Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: gFQE4/oCgkuMSptJBwPXQDwviXNqy4anHysfZiGeb2U=
Subject key identifier: 81:36:A7:DD:44:C5:34:ED:24:DD:62:C1:9B:A2:47:3A:DD:D0:D1:55
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019A24E6180C463F7416726E0FA2BB27544E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0855
Signing time: Mon 27 Oct 2025 09:00:50 +0000
Manifest this update: Mon 27 Oct 2025 09:00:50 +0000
Manifest next update: Tue 28 Oct 2025 09:00:50 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: Hz47gNE6Al/4jkQ6wptNrpaBLORUqwr631ig9QoihwE=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:18:0c:46:3f:74:16:72:6e:0f:a2:bb:27:54:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Oct 27 09:00:50 2025 GMT
Not After : Oct 28 09:00:50 2025 GMT
Subject: CN=8136a7dd44c534ed24dd62c19ba2473addd0d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:8a:70:3b:9e:53:20:fd:ef:ce:ca:e7:c4:
b0:61:7e:ad:4d:cc:24:02:b8:f3:65:7a:57:23:c3:
16:e7:fa:2f:27:cb:e7:4b:7b:31:12:a2:ac:c4:df:
73:ed:01:7b:a6:81:29:76:61:81:0d:10:81:e1:94:
6f:1a:be:e0:0c:b3:1a:84:55:21:df:cd:76:43:53:
19:40:5c:51:14:ac:83:2c:9f:ed:16:a4:1c:52:0e:
d0:aa:15:fe:5c:7a:a6:13:23:b5:28:b9:dc:81:04:
91:f2:56:de:3e:05:98:d6:6f:a9:c5:15:da:25:85:
7c:8b:ab:9b:c9:50:b3:a2:85:6d:22:a0:92:4a:73:
2b:ec:48:77:84:f7:a7:a6:3d:52:0c:01:3e:8c:ce:
e8:16:d9:6a:f8:8b:06:9d:be:0c:6d:50:be:bb:a8:
80:ba:22:f0:38:df:14:fa:23:21:5f:4f:93:15:6e:
49:ea:c4:17:30:d7:b6:aa:2e:e7:9d:b0:6d:cb:f9:
f1:6d:cf:98:c6:69:0b:63:31:fb:74:25:45:67:bf:
be:79:54:7b:66:92:a7:57:9f:cc:b3:ca:9d:11:ea:
8f:0d:63:01:a6:62:5a:89:b7:5e:ed:ff:fd:1f:d0:
ed:3c:c2:7f:98:1f:46:1f:67:ca:aa:64:3a:38:5a:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:A7:DD:44:C5:34:ED:24:DD:62:C1:9B:A2:47:3A:DD:D0:D1:55
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:30:e6:5d:1b:66:49:0d:10:32:dd:b9:2a:18:ab:6f:0b:c2:
8f:12:6d:da:f0:4c:93:30:ad:d5:97:ea:39:a7:90:ab:57:8f:
79:c2:25:f9:3b:56:35:0a:6f:ec:9a:24:cc:54:18:e5:5c:d3:
25:e1:83:51:6a:62:73:80:62:a5:d6:b6:6b:0d:4a:18:99:6b:
73:cd:0d:5f:e5:ba:ad:8c:d5:f0:9d:8c:8f:a1:16:0f:57:c4:
51:0a:2a:87:a0:18:94:15:c9:18:30:65:09:a6:ce:7a:03:a2:
2c:bd:f2:1b:35:4b:20:f4:d8:d0:c9:f4:b3:5b:ff:d5:29:c4:
b7:4d:e4:4a:bb:59:d4:1e:80:23:6b:98:b2:22:9b:c1:cf:42:
84:40:7c:c5:cc:bc:43:14:f7:d2:ca:76:14:fd:0d:47:b9:e3:
63:6d:34:f6:c0:e8:75:fa:43:66:72:66:1d:f0:73:d7:e0:d2:
20:48:eb:27:5d:d8:9d:16:87:72:33:fb:6c:a9:2a:10:41:c5:
27:f1:f2:ec:8b:4c:7a:68:96:05:f5:d3:35:47:5f:d5:16:1b:
78:30:42:70:d1:25:b2:b1:9a:f7:86:24:2d:09:ea:6b:d9:a2:
1d:55:b7:d8:e3:e3:c1:ed:e9:5c:1d:fa:9a:48:e1:10:c0:ba:
ab:d6:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:31 2025 by rpki-client