Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: asIy3ZpmQIHTF+2CT2KIvtyRU6aqvXhSt4GlLvt2dHk=
Subject key identifier: E2:D2:B2:78:40:48:27:48:A3:34:1F:63:7B:5D:37:3F:FB:FE:92:DC
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019A228A8804FF92D2EFB05226690D0C8938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0C6B
Signing time: Sun 26 Oct 2025 22:01:35 +0000
Manifest this update: Sun 26 Oct 2025 22:01:35 +0000
Manifest next update: Mon 27 Oct 2025 22:01:35 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: loYggsvH/27paSiR6SB8ML9SzyFiaKDegbHiTew1vPw=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:88:04:ff:92:d2:ef:b0:52:26:69:0d:0c:89:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Oct 26 22:01:35 2025 GMT
Not After : Oct 27 22:01:35 2025 GMT
Subject: CN=e2d2b27840482748a3341f637b5d373ffbfe92dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:3f:9d:6b:59:4d:29:99:5d:03:c0:99:21:
84:dc:1e:07:a6:35:f5:0b:a0:8a:5a:b1:c1:c4:fb:
ad:e0:e6:7f:3b:b5:cd:77:80:1d:fa:01:cd:ea:79:
e1:0f:ca:c2:0c:f9:26:ef:38:5d:92:48:ba:e8:69:
3f:e7:f6:e2:9e:09:17:99:39:8a:ce:f0:ca:3e:9c:
8c:72:61:c8:0f:8b:9a:1e:62:f2:61:eb:8a:b7:7b:
51:53:6e:94:54:80:d4:f2:24:4f:44:fc:bd:71:d7:
60:af:5b:d7:00:ea:21:be:10:2f:bf:a3:f2:da:e1:
47:1c:17:da:62:4b:40:b3:d6:cb:d8:03:ae:11:52:
f7:14:2e:9c:ce:b0:9f:ef:eb:c3:09:d0:33:1c:78:
80:00:93:8a:cc:c6:97:89:97:ef:31:33:31:6f:ab:
e1:bf:a9:6b:a2:7e:da:ee:53:4e:c4:55:2d:91:5a:
af:17:bf:98:13:53:56:b1:a2:f7:b6:3a:28:b5:56:
da:8c:e4:bb:84:08:e5:26:b6:f9:3d:14:05:41:f6:
de:04:e1:8f:33:24:f7:2a:3c:6d:4c:0b:ed:3b:4c:
da:8a:78:21:6c:38:ac:df:12:22:a4:51:62:47:7c:
2b:2a:8a:bb:99:ac:07:58:8e:0c:95:fb:ef:16:42:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:B2:78:40:48:27:48:A3:34:1F:63:7B:5D:37:3F:FB:FE:92:DC
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5f:f9:06:32:88:7c:54:78:88:35:a9:57:6d:d7:d7:80:c2:
fd:02:ff:6c:66:80:16:c1:4a:a5:ff:40:27:d7:31:84:17:a9:
1a:4a:7c:41:57:4d:ec:5d:ec:98:6d:75:ce:5a:5f:cb:de:7c:
48:27:7b:d6:8c:3f:80:0b:b3:de:24:07:cf:b9:59:77:73:46:
43:c5:a4:29:bd:21:cd:e1:25:b3:fa:e8:e3:d1:dd:b3:82:17:
64:1d:05:3f:5f:b7:9e:cb:65:98:d0:5d:e5:13:98:99:5d:38:
a2:46:14:2e:f0:c3:ae:88:93:89:81:2c:7b:af:5b:6f:0c:2a:
56:34:b6:a4:8f:e7:53:5b:e7:0d:96:b9:2e:bb:6e:54:d9:f7:
f3:b3:20:0c:62:b5:ee:99:4d:2e:54:f1:e2:f0:19:b1:d9:ce:
f7:1d:fe:ac:d0:a0:7e:9c:eb:2f:90:e1:28:7f:18:d7:12:36:
40:a5:7d:ec:5a:dc:df:3c:6b:9e:43:86:6d:f2:94:88:8d:20:
a0:62:bd:41:c3:bc:5c:85:e0:be:8d:2d:92:70:e0:7e:86:cb:
25:18:fa:ec:54:28:23:0a:07:55:cc:18:1e:99:51:6f:78:5a:
5c:d2:71:db:20:24:fd:cf:cf:22:1e:62:13:17:05:62:4f:e1:
5e:78:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:39 2025 by rpki-client