Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: mrkAA2dmyP1ZD3/n+M9WVdc3CruGwgnK/Gpn0cvpL2U=
Subject key identifier: 97:F0:8C:05:F1:8B:AF:E5:B5:7D:86:F8:F0:DC:69:AB:1A:36:71:B4
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 019A71B91795312E4073432FC75D43288DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: odXRnLwa3LkR0RgB5KH/EoDhWzCYlffIY2Gy2UqhmXA=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:17:95:31:2e:40:73:43:2f:c7:5d:43:28:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=97f08c05f18bafe5b57d86f8f0dc69ab1a3671b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:e8:c9:28:f5:ec:b1:c4:91:88:4b:55:1a:
7e:b2:18:3a:11:09:5d:bf:dd:95:85:e6:c3:97:96:
c4:7b:54:fc:87:d9:df:9a:0b:37:b8:e8:0e:d0:8c:
b2:43:12:32:a6:1e:58:f8:4a:66:6b:19:7a:8b:7e:
0c:a3:91:d6:3c:c3:87:c1:2c:d7:a0:47:8f:a3:4c:
d7:96:c5:35:3b:71:26:08:dd:22:96:e9:da:db:59:
00:89:5a:39:e1:3c:8c:d4:d1:33:06:e7:b7:58:1d:
8b:7e:5a:21:03:ca:1d:53:3d:85:48:5c:b6:74:8b:
64:ed:cf:3d:14:e3:85:13:28:30:a3:f8:e9:88:36:
15:84:94:6b:61:38:61:e2:4f:7e:e7:d5:40:1c:15:
c9:dc:f9:6e:1a:79:19:46:12:ee:f1:be:23:6a:ab:
d3:12:a3:7a:1e:3c:49:a2:4b:c0:6f:03:b7:f4:3c:
66:6e:4d:b5:d9:5f:46:b7:25:67:7c:55:ac:92:02:
ab:e0:e6:e5:aa:37:5f:e5:de:63:39:bc:26:cf:38:
55:f8:4f:e6:80:4b:20:6b:10:b2:a9:95:ce:32:2d:
a8:89:cb:3e:8a:0e:e8:1a:d5:9d:6c:0a:48:9a:d7:
48:16:f8:e2:66:b5:24:52:a7:26:fa:64:93:c6:5a:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:8C:05:F1:8B:AF:E5:B5:7D:86:F8:F0:DC:69:AB:1A:36:71:B4
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:aa:b9:d5:3e:ee:32:3c:fe:b7:29:5d:f9:b9:a2:c4:6b:19:
c1:b3:68:76:f9:8f:35:91:95:d7:92:63:84:2a:1d:92:c0:fc:
96:bb:8b:f5:f7:41:14:f2:f7:20:5a:f8:6a:95:15:21:e6:f1:
db:62:78:8d:88:a7:27:6c:94:78:67:33:c4:e7:1d:3c:a9:0d:
4c:db:d8:93:53:34:c3:d2:59:7b:27:8e:73:a3:f3:40:e2:83:
7c:8d:f4:7e:70:08:2e:78:2e:19:7b:99:76:8a:e8:b3:c4:e4:
6a:77:12:d7:da:3d:b8:ed:a4:72:37:15:6d:4f:db:17:79:e5:
54:3c:cb:07:68:2c:bb:d3:b3:cb:bd:95:6c:96:d5:bc:56:2d:
5b:af:3f:e3:e6:52:5e:ba:fa:03:6e:f0:7d:1a:a1:fc:52:d4:
f1:ad:6b:27:21:2f:b1:e2:d8:8f:4d:39:43:2d:6b:06:35:58:
59:df:b0:fa:35:96:6b:8d:f5:e6:ab:37:6f:02:54:5c:cf:bb:
9e:5e:58:1a:f8:f2:02:ae:ee:ec:c0:e9:1a:52:a5:a8:5b:37:
dd:c8:c9:e7:6c:1e:c5:d4:5f:c3:ab:a0:95:9d:f7:99:61:ff:
e1:45:67:ab:07:32:c4:c3:b7:23:ad:eb:99:2e:e6:52:ac:ba:
16:a7:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:23 2025 by rpki-client