Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: z67KIxwWit674rWu3hpH5wGBxtAUM5C7Iur2J5dA634=
Subject key identifier: F2:CF:E5:2A:B9:F5:B9:9C:55:C9:C1:11:39:C8:B9:86:E4:D3:94:81
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019A71131BC13742E0C8E2E697E90BF9D5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0B8B
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: QK3PtwLN0KdJOpej18LqqnBsAScNHBUYxMikbsdvPtE=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1b:c1:37:42:e0:c8:e2:e6:97:e9:0b:f9:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=f2cfe52ab9f5b99c55c9c11139c8b986e4d39481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:2f:36:c9:57:86:31:d8:4f:42:01:d2:99:
ab:e0:42:a8:d3:16:26:d1:76:b6:38:f3:a4:8c:34:
72:eb:0c:2f:41:1e:94:e6:d2:a7:11:15:5b:6d:81:
03:d7:43:56:d5:99:a1:d7:24:e5:5c:c7:f9:c2:44:
75:3f:b4:cf:0c:51:d6:06:b7:f6:5f:d5:4d:ed:9f:
03:58:52:9a:99:1f:2c:df:59:a2:70:85:54:8d:64:
d4:40:4e:42:80:bc:ba:ac:d2:95:15:bc:ba:67:3b:
a8:02:df:df:ca:36:eb:e6:99:52:50:32:d1:99:77:
23:f5:66:92:52:a9:c9:9d:4d:0f:de:81:e0:cb:76:
8e:fd:41:8e:10:41:cc:b5:b0:83:42:3c:65:32:94:
29:eb:34:57:c5:09:93:2f:29:da:7b:a5:15:13:47:
93:1b:68:f1:54:15:d3:a0:43:15:db:f0:31:b2:65:
51:de:0d:20:ad:18:26:cb:b4:6d:dc:d1:5d:d3:44:
58:ee:f5:00:a9:37:38:b5:c6:98:41:f4:c3:9a:5f:
8b:9b:5f:3b:e8:5a:fc:9c:e6:e9:af:94:d5:d0:3c:
ac:a6:6d:80:09:97:c7:7f:54:8d:92:8d:e5:39:47:
5f:45:50:9d:4f:25:89:10:1a:49:3f:e8:40:50:9c:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:E5:2A:B9:F5:B9:9C:55:C9:C1:11:39:C8:B9:86:E4:D3:94:81
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:01:38:67:11:48:50:96:f0:e5:6d:b9:8e:18:a2:ee:33:5c:
ad:6b:4b:cc:a1:e5:86:50:1d:e2:3c:d9:0b:e4:dc:8c:6c:9d:
f0:5c:ae:5b:fd:81:2f:2a:ba:c6:01:e7:34:83:d7:e0:3d:05:
3f:f6:f7:b7:c7:94:f4:47:7c:4b:20:cf:3f:c0:a1:29:9b:a8:
23:50:df:61:94:01:b3:6d:bb:df:24:0c:94:d4:e5:a6:65:f4:
bc:28:ad:62:82:12:32:79:7a:f4:ce:8a:ab:f3:14:78:be:5c:
a0:81:b4:c5:14:08:0a:71:d7:f7:64:af:1b:7b:1f:ab:ca:fb:
31:49:12:f5:9b:85:63:0b:87:0f:c2:1e:28:5f:f9:9e:21:a1:
94:ee:d3:11:4f:df:0f:d8:48:49:32:a3:58:d4:f5:27:f9:2d:
61:f6:62:c6:79:e9:51:5e:e3:62:0c:41:b1:76:e9:7b:f1:84:
20:02:6c:12:1a:f3:ed:3c:b5:19:b9:38:77:4a:85:72:d1:60:
d0:af:ce:e4:ce:df:75:ab:ec:dc:64:b5:e2:86:c7:62:90:bc:
b9:0f:d1:0d:7c:5b:03:50:70:4c:69:49:3a:e7:c6:42:b3:dd:
21:83:e6:b8:b6:fb:99:f8:ce:80:b3:e9:06:ff:b2:ed:a1:fe:
79:ed:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:44 2025 by rpki-client