Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: vFvW4OEzPMMqykQPBJWdwafLsBKCcwix3ZhKWrCbSkk=
Subject key identifier: C9:06:19:C4:56:CB:33:4B:AF:93:68:27:E6:26:A3:FE:1D:85:AA:C9
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019939F0033D1544B4C797AF961353FE8A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0F47
Signing time: Thu 11 Sep 2025 18:00:54 +0000
Manifest this update: Thu 11 Sep 2025 18:00:54 +0000
Manifest next update: Fri 12 Sep 2025 18:00:54 +0000
Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: gtdX8SkYciTtf77UqFy4Mk8uGHCjIjhX1586ajuWoKU=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:f0:03:3d:15:44:b4:c7:97:af:96:13:53:fe:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Sep 11 18:00:54 2025 GMT
Not After : Sep 12 18:00:54 2025 GMT
Subject: CN=c90619c456cb334baf936827e626a3fe1d85aac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:2e:ea:4e:a3:1a:25:02:b0:56:d9:a3:39:
b1:54:3d:a0:e8:c2:15:52:6b:d0:75:51:4f:4f:d9:
23:d0:68:00:ac:97:35:1b:88:44:43:15:44:ea:9e:
00:5b:3b:a3:dc:f1:a6:bf:de:1e:e0:69:07:36:9b:
30:ab:3c:c1:9e:30:23:cc:c8:75:49:44:41:33:23:
2f:94:4a:41:58:60:cc:f1:9b:8c:be:02:e8:5f:36:
65:6f:98:31:a4:f4:bb:20:a9:de:a2:d9:15:ef:76:
83:b4:2e:57:ff:c2:1f:ec:7a:f1:1a:11:e4:a4:98:
b2:e4:17:d9:b1:6d:36:06:4f:5f:f5:d4:e1:3b:df:
ba:a5:88:d0:db:34:e0:2b:e0:ea:ae:8c:50:3c:b8:
a3:73:69:ae:80:40:75:5e:5d:64:50:18:5f:62:df:
7b:32:a0:61:22:06:f7:ce:da:15:77:01:33:10:61:
91:4b:97:36:64:cc:c8:85:e9:6e:18:b1:67:af:5e:
0e:10:ba:37:42:a3:db:43:01:96:d8:18:bd:7d:c5:
f7:54:af:7b:73:8e:e7:dc:f4:b0:3d:51:05:91:0f:
e5:61:7a:02:74:a1:ed:08:01:1c:ad:dc:92:1d:e9:
0f:60:e2:b4:3d:e2:c7:f3:83:08:95:be:1c:3e:18:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:19:C4:56:CB:33:4B:AF:93:68:27:E6:26:A3:FE:1D:85:AA:C9
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:6b:7b:a2:34:72:cd:59:73:16:d4:7c:78:0f:25:9d:2a:
b1:91:c6:70:c7:38:b2:55:c8:87:19:a6:83:8b:80:ec:a3:c5:
5d:70:ed:c1:4c:ce:26:c9:c1:bf:c8:34:7f:b2:87:36:ee:f2:
a9:e6:5b:c0:c1:a1:9b:6d:4c:67:7d:4d:7c:22:21:c7:19:b0:
84:36:98:13:18:44:cf:57:b3:ed:c5:fe:bf:5a:af:49:55:8b:
89:cc:b4:25:13:bc:5c:36:9f:8c:63:81:a2:36:73:41:96:3d:
25:1e:6d:9e:91:62:cc:48:1f:98:94:c7:8f:1b:6c:88:83:08:
18:aa:e8:64:33:76:e4:11:27:06:da:a8:d5:5c:e9:ef:a0:a7:
ad:ff:8d:6f:e3:c0:bd:f3:03:9c:20:40:1b:c8:ba:8e:c3:9e:
22:51:09:16:71:dc:7a:75:c3:f9:a2:66:3b:f6:9d:fe:f3:14:
00:87:20:56:d7:21:5c:5f:f9:93:b0:99:9d:1b:95:bc:1a:05:
ab:89:05:88:af:28:58:95:4f:03:96:c8:37:e3:58:a4:10:f6:
5f:74:62:53:f7:82:2b:16:87:ff:25:15:35:f4:72:e0:16:8b:
ac:dc:e9:e5:f1:45:63:1e:80:df:a7:94:e4:95:b4:ae:bf:af:
49:7e:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:06:45 2025 by rpki-client