38:38:7c:ec:e7:29:ca:74:5f:22:9e:5b:0e:ca:44:9d:2b:84:
ff:b9:06:cd:fd:32:b0:b1:35:62:09:8f:3e:68:cd:48:40:62:
cc:60:00:12:c7:00:ee:da:c3:af:9f:4d:19:a5:c8:02:9d:d7:
0e:72:5c:4c:0f:d8:9b:7a:c7:7a:3b:97:29:13:a3:03:24:61:
88:fc:6a:6d:29:24:ed:80:a1:2b:6d:5d:62:3f:99:c3:5a:fe:
e5:5f:a0:db:dc:10:98:a3:d0:94:73:6f:9b:c0:a8:9f:81:f7:
d5:33:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:26 2025 by rpki-client