Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: KRlpPI/w0lCFaeAt6Wjg5lK/FBrw1MuqrymQmEp50dY=
Subject key identifier: 8D:87:D1:52:63:C6:EF:DA:E9:00:96:75:4C:B5:8C:8A:CF:C7:76:A9
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019A228A62D8B1D72D7C2F8B4940C1843AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:01:25 +0000
Manifest this update: Sun 26 Oct 2025 22:01:25 +0000
Manifest next update: Mon 27 Oct 2025 22:01:25 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 85uQ2WVDJxnpmRTEeCMVDxJx3YjBfVl9S2HyvERdNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:62:d8:b1:d7:2d:7c:2f:8b:49:40:c1:84:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Oct 26 22:01:25 2025 GMT
Not After : Oct 27 22:01:25 2025 GMT
Subject: CN=8d87d15263c6efdae90096754cb58c8acfc776a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:a3:6b:23:51:a1:f5:0a:a2:74:a7:f6:87:
90:9c:76:77:86:ff:0a:c5:0e:60:6f:68:ea:78:86:
8e:df:e6:9b:3d:8c:5e:b2:2d:f2:eb:41:42:f0:78:
85:61:fe:7c:21:bd:86:b2:97:6d:f8:76:5a:33:7e:
18:2e:bf:9b:36:5a:1e:59:84:95:73:37:6c:c5:2b:
a7:7a:09:42:5c:3a:0e:a2:70:e7:bc:c9:7c:21:81:
95:79:b9:96:c9:21:f9:6b:20:8d:ed:dc:d6:3f:7c:
b0:49:d7:7b:8a:a8:ae:06:0c:93:c8:23:14:a5:6f:
52:06:e2:c6:ea:78:dd:6e:2a:32:f6:18:56:d5:28:
c3:3a:b0:7b:22:2c:4e:9a:e2:6b:91:b8:68:87:87:
25:e2:bb:32:60:84:05:9b:b5:53:14:00:ec:b3:93:
8b:63:04:fd:3d:0f:1b:3e:ba:9a:a7:e7:9d:51:bb:
ca:c1:66:a9:9c:53:11:69:94:99:11:5f:6a:c2:60:
af:a5:e0:70:a4:54:e0:c7:03:a7:94:64:37:5c:2b:
e5:54:a6:ed:43:30:f8:12:a2:10:31:d2:1a:bb:a1:
71:d5:c9:b6:61:3d:8a:37:c7:ec:60:90:f7:95:78:
2f:58:6e:46:ac:aa:67:bd:4b:8e:c1:f8:33:77:f9:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:D1:52:63:C6:EF:DA:E9:00:96:75:4C:B5:8C:8A:CF:C7:76:A9
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:06:ed:2f:59:65:12:b6:5d:3a:09:0e:3b:04:2c:2d:10:b0:
a4:88:d9:31:8d:63:db:82:31:ef:9d:c5:e5:72:1c:39:7a:3d:
50:bf:75:de:33:6e:f7:fa:73:5e:1f:b9:a3:bb:6a:5e:ae:f9:
d2:3c:15:ad:e3:31:7a:61:4e:9f:55:3a:1e:ac:cc:70:b7:93:
ce:b2:b9:7e:b6:64:f6:ca:d7:17:10:13:81:0c:c7:2c:d1:42:
3e:78:75:06:a1:42:63:90:8c:82:de:80:d6:44:71:5f:65:01:
00:67:8c:65:62:32:ad:85:bc:ea:6c:e7:21:40:6b:94:40:63:
da:db:17:f6:9c:c2:cf:df:75:a9:63:75:75:e0:02:e1:11:60:
4a:6e:07:c3:a1:fc:60:14:a9:0d:fe:2f:a3:ce:f3:f4:0f:cf:
a9:f1:63:9a:56:66:8d:b9:93:c0:78:d9:6b:b3:c9:c7:16:82:
20:63:0d:44:a8:58:db:06:0a:07:61:9e:03:41:a3:1a:41:ab:
42:a1:f0:da:21:5d:6d:c7:f6:fb:b5:a4:30:63:d7:a8:e1:d5:
9f:a8:5b:96:e0:0e:29:40:d7:48:2d:4d:de:50:b3:1c:a1:dc:
e6:25:c4:ca:81:19:e2:6c:bd:dc:c1:fd:c8:eb:df:eb:b4:d4:
fe:b0:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:54 2025 by rpki-client