Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: S7P/REraZ357pn82CBfYUMWDVAIs0iZ/fLIJIwspgeI=
Subject key identifier: 14:AF:30:E7:14:A0:35:DA:A0:F3:A0:E9:8D:4F:9B:82:89:99:F3:2F
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 019A0ECB93DF9077DA90E01F8533CF389785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 142F
Signing time: Thu 23 Oct 2025 02:00:13 +0000
Manifest this update: Thu 23 Oct 2025 02:00:13 +0000
Manifest next update: Fri 24 Oct 2025 02:00:13 +0000
Files and hashes: 1: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
2: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: XAjBXqxpcHwJflrMCTti34tOygip10fVsHpVX8K0IWk=)
3: lqHZHTtSjRTsulRT9uODOQE8lxE.roa (hash: ps3jNh8IrB0LkmVcReSQZ1oXuY/U8lzEpr6J8ijs+08=)
4: xE9IyAhq0aHlL6_ym_xgvZ2_5uk.roa (hash: 1YgjglAtdi0WFBDpDXQ7veTTeatE49sPF4fCDK08QO0=)
5: z6mBzW6H29uI5KxETsJqR2soNbo.roa (hash: UhKW2I+drpoL0LurJwnMOqRysLzBC/O6KKhMC7EQlLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cb:93:df:90:77:da:90:e0:1f:85:33:cf:38:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Oct 23 02:00:13 2025 GMT
Not After : Oct 24 02:00:13 2025 GMT
Subject: CN=14af30e714a035daa0f3a0e98d4f9b828999f32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:27:12:90:9a:9c:22:e9:26:d1:17:c8:eb:
c6:e9:bd:5d:08:0e:ae:7b:fb:74:22:9d:e1:40:d2:
53:13:0c:a5:f9:9b:50:bd:a1:0b:38:04:cb:72:93:
86:e9:28:34:2a:3f:b9:80:ee:7e:38:b7:c7:ae:e5:
2b:45:52:e6:34:11:ca:4e:46:7f:9c:74:f9:55:b7:
06:6b:b9:32:d9:70:92:1e:5e:ad:43:c0:6a:9e:46:
23:84:dd:95:f2:04:3a:85:fc:df:46:b9:74:db:67:
3f:ae:79:ec:8c:08:d8:ad:a4:3e:80:bf:5c:97:b7:
e6:d7:2e:45:f8:03:7b:df:6e:0f:f9:59:ee:ee:be:
01:98:a6:0b:37:c4:41:1c:8d:07:b1:bd:48:4f:9b:
b8:38:ca:00:9e:e8:3d:03:63:9a:7f:24:60:e7:7f:
f8:03:4c:14:4d:36:a4:44:ca:43:eb:8a:80:9e:00:
60:bf:fa:31:cf:bd:4b:b0:12:b7:33:23:89:e0:27:
52:9a:61:9d:39:83:44:22:a2:20:3c:a7:e9:34:94:
71:8d:ee:d9:14:a0:76:7b:39:4e:10:d0:00:b6:52:
8f:44:d8:1c:43:c9:6f:cb:c2:61:10:51:4f:41:23:
db:02:1a:da:17:6f:46:cd:ab:2a:d3:39:9c:25:30:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:30:E7:14:A0:35:DA:A0:F3:A0:E9:8D:4F:9B:82:89:99:F3:2F
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:5e:0f:94:85:37:d6:b4:5a:28:28:62:3e:a4:3b:90:d8:
b6:00:72:bd:76:cb:8a:8e:2b:c5:d0:e8:aa:50:5a:cf:4e:96:
ce:0d:02:1b:01:04:05:b9:48:e3:71:27:c2:a7:13:30:d8:ea:
2d:a5:af:b3:ef:5f:ae:f8:b9:bc:a4:79:69:5d:a1:fa:03:e0:
e1:8a:cb:41:3c:99:b9:43:0c:e6:bd:75:00:ec:ce:a0:8c:fb:
0b:53:5a:db:34:77:fc:e8:44:0b:8f:82:7f:df:57:05:66:27:
ca:90:6d:0d:0f:7a:55:4f:dd:0e:64:b7:2f:94:5b:ae:98:c3:
6a:e3:e8:20:19:c4:6f:25:88:9b:c4:4d:a9:1c:a7:6b:ba:7f:
e4:93:2d:3d:9f:23:4a:8c:12:ff:f0:df:b7:5c:18:a2:f1:df:
9b:24:f1:73:d3:b7:c6:07:a7:56:7e:a9:1e:e4:fc:a4:87:31:
d2:ef:d1:fc:75:69:1d:23:c0:d0:4b:84:f6:72:d5:71:04:de:
0d:fb:ed:72:cb:91:93:d0:25:2d:f6:43:52:e3:b3:27:17:ce:
1a:8d:9e:e9:45:9c:f8:3e:3d:70:00:8e:bb:10:e2:46:53:22:
be:6a:03:09:df:45:11:65:15:50:7e:f8:55:f1:82:94:d7:5e:
78:7d:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:41:16 2025 by rpki-client