Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: aeahVoD6kh2YN5stBpi1a8Y8QbXLJ6sJmxwTsk1alzA=
Subject key identifier: 93:FE:DD:14:21:70:23:17:AB:01:8D:67:D6:11:84:AF:AF:57:9E:CE
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019A71B78761FEC6170551EADA7CBE1D2126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 0780
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: bPm0w1qc1EOhrsibUyNXuaW2jXeQdyrcnrK0xMdm+E0=)
4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:61:fe:c6:17:05:51:ea:da:7c:be:1d:21:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=93fedd1421702317ab018d67d61184afaf579ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:20:68:c3:ad:c5:0a:87:31:f7:12:dd:49:
83:86:6d:8e:d9:04:ec:74:19:98:5b:85:8f:4f:53:
ab:b5:f4:13:66:c4:f0:74:8f:fc:e0:b5:d3:e9:10:
97:e8:3c:e3:c4:54:26:3a:ea:ff:c5:f7:bf:35:34:
03:55:18:42:2a:ab:ec:1d:e6:ff:ef:0e:08:50:fc:
b8:92:cd:4d:70:b5:35:70:49:d0:97:6f:d2:49:d6:
44:0a:09:e9:04:23:5f:f4:7d:b7:13:a3:cb:28:c4:
a7:d3:aa:10:a3:73:01:9e:02:ef:37:72:50:74:d0:
92:e4:a1:0a:85:74:8e:17:65:ad:8f:0b:a0:64:80:
fc:7a:32:c2:d8:7e:79:0f:bf:75:e0:f4:f3:f8:be:
5d:7b:b5:94:8e:d2:99:03:aa:46:3c:0c:ec:8d:68:
8d:f6:32:e2:d1:4e:5a:18:03:61:57:5d:9a:ce:38:
20:61:e5:fc:1e:15:c4:d8:8e:3a:fd:82:76:7d:b4:
43:5a:89:eb:5a:7a:cc:7f:38:6c:39:90:f7:a8:7e:
ac:ff:a1:41:89:74:3c:1c:0a:35:d6:99:b3:d1:2c:
c0:57:b6:ed:32:0b:71:ef:bb:2d:90:31:24:3e:d2:
24:64:bf:43:50:bb:d3:9b:da:72:d3:f1:cd:69:70:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FE:DD:14:21:70:23:17:AB:01:8D:67:D6:11:84:AF:AF:57:9E:CE
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:63:ef:f5:47:5c:1f:7e:81:0b:c9:9d:fd:99:58:7c:3d:
2e:e1:c0:77:b0:69:17:22:70:e2:ed:e9:dd:ef:40:e6:a8:a3:
55:b5:79:0a:21:4f:dd:ef:3e:02:3b:79:cd:e2:f8:0c:a2:dc:
2c:1e:ef:f2:c8:65:ec:ab:c1:da:1b:2e:eb:8b:e4:01:c8:4e:
88:8f:de:1d:9a:8b:ec:ed:ab:83:d3:04:5b:d9:1b:8b:2a:36:
95:6d:1e:d6:0f:e8:fb:63:87:60:f7:d0:7b:1b:45:78:d0:ea:
f9:89:92:a4:01:68:01:2b:f2:8f:a2:74:58:8e:14:6e:a8:22:
a7:27:21:af:ac:02:9d:a4:24:95:46:ee:a7:50:76:b1:cd:5b:
58:77:97:24:79:32:74:d9:51:dd:c8:30:9a:75:fb:26:d9:d3:
1d:85:25:83:5a:b2:34:66:56:57:3e:18:11:24:48:53:57:c5:
5b:6f:cc:77:ba:c0:0c:35:48:f0:60:a8:ea:7a:26:bb:1d:e9:
34:76:78:ab:9b:a6:16:88:fc:c0:b1:6b:c3:3a:89:4f:68:9d:
ca:2a:5a:33:0a:8f:c1:a8:15:27:da:dc:55:3c:e1:7b:61:a4:
2f:f4:c3:85:f1:27:c1:f9:32:27:62:6e:4a:fe:ba:da:66:a2:
18:8b:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client