Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: k84MzI/gUR/PM5FEMT+/B0Yw9Iyw3eOQGgIdxKWKWQM=
Subject key identifier: AA:86:27:6C:15:39:61:CB:FC:B2:BB:D9:C5:6F:1E:47:5D:08:F2:A5
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019A3647A5F050E095453525B9D3FECA7027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 1703
Signing time: Thu 30 Oct 2025 18:00:56 +0000
Manifest this update: Thu 30 Oct 2025 18:00:56 +0000
Manifest next update: Fri 31 Oct 2025 18:00:56 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: JVKzUyRSF0zxLdTXvYvg0v6M8XwVy/FfH7eEC2vWqYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:47:a5:f0:50:e0:95:45:35:25:b9:d3:fe:ca:70:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Oct 30 18:00:56 2025 GMT
Not After : Oct 31 18:00:56 2025 GMT
Subject: CN=aa86276c153961cbfcb2bbd9c56f1e475d08f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:da:5d:65:db:56:63:f2:7b:9a:07:3a:87:
3f:ad:cb:4d:3d:ee:8b:5d:cb:e0:03:e3:ce:d1:0b:
bd:5c:24:87:33:a8:28:bd:be:7f:7c:9a:e2:a8:98:
81:92:1b:fe:74:8d:0f:9c:15:f6:29:17:73:db:7c:
c1:a7:eb:23:43:43:a5:90:b1:10:1d:cd:f6:27:78:
55:32:61:f0:44:4c:cc:ea:7b:a1:fc:5c:fe:09:06:
b9:dd:c6:ca:90:85:a9:4a:d4:91:74:88:d7:dd:f5:
aa:cc:de:13:66:ca:25:2b:ef:0f:56:f7:a2:93:fd:
2d:7e:60:45:e0:b4:4f:e4:46:a8:04:c6:11:fb:07:
84:3c:04:b4:af:f3:4f:36:15:8e:9d:d3:92:aa:1f:
19:fd:61:64:10:d3:3a:c1:45:ff:6e:b2:fa:df:bc:
85:13:c4:c0:42:9e:21:8a:88:f2:09:4f:cf:d8:e0:
fe:da:ab:29:3a:12:9e:a2:b6:21:ce:c5:c9:e8:b2:
38:4d:87:c3:d0:7f:26:8f:1b:fd:a8:1c:56:f2:d9:
86:99:9e:5c:b6:70:1e:9d:6f:ed:ef:c2:ec:f3:88:
8d:03:ec:92:e5:67:8a:5e:a0:71:fe:9a:2c:fd:d3:
08:e5:10:b6:36:9b:bb:74:dc:68:72:bc:fc:a6:9b:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:27:6C:15:39:61:CB:FC:B2:BB:D9:C5:6F:1E:47:5D:08:F2:A5
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:61:c1:d6:25:55:35:5a:4f:c1:46:c5:61:b2:df:b3:22:
9d:17:73:3c:85:54:2b:3e:cf:ea:c7:04:36:8d:fb:a0:d4:d4:
4a:c4:62:d1:d8:f1:c4:9d:e5:8e:ac:99:b3:75:d5:f6:fa:11:
5f:04:bc:40:c9:cb:ae:a8:4c:cd:a3:85:b0:28:11:c3:5f:e7:
25:c8:38:2e:17:54:32:5f:5b:98:c0:40:3a:38:0e:c1:b2:ee:
a4:a4:a8:58:d1:f1:26:66:24:e0:d4:e6:85:0d:e5:18:b5:0c:
98:7b:93:c9:40:56:84:a3:f8:3d:74:0d:95:2a:a7:17:ef:3f:
fb:aa:44:c5:e0:63:76:f1:ed:24:2c:01:2d:fc:d6:1d:a2:16:
85:47:4b:7d:bf:13:6e:8f:ca:78:3a:68:2f:79:9b:e7:f2:3b:
9a:c1:fa:9b:dc:cd:f6:a6:95:f8:c5:c0:15:40:e2:68:fc:20:
e9:c6:dd:91:cc:62:73:a4:b9:f6:13:bd:9d:42:cc:ab:7f:1c:
d2:15:ae:1e:41:b0:1d:d8:5a:0d:01:e8:6e:d8:2a:f2:4e:14:
4e:a9:23:c1:89:ad:4b:f9:d9:63:ee:16:da:d5:90:37:45:da:
11:dc:ae:5a:01:a4:20:7b:dc:97:08:93:4c:a9:92:21:40:41:
89:e8:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 19:22:24 2025 by rpki-client