Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: O71VVVmTwIqKleEQMaEWftTCex1U8dc81ybq2AOFjTg=
Subject key identifier: 05:08:F1:BB:09:20:07:30:36:64:60:DE:01:C7:7B:57:48:02:4E:9A
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 019A711313E79E0BB2A6EF066C44A4396C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0F0E
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: cSyaGSLl+b9+pOp+lBzIBR8FnNaSh5CXoyn/mKvKJKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:13:e7:9e:0b:b2:a6:ef:06:6c:44:a4:39:6c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=0508f1bb09200730366460de01c77b5748024e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:c1:1c:bb:5a:fa:67:79:b2:d1:b1:ad:ab:
76:02:cf:09:fb:c7:4c:58:d1:90:8d:df:b0:11:63:
22:ef:c1:df:43:1e:e5:12:74:5e:78:c0:e9:8a:95:
b4:d5:7e:53:3e:e8:3d:75:47:08:33:9e:c0:af:61:
72:9d:f1:51:f0:c8:cb:6f:fd:13:b4:11:b6:db:d8:
82:9b:49:fe:1f:b8:39:3f:f8:df:b8:60:19:ce:c7:
a9:a4:ff:17:6f:a6:b2:33:3e:c1:6e:94:97:ff:73:
d8:a0:8a:6a:69:1b:87:4b:f2:4c:d0:81:7a:22:e0:
b6:17:e1:9c:65:40:87:03:a0:94:9f:6a:e2:0b:00:
01:4d:6c:99:3b:bf:f6:69:02:74:49:8a:43:e0:4d:
18:52:c3:4f:d7:04:51:86:52:f7:bc:ab:27:e3:cd:
36:eb:77:1c:31:2c:14:8a:38:5c:94:24:17:03:61:
df:76:34:92:74:ca:6a:b2:25:63:bc:7b:b8:e7:68:
c0:4e:d2:92:30:d9:91:7b:b6:aa:e6:20:f9:2e:07:
d7:2d:c6:c2:f4:ec:0d:ba:d6:90:45:b9:e7:b2:6f:
79:01:81:0d:e1:a8:74:22:31:e3:e7:a1:c7:de:04:
12:ea:30:f4:11:2a:64:f3:ac:76:a0:aa:da:40:08:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:F1:BB:09:20:07:30:36:64:60:DE:01:C7:7B:57:48:02:4E:9A
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f0:a0:5e:28:8f:5b:86:27:81:a4:ec:24:c9:a7:a4:49:ce:
ba:4e:e1:1c:49:50:17:75:0f:bd:16:62:94:4c:5f:10:47:c9:
28:68:ae:69:27:a5:ef:ee:f7:08:26:fd:49:e2:5b:97:b5:7d:
f8:f8:38:04:54:8d:27:b0:8d:83:30:96:8b:b4:87:e3:ae:13:
73:2e:00:c8:b1:4a:b4:14:c3:d7:47:9e:66:10:97:7f:97:0c:
a5:f4:cf:7c:50:65:b3:b9:e6:84:d4:b2:be:f9:67:6f:9a:c8:
06:37:00:21:82:a6:e9:ab:c8:71:e9:b5:e3:cd:0e:4f:90:1b:
55:e4:dd:30:3c:82:f8:c6:1f:a3:bf:cd:ae:3b:33:42:8a:a4:
fd:7f:4a:63:6a:cf:95:6f:89:d2:af:b2:a6:38:31:09:b4:2d:
2b:66:12:21:ec:ec:f2:4c:a4:e2:4a:a0:95:ba:d9:b3:48:e4:
18:37:84:c0:b8:43:de:e7:c8:00:14:1f:0e:a5:7a:46:09:72:
d3:6e:cf:de:cc:03:02:e0:d0:e3:92:e0:ca:b1:a8:29:f3:f2:
13:6d:12:f3:8d:5e:b1:e5:9c:49:58:f0:47:fd:63:d8:4c:88:
ca:7e:4f:37:f7:a9:39:9c:79:6c:0b:24:2f:f0:7f:7e:44:37:
b4:be:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:40 2025 by rpki-client