Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: bAiRu4oe3mwHp4MSXer7TJ6fDcFFd7gyifAxaproxsI=
Subject key identifier: 3D:10:57:B3:54:A9:DF:18:EF:12:32:E3:D8:F5:26:AC:AD:4C:41:13
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 01994E1B849C13A0818FCB3A46B6A8C04AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0A47
Signing time: Mon 15 Sep 2025 16:00:50 +0000
Manifest this update: Mon 15 Sep 2025 16:00:50 +0000
Manifest next update: Tue 16 Sep 2025 16:00:50 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: VEuO+18pDj/xvHvuXmmge/Pid37onPIXMTsZLxWjMgc=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1b:84:9c:13:a0:81:8f:cb:3a:46:b6:a8:c0:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Sep 15 16:00:50 2025 GMT
Not After : Sep 16 16:00:50 2025 GMT
Subject: CN=3d1057b354a9df18ef1232e3d8f526acad4c4113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:fd:54:16:3a:49:91:26:aa:ed:d8:a0:06:
0c:a9:d8:03:40:19:cd:a7:c3:d2:c9:b9:ea:9d:8d:
54:ff:bf:74:71:7c:1f:74:3e:27:54:94:20:88:08:
70:0d:06:f1:e6:e3:38:a1:bc:7f:0e:b6:a5:65:85:
f0:2e:59:6c:c2:96:05:06:88:26:43:2c:00:07:47:
1c:67:b2:d5:df:46:dc:64:7e:c9:39:d0:18:3c:b0:
e6:1d:14:3f:94:e9:87:91:cb:1b:4e:6d:0a:6f:da:
be:de:07:1d:fc:3a:66:d4:0c:93:9f:b1:b3:3c:68:
9d:1b:e2:9a:27:6d:21:d8:2a:09:08:32:1e:b8:9d:
a3:2c:0f:5c:e3:ce:64:f8:1e:d5:f2:6a:a6:a7:37:
19:e1:99:4b:25:69:47:33:33:49:ee:85:0a:6a:06:
15:8c:45:0f:c8:8e:5c:1b:fb:cb:2a:bd:f0:18:5f:
dd:8e:38:24:75:29:d2:98:e1:65:e0:03:6f:47:e6:
4d:7e:61:41:65:d6:0b:b5:b2:71:67:e2:4e:f2:9c:
40:68:12:89:ed:32:2b:ec:a8:04:28:f4:bc:f3:ac:
16:33:12:e8:8b:3a:4d:3c:36:c0:a0:29:82:ee:cc:
30:7f:f6:18:87:a1:66:51:a0:48:f1:8d:aa:f5:b0:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:57:B3:54:A9:DF:18:EF:12:32:E3:D8:F5:26:AC:AD:4C:41:13
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:df:68:80:7b:f4:44:79:d4:97:cd:60:30:fc:ce:62:00:
e0:38:2b:e4:15:b5:e2:7e:38:6f:c4:26:3e:41:a3:e8:b0:57:
5d:c4:aa:03:48:27:e4:57:69:6b:81:be:67:4e:1b:2f:2c:6b:
ea:e3:0f:48:be:19:03:4d:8f:c2:9b:eb:d9:c4:3a:f4:10:c2:
6e:67:55:10:41:5b:61:ea:a9:dd:d3:b0:30:21:2b:2b:17:7f:
93:f2:9f:25:b9:e9:9b:f0:3c:d0:1c:b5:e0:36:0d:b8:3f:97:
09:92:44:81:cf:ab:50:0c:9e:0f:0d:43:48:a7:c5:b7:0d:84:
e7:20:56:ff:fd:ff:f0:04:0a:0d:cd:1b:d2:6c:22:a8:05:07:
67:72:f5:3d:51:29:dd:ad:e2:26:cd:e9:f5:30:ae:02:88:ef:
92:51:bb:e0:fa:d8:ea:4e:a6:ce:3d:4f:d8:0e:42:54:46:7b:
09:f3:b7:dd:f6:5e:ce:32:f3:54:8c:00:e2:1b:19:ce:72:47:
c3:55:b7:19:65:dd:22:3d:84:66:fb:4c:ba:3a:83:00:74:69:
b3:ab:c3:d2:fd:c0:26:56:d2:30:f9:c1:f2:7d:63:43:72:c2:
1f:81:b7:19:d0:54:5f:0e:2b:84:ed:ca:83:12:69:cc:67:4a:
df:7a:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 22:43:24 2025 by rpki-client