Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier: rk6v7nxSm2pNpsN0FPdsjCG0LIe+PLdf6sbpam72ZMw=
Subject key identifier: 99:B1:AB:4F:5E:80:0B:57:14:38:CF:C3:33:84:7B:65:E2:3E:2A:A9
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 019A4D738567306CA3E640455395EC2EEC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: 6c4mStZuLFdhZBFsXfkgnUT06kQ.roa (hash: 9X0qingJMgYTrqsJkiVxYQdXm9VKJ3coL7dPpBcYOeI=)
2: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=)
3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: BGh/HI5DzBEM2MHFf6Faq7VIRy3ybNhnaUq9DpJP/ZE=)
4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:85:67:30:6c:a3:e6:40:45:53:95:ec:2e:ec:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=99b1ab4f5e800b571438cfc333847b65e23e2aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:4f:90:0e:99:96:5f:90:39:cf:1a:e4:91:
b8:2d:b7:32:26:73:41:c8:70:86:14:6e:32:da:b2:
2a:31:12:bd:ca:c2:2c:ab:99:35:96:90:c2:c7:a5:
2a:6f:20:e6:f7:fc:ca:bd:1a:75:db:6a:67:bd:61:
ee:e7:69:c9:bb:e5:35:c7:54:17:6b:86:d2:66:19:
96:f8:5d:f8:08:e3:67:3f:5b:5e:2a:f9:c2:54:14:
fa:f7:fb:2e:58:41:21:b8:ee:bf:93:f9:f6:2e:32:
ce:b0:9e:1d:09:6e:0f:81:c7:8f:ee:a0:7b:c6:70:
61:ef:2c:0e:b4:6a:87:97:dd:8b:6f:55:cb:23:22:
8a:d5:76:88:40:99:a1:e5:88:66:58:a3:df:87:5a:
05:f5:ff:d9:88:a3:10:8e:d2:24:f7:83:8e:33:87:
90:8f:18:9b:7e:f5:18:de:fc:1b:79:47:be:05:19:
07:a4:2f:d2:18:7e:f1:a1:3c:36:37:13:dd:4d:c0:
4c:e2:e0:1e:c9:49:3f:19:4c:68:23:9b:e5:e5:e1:
85:9d:ea:ec:ea:9e:c4:a3:ea:f5:34:05:38:5e:09:
e9:7f:00:8b:23:b0:f6:f4:13:5e:cd:fc:d7:99:e4:
59:2b:ae:ae:04:58:3c:84:2c:4c:18:94:fe:8b:3a:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:AB:4F:5E:80:0B:57:14:38:CF:C3:33:84:7B:65:E2:3E:2A:A9
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:ee:ef:d9:ef:d6:32:69:44:e8:41:e6:6b:8e:7e:93:a0:
f9:d4:c5:01:25:66:9c:4f:e2:2f:e6:6f:d7:ef:47:02:a4:e6:
1b:28:54:9d:42:0c:6f:28:1b:c2:3e:aa:98:fd:ec:69:10:03:
d8:d7:64:2e:f6:a2:b8:41:ea:5b:29:b0:29:5a:87:99:d1:bd:
60:0d:8a:1c:cf:5f:6f:54:e6:d8:a5:7c:67:36:61:86:b0:fe:
08:6b:47:9f:6f:7e:ef:40:15:cb:85:63:a6:b7:18:e9:ad:6c:
32:a5:30:04:5b:07:59:9e:9f:be:16:4d:d6:c4:19:e1:ef:70:
a4:39:00:07:f2:2f:c1:b5:b0:89:d2:d4:48:1f:3b:79:7e:64:
f0:f6:cb:98:22:f4:e9:74:55:10:7f:90:96:4e:32:f6:ca:e8:
cb:1c:82:aa:9a:5e:08:af:43:15:57:f7:7e:c7:42:0d:48:dc:
9f:c6:15:17:1c:46:22:15:f0:d7:06:14:a8:ab:5a:05:bc:bf:
e5:54:4a:2e:6d:b6:5a:7c:88:cb:aa:bb:d6:e2:51:ea:3d:cc:
5d:fd:1e:4d:ed:c4:cb:8c:7a:f8:6f:6e:eb:42:ba:6f:c6:ca:
3f:81:9b:38:f7:ad:b9:e2:b7:13:47:ef:88:d2:7e:5c:34:0e:
85:ee:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:03 2025 by rpki-client