Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File: aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier: qmCuE6PNMizFQF/1O6JBiVn3+9O8zFDuYXnR/jT8nS4=
Subject key identifier: E4:04:EA:8F:FA:A5:8F:8C:BC:95:9E:E0:11:84:7D:70:E1:98:80:06
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 019A7149FB8B9AA88C5FDC4D263BDBD7539F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (hash: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=)
2: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: hzqih/bpvgHDxBbl5RvljtGLKkse1pyV7HFG142foyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fb:8b:9a:a8:8c:5f:dc:4d:26:3b:db:d7:53:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=e404ea8ffaa58f8cbc959ee011847d70e1988006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:b5:80:ae:86:28:0b:fa:15:88:4d:0b:86:
4e:b3:f7:3d:d1:84:ee:ab:5c:20:0f:3d:06:e6:9b:
b1:ae:2d:ba:71:c9:4f:dc:14:a7:f8:2d:e5:04:47:
df:e7:b4:f9:11:27:92:54:e8:a5:9b:8e:f1:7c:88:
d9:c9:32:15:20:c2:6c:6d:f9:c8:f1:a0:47:50:0c:
7f:85:48:20:59:aa:70:21:b6:b8:4c:b3:ce:58:e6:
0a:98:99:ff:f8:f3:ae:a7:78:a9:e6:e0:e8:5e:9c:
bd:5a:c6:c3:e6:76:b0:17:17:66:44:c9:54:6e:79:
c2:ee:51:12:fc:3a:cb:a5:ee:95:69:f1:2f:59:66:
48:5c:5a:4e:eb:81:dc:39:97:ef:15:ae:d6:c4:33:
3e:9c:27:e8:7d:c1:06:23:84:4e:fa:99:b5:d7:06:
b4:51:4c:6c:ef:de:cb:ed:f2:64:3e:5b:ce:48:ca:
d9:d5:62:87:8e:06:b6:e0:36:ef:56:f0:f9:34:31:
ae:57:63:02:71:78:20:82:6b:ab:b9:2c:c4:32:6a:
9a:22:b0:02:fe:dc:a0:f0:0d:d4:eb:e2:4d:3c:d1:
6e:86:53:a2:6d:ea:32:1f:34:37:60:c8:5b:04:f7:
16:41:92:6f:85:60:33:74:64:98:bc:f3:60:a9:65:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:04:EA:8F:FA:A5:8F:8C:BC:95:9E:E0:11:84:7D:70:E1:98:80:06
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0a:0b:71:a7:22:6a:83:11:11:5e:e5:b5:80:8d:c0:01:46:
86:1f:f4:dc:35:ac:ea:9d:19:9c:e5:d3:c9:fc:86:6d:21:25:
c8:0f:dd:a1:4f:8a:79:d5:99:b1:e4:94:53:2e:da:37:af:30:
f1:25:5b:af:37:a1:bf:11:74:ac:03:9a:1c:ca:c2:1b:36:7d:
e7:1b:a9:3a:f0:7e:44:35:33:ea:50:d3:cd:cf:b7:94:3d:e1:
04:05:79:be:94:5d:2e:3d:7c:04:2b:20:05:e3:18:dc:86:48:
17:d5:3c:8f:b6:a5:37:6f:f7:a5:0c:44:2d:64:6d:f8:50:5d:
c3:4a:31:d0:ab:56:7b:c4:3d:ac:f9:b0:63:09:5d:75:f3:c4:
6e:c5:76:b4:b0:6d:d9:18:2d:a3:2f:83:a7:eb:ea:9e:ca:60:
c9:32:1e:16:db:b0:49:1d:f0:9c:ff:90:db:56:bb:f1:b4:2a:
cf:5a:5a:65:32:75:6c:6c:20:0d:2d:4f:73:6b:b1:14:04:58:
70:2a:b6:c7:f3:ee:ae:a2:66:88:8e:cb:0d:af:37:86:0d:87:
af:b7:06:ec:f8:1d:1f:1b:e3:c9:85:56:e7:a2:c9:74:39:e4:
2f:19:f5:b0:21:45:19:a7:43:99:e4:2e:f1:d0:43:31:13:94:
ea:67:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:11 2025 by rpki-client