Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: By7CSlRq/lniHQtuvtCH9OpAC+MiHPc+CgejImTsQgs=
Subject key identifier: 7F:97:DF:8E:33:3E:1E:0B:9E:02:32:C0:9E:D4:35:35:1F:5A:E4:07
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 019A725C54A1A018CF7972733276DEA21834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 118E
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: BzdswHR1WgNR24WEu8Tbo0lRiHtP55DNRf+qG4Xu4x4=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:54:a1:a0:18:cf:79:72:73:32:76:de:a2:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=7f97df8e333e1e0b9e0232c09ed435351f5ae407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:c7:c1:4a:5e:cf:24:70:59:e3:a4:c1:65:
94:dd:43:67:97:30:11:de:19:dc:bd:6a:79:ce:57:
e2:40:a4:bf:17:83:ee:9e:f6:91:5d:d8:c4:8c:09:
b8:00:d8:52:ca:59:4f:a3:32:12:26:88:e9:7d:70:
f5:70:c4:8a:f8:36:07:08:e1:41:c2:29:07:a3:ce:
b0:30:4b:fb:bc:4c:c6:67:d0:b4:78:d9:0a:e5:a4:
0a:eb:f1:cf:5d:21:b6:63:1e:54:85:92:b9:e0:a3:
0b:6e:45:3d:05:65:e6:eb:56:e4:9a:dd:24:cb:ce:
e0:0f:ff:ed:44:43:56:4e:50:33:84:67:f5:ac:4e:
4d:e9:69:6f:2a:93:50:7b:28:14:26:49:d1:8d:10:
f3:5e:db:8f:bf:4f:ed:79:5a:c1:4c:64:8f:55:da:
a6:37:74:4d:60:1a:2e:53:66:c4:8d:a2:2f:27:4b:
ba:8a:fb:cf:89:d3:6b:71:bf:1b:4d:99:fc:80:5b:
5d:3d:7a:71:36:1d:a7:25:4d:56:dc:d1:35:7c:e6:
10:b3:1a:8d:e1:f7:78:c3:c9:22:6d:9c:1b:a0:af:
bb:71:1a:b4:8b:00:60:fc:f0:03:f7:50:3e:3f:06:
83:ec:ee:d0:40:fb:27:d0:c2:46:01:de:c3:27:30:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:97:DF:8E:33:3E:1E:0B:9E:02:32:C0:9E:D4:35:35:1F:5A:E4:07
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:18:0e:e9:45:a8:ce:c9:2e:d0:d7:cc:19:bb:85:a4:e8:e1:
c7:fc:d6:b5:09:38:f8:de:83:42:ef:df:16:c8:61:eb:a4:5e:
cb:35:a4:72:70:b9:72:8c:d8:8e:66:8d:af:39:e2:4c:e9:c3:
b2:e5:b1:21:8d:ae:f6:2a:27:3e:ce:df:4b:9a:2c:84:51:cd:
16:8e:4a:a4:74:8e:40:ce:98:c8:9d:1b:7c:01:a0:92:64:bd:
f6:fe:39:cf:f0:1d:1e:73:1a:85:8d:1c:de:88:ad:d9:22:ff:
15:3c:45:bc:4f:e9:98:2a:43:4d:62:ce:c9:de:f1:c2:8a:19:
ff:86:f7:34:e6:cb:5e:15:c9:b9:f1:da:19:38:1e:81:5c:35:
dd:9e:59:79:0d:67:83:d4:ba:56:6d:28:f2:51:0a:39:39:2f:
47:ea:45:88:0b:c7:25:30:d0:c4:bc:60:4b:06:e2:d9:21:64:
12:31:68:06:d8:f4:3c:9c:d1:df:a3:bb:ee:3b:5e:08:b2:3c:
c4:0e:78:11:b6:fc:a4:43:9e:dc:19:24:65:6b:cf:22:76:6f:
02:ac:37:85:e9:f1:ba:1c:1f:21:30:64:d0:cc:2d:94:1a:26:
8a:b2:83:9a:cc:56:5f:52:4f:0a:ff:a4:e3:cd:75:04:07:86:
79:69:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:28 2025 by rpki-client