Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: PgsjChRniiffty9Lc7SaP6iGOVtm8RBpKKIQUsE477o=
Subject key identifier: DF:64:04:DD:D0:AE:63:5E:1B:EF:B2:4F:E7:69:DE:9F:82:DB:CB:C6
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 01993ACD14B1DDB9D4D13CBF665F4382E0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 08DD
Signing time: Thu 11 Sep 2025 22:02:22 +0000
Manifest this update: Thu 11 Sep 2025 22:02:22 +0000
Manifest next update: Fri 12 Sep 2025 22:02:22 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: pMFBk3P98a5HzGlvOyRoj403SksjR3zxVUCSHUIK6oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cd:14:b1:dd:b9:d4:d1:3c:bf:66:5f:43:82:e0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Sep 11 22:02:22 2025 GMT
Not After : Sep 12 22:02:22 2025 GMT
Subject: CN=df6404ddd0ae635e1befb24fe769de9f82dbcbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:b4:40:c1:96:ef:79:cc:9b:f5:25:c1:d8:
1f:ad:fc:3a:cf:2a:8f:e6:00:4c:93:4f:e7:50:bb:
68:44:95:60:51:e1:93:02:d3:5c:7d:54:51:b7:b2:
d2:b1:f6:08:ea:d0:0c:72:57:7e:83:70:83:6a:25:
75:e0:c5:10:15:01:34:6d:5a:53:b9:a8:d3:b8:63:
40:d8:58:81:1d:7e:ac:1e:32:87:5b:64:de:8e:72:
bf:e4:65:e1:cb:eb:96:d4:71:86:4f:7e:0d:6c:86:
d3:4b:e1:fd:29:65:9d:b2:f3:eb:b6:f3:f1:3f:f4:
c6:ef:ba:2a:7f:ed:29:12:5b:8c:07:a2:24:31:8c:
c1:29:90:d7:a4:b2:6f:ca:02:e3:96:e4:e0:41:9d:
d3:2b:38:36:7f:42:bb:e5:4e:9a:1f:3d:ed:e2:f6:
d7:e7:da:06:3d:30:b9:3e:24:74:6a:b2:5b:33:dd:
7a:07:e4:02:d9:fd:b7:b4:d1:33:6d:7d:cb:9d:f7:
87:3b:7e:03:dd:38:90:20:01:3d:72:38:bf:13:af:
bf:1c:12:ed:a5:f9:5a:55:f6:56:a0:3c:32:f7:50:
21:78:3f:28:ec:75:7c:f6:62:ba:d7:c8:42:77:ce:
6e:71:d9:cc:44:8b:bb:0f:ea:63:fa:2f:0e:78:b5:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:04:DD:D0:AE:63:5E:1B:EF:B2:4F:E7:69:DE:9F:82:DB:CB:C6
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:5d:f7:e7:7a:e0:86:5a:95:34:00:a1:50:e1:55:6f:c5:
7f:8d:4d:cc:01:69:fd:df:1b:ff:04:a4:d8:23:4a:92:42:f0:
24:a3:0c:56:c7:a9:87:fd:b8:95:ae:90:f9:c6:b1:bc:6d:c5:
cd:fd:82:b7:ea:4e:73:79:a8:64:f1:59:f6:b4:39:a9:cb:21:
f8:ef:a6:90:4f:60:7e:71:01:3b:e5:e7:0f:76:30:bb:2f:b7:
38:ed:a3:f9:d2:2f:21:2a:cf:cc:bc:4b:b4:8f:b8:47:99:62:
70:ff:e3:80:98:86:be:94:3d:0a:2f:84:6d:f5:ab:9e:50:9f:
14:61:68:18:c2:88:67:75:2c:0d:73:e4:25:b0:10:ad:40:c7:
47:37:73:cc:ab:36:cf:63:68:38:27:e6:ac:64:e1:d8:48:d5:
03:b6:de:e7:c3:75:07:e4:68:91:c9:3c:74:b3:c2:bd:81:7d:
08:45:94:22:98:aa:0f:cc:5f:d1:5e:1b:86:bf:17:93:68:c9:
fb:9b:1c:97:6f:9a:ba:b3:8e:84:e8:e2:9c:d1:5e:6f:f3:67:
f9:a2:eb:13:bd:cc:71:ff:8a:31:86:26:a4:8e:70:7a:23:69:
8d:77:e4:cd:b1:2a:2c:76:f4:55:12:33:d6:4d:fe:fa:f4:2c:
68:a4:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:29:48 2025 by rpki-client