Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: g5FblrCstRRi9YziC69crF7glnYue+RoCZmIURJHcdI=
Subject key identifier: 49:29:64:41:81:E7:4C:C0:51:66:77:36:FA:3B:64:1D:DF:20:74:77
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019A71EE86079737DAD3562592553286F8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: KpdjyDNFWz3xF34alZfaZ7kXPps.roa (hash: esX9PQgUe5/lICxLP0x3doHLhF8XKXX5g+pfJtsxi+M=)
2: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: LubpBpM4fOUbH6/vAw7gvOoc2+p7dfbzivVi+LeiPnM=)
3: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
4: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:07:97:37:da:d3:56:25:92:55:32:86:f8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=4929644181e74cc051667736fa3b641ddf207477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:ad:c3:08:5b:c0:6f:66:21:5e:02:e9:4f:
09:51:e4:fe:f8:db:2c:af:c5:cf:a9:70:53:32:9e:
d2:03:12:99:0e:16:71:73:f7:9e:32:e9:2a:d9:33:
0a:1d:9f:e4:4f:f1:15:2d:62:27:90:59:7b:52:3b:
ab:fc:e1:ee:bc:e7:8d:36:ac:59:86:75:1b:ad:45:
92:12:77:ad:42:c6:08:50:35:e3:99:b0:ef:f6:f7:
1c:e5:de:3e:0c:69:3b:80:79:e0:14:a5:08:8f:60:
7b:06:25:03:a9:70:b6:cf:65:67:ef:09:43:95:68:
c0:b7:a1:76:13:90:50:54:47:12:4c:06:58:d1:66:
0c:3f:fd:b5:12:d8:fb:17:dc:67:2f:11:bc:90:10:
4e:98:fa:bd:9c:2e:0b:5c:19:90:5b:57:42:01:ca:
57:3d:86:a7:0e:3e:43:71:65:84:33:e7:89:c0:9e:
c1:4e:61:f7:b1:53:1c:af:99:dc:9f:b4:69:72:bd:
40:b8:03:35:83:93:98:bf:35:00:8c:c4:25:90:c9:
12:63:e9:b4:8b:d2:71:a9:a9:34:98:24:99:21:ae:
18:6a:9c:ae:94:0e:3c:e1:cc:2d:d8:04:b7:7c:ff:
c6:f8:04:91:4f:30:d9:77:8f:75:48:4f:d7:8f:91:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:64:41:81:E7:4C:C0:51:66:77:36:FA:3B:64:1D:DF:20:74:77
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:f9:83:2b:83:4a:dd:7f:30:81:7a:ac:3a:d7:4a:cb:de:
c7:96:f2:ab:d9:e3:85:8c:d1:6c:25:d2:8e:27:50:92:a5:ab:
d6:a1:54:d6:33:c1:c4:48:90:a4:79:96:70:94:c8:07:d6:ee:
b0:49:d9:b9:ec:0f:30:b4:7a:ac:e8:1a:a4:10:02:35:00:04:
0a:48:b6:3e:fd:1e:fa:f9:b2:96:8f:50:96:8e:60:b2:83:41:
4b:ed:16:7d:24:88:48:d5:d8:a8:b1:ee:c9:9d:c8:be:35:e0:
94:8f:95:e5:2f:ff:11:c5:19:05:b6:11:05:81:07:8f:62:2f:
e7:1d:f5:73:56:07:a3:ad:dc:4e:d4:f2:ae:8e:03:a7:0b:d3:
a0:90:03:3a:fc:06:04:39:54:28:62:5f:f9:97:c5:13:67:0a:
37:70:f3:6c:17:ec:97:a8:4d:4a:1e:17:9d:96:fa:88:28:d5:
e9:5d:0b:fd:2e:01:59:05:81:82:98:8e:2d:a1:b8:45:95:e7:
68:2d:56:6f:03:78:f3:51:83:42:07:70:87:c4:db:60:0e:18:
10:24:f3:53:ca:25:0f:b3:8a:c0:50:58:59:26:c5:dd:0e:70:
85:66:93:10:b4:37:56:1d:0d:10:c8:b9:ff:4a:61:67:ba:22:
22:94:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:29 2025 by rpki-client