Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: hSE5yfFad0XHtLJFVEyDGLkjUsVE90mY0ToQR0gWEW0=
Subject key identifier: 45:99:81:68:56:A9:52:6C:E9:3D:DE:E3:4A:D5:5A:3A:7D:12:07:C3
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019A71EED9CDD3BA8EE81AE5C4F36AE88BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 0107
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: Ft7Frn9ocyQeuHjXMeEeGoh_tdk.roa (hash: +hbGdiT9EB+gQ7hEwq4X6SV+6RnEdb4t2Cal6rg6Zcw=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: k8fFsTPc5E9YzblglTCvjESGEMv2rhRl/DPFTCCFRHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d9:cd:d3:ba:8e:e8:1a:e5:c4:f3:6a:e8:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=4599816856a9526ce93ddee34ad55a3a7d1207c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:55:a9:26:e0:7f:09:a9:91:38:a5:e4:51:
52:3c:5b:a7:fa:00:f0:bf:9b:86:b4:f8:9e:0a:68:
c1:57:01:41:90:65:44:90:0e:ec:4c:31:b9:0e:96:
78:0d:dd:94:7c:06:5d:ac:62:e5:66:ad:16:77:27:
58:57:cd:aa:f7:dd:f2:dc:b5:f5:15:03:47:dd:00:
cb:a0:4c:5d:18:e0:88:25:dc:67:13:eb:cb:8e:ab:
4b:7d:1d:e2:f1:97:3c:8b:67:83:ac:c5:67:2f:b3:
33:38:81:82:72:f9:41:f9:70:4c:5a:40:f0:86:ff:
6d:9f:4a:be:a1:d1:2f:1e:e9:fb:33:26:33:ac:b0:
79:c5:85:99:93:c3:e6:2b:51:50:40:41:40:65:fe:
06:2b:85:48:0f:a8:a6:f4:5d:d1:9e:b5:af:fd:e5:
0e:21:1c:b4:a1:1a:19:bd:3c:1e:97:2b:c2:0e:ee:
9f:d0:5a:97:3c:49:7a:e7:0f:41:13:0a:32:4b:1b:
b0:76:31:95:3f:41:15:e7:65:aa:c2:e7:9e:d9:f2:
1c:60:2a:9c:3c:60:40:9f:4c:53:3b:9b:dd:9a:59:
28:55:e9:d9:49:49:b7:77:94:81:f4:dd:cb:c8:66:
1a:ac:d9:e5:cb:60:ff:0c:1b:ea:ab:87:c7:66:4c:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:81:68:56:A9:52:6C:E9:3D:DE:E3:4A:D5:5A:3A:7D:12:07:C3
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:83:d2:25:ad:07:77:57:6c:94:70:60:2a:c3:51:a2:14:6d:
9f:bb:68:e4:71:41:4c:14:f5:63:15:da:f3:b0:f2:5e:6d:cc:
46:28:00:d6:5e:77:55:10:2d:2c:40:12:7f:be:70:68:b7:5c:
b5:8d:38:3d:19:23:32:20:08:ca:49:e7:8e:ea:79:6f:c0:82:
5e:f3:24:c7:2c:c3:c8:53:79:29:82:65:af:a4:2b:4a:7b:93:
57:fc:1e:5d:3a:cd:a1:f4:e2:9b:90:f4:5e:ef:87:26:ed:82:
7d:ce:be:db:36:96:26:dc:67:65:80:78:5a:84:eb:10:bf:f6:
76:a3:ca:ea:66:85:f8:2c:a2:ca:e4:c2:ac:07:a4:2a:a4:67:
5b:9c:0f:cd:b1:b5:8d:c0:34:10:c4:3a:2d:38:3d:10:70:15:
96:c4:fb:59:ac:ea:ff:8b:6f:01:11:94:ec:eb:4d:e3:10:bc:
39:1a:69:4f:f6:04:89:25:91:5c:2a:77:33:ce:89:a2:71:15:
ae:56:7d:64:e9:7d:40:47:76:73:2d:8a:17:7a:17:cb:f0:ff:
f1:66:c2:97:24:13:ad:ee:db:14:b9:e6:b8:3d:5f:5f:50:f8:
27:77:82:aa:20:4f:37:40:31:85:a0:f7:43:4b:8b:ec:f8:6b:
f0:d2:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client