Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: VAKoLxh3T+VZU5jsKfVz//TW5XrcMPvn/lEaUIU1omA=
Subject key identifier: 66:29:B4:BB:79:B0:4A:83:D4:96:19:24:73:2C:59:56:33:AB:0A:1D
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 019A725C81D6B2DA7D8045E82AF0CF5210DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 0360
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: NeQwsLSgu6WF2XHn/aza1z4Kdqh+qXmBfCV8UbVgT8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:81:d6:b2:da:7d:80:45:e8:2a:f0:cf:52:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=6629b4bb79b04a83d4961924732c595633ab0a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:81:7d:c0:ee:b7:ae:cb:e9:ed:40:96:42:
49:b1:9d:59:70:45:f9:47:53:68:1c:31:80:45:bd:
2c:45:8b:5f:5f:d3:59:6e:70:0d:ce:58:84:2f:5c:
75:f0:f2:02:ed:38:ef:ca:9e:2d:bb:45:d1:de:6b:
41:3a:43:a6:2a:09:b1:59:e0:d3:63:8c:e9:67:8c:
9a:12:78:43:85:dc:6a:c8:8d:cb:92:cb:36:4e:b5:
ac:37:1f:31:3e:3e:28:7b:14:41:5a:9e:0a:e4:3b:
5b:f3:1b:c2:c8:7a:fa:8c:32:a9:3e:b3:24:17:4a:
6d:eb:1c:4c:e1:74:61:14:0a:5e:b8:ca:6a:66:98:
9d:18:64:f6:93:8e:8f:cf:b9:db:b1:b7:93:d5:ea:
3f:1c:f2:d3:a6:18:8c:71:f1:fa:e4:5d:ca:4d:bb:
53:fd:3a:eb:3c:d8:cc:4a:e8:6e:1e:0c:23:a7:18:
ce:8a:73:d0:29:34:ed:fe:5b:70:c1:57:54:87:4d:
64:90:f9:e8:ea:5c:12:a3:67:12:1f:6c:53:34:ec:
d4:0f:e6:af:dd:34:31:7f:cf:1d:99:cd:c6:2c:f9:
47:1f:c1:f7:3f:ad:5d:33:7a:2b:1a:56:7d:63:33:
15:52:f7:58:f0:37:c8:85:b1:60:11:f5:df:cc:ae:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:B4:BB:79:B0:4A:83:D4:96:19:24:73:2C:59:56:33:AB:0A:1D
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f4:e1:bc:b7:8c:83:f3:d2:63:f5:5f:97:01:51:34:12:1e:
45:10:e2:73:a0:02:98:62:56:7c:0e:a8:84:a7:d8:b4:80:3c:
7c:9d:10:82:81:e3:94:78:ac:49:f7:b9:17:3c:6f:fe:9c:67:
4c:53:3c:14:5c:67:72:b6:28:91:26:7b:e4:94:29:ab:bf:54:
0f:a4:9c:03:fc:28:18:2a:5b:68:3a:ad:f1:b7:30:c5:12:d5:
95:0e:f6:5f:6f:a6:e5:20:f6:be:31:a5:11:00:16:50:97:89:
63:42:1d:63:32:d6:28:30:80:1c:8d:4a:2a:73:66:aa:7f:e9:
0b:e2:c4:56:ce:b4:3f:49:c7:c9:d3:66:ca:16:21:e5:80:88:
54:a2:74:19:f6:89:82:92:2d:fa:47:86:70:8a:d3:62:c9:fb:
82:07:d6:4f:72:29:2f:66:b3:71:1c:8c:0e:19:d1:a6:9c:fc:
0a:db:46:8a:bd:84:29:04:c7:93:f6:4d:0e:5e:42:07:06:c0:
4f:93:bd:28:47:e8:f2:f0:8f:a9:aa:20:95:93:47:cc:6c:bc:
4a:1e:82:f7:a2:86:03:02:b0:ae:6d:42:ce:65:5a:a7:e0:6b:
64:41:4e:b8:7a:0c:31:3d:d0:93:23:32:95:6c:43:c2:fa:02:
1c:a3:77:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:42 2025 by rpki-client