Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: lqcEm4hI4H+pug1rKG7samVAcPD2ZMnvjPhtFuznUyQ=
Subject key identifier: 6E:E6:7A:E4:F5:67:E2:2E:7C:8E:6D:23:AE:B6:EA:4F:0B:FD:B1:5A
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019A2F3285DC59855E0C11866B8D8E4827B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 0FC6
Signing time: Wed 29 Oct 2025 09:00:31 +0000
Manifest this update: Wed 29 Oct 2025 09:00:31 +0000
Manifest next update: Thu 30 Oct 2025 09:00:31 +0000
Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: FT82wEaseuYJvH91w173VnJHlrpV+wJL3pfqPephXyc=)
3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:85:dc:59:85:5e:0c:11:86:6b:8d:8e:48:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Oct 29 09:00:31 2025 GMT
Not After : Oct 30 09:00:31 2025 GMT
Subject: CN=6ee67ae4f567e22e7c8e6d23aeb6ea4f0bfdb15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:2f:c7:13:66:a1:c5:a2:6f:e0:0e:82:de:
70:3a:2b:61:67:7c:d8:4b:98:db:fb:8c:ef:f6:37:
04:69:d5:c9:72:7d:ec:58:39:ab:bc:6e:65:b6:0d:
d3:84:98:b1:ca:87:d6:bb:30:3d:95:1f:f8:fb:fc:
2c:d1:ad:3f:2d:04:9f:ce:80:bc:3d:1d:6a:2a:17:
2c:ca:7f:50:a5:42:3c:6f:49:d1:b1:46:d9:8b:02:
23:b5:05:c5:40:f0:bb:20:a3:7b:66:b8:dd:f6:20:
83:9d:54:6a:12:e6:c2:d5:92:0a:cc:10:07:2b:b6:
65:a3:c3:d7:ad:93:38:d8:19:59:ea:35:9c:d6:24:
a7:2e:5b:1e:e8:02:b9:7d:e1:73:b9:7c:ae:58:c5:
c5:af:95:96:b5:96:86:5d:02:c8:8b:a4:ce:b2:f6:
97:3b:39:35:2f:f8:15:4d:5c:54:9b:5a:4a:0b:6c:
22:fd:f0:ae:ba:01:71:94:fa:0d:ea:09:fc:b6:e1:
49:3d:a0:b4:b3:89:e9:3b:3b:57:b3:12:59:cd:cc:
21:fc:68:37:b1:92:d9:04:be:84:28:1a:75:f8:bb:
e8:20:ba:eb:67:79:62:9d:0f:e9:a1:2c:17:12:bf:
af:4f:38:0c:14:8f:51:c3:4c:1e:ed:07:59:0b:78:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E6:7A:E4:F5:67:E2:2E:7C:8E:6D:23:AE:B6:EA:4F:0B:FD:B1:5A
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7d:42:cc:29:15:3d:27:fe:b8:15:90:b2:a9:7c:02:13:0e:
6e:8a:24:eb:ac:f9:d0:aa:11:4e:ae:a1:65:09:25:2d:15:4a:
49:36:38:38:fe:79:e1:5b:dd:a7:71:28:ea:df:ea:ed:10:c3:
00:38:9f:37:2c:6f:26:72:27:44:fa:4c:50:fa:ef:66:36:e3:
20:1f:3b:4c:16:41:57:b6:ea:02:46:23:77:65:07:b7:29:c9:
c0:b3:8e:2e:4c:cc:eb:48:d8:82:c7:df:3b:a4:5a:0d:c7:4a:
d1:31:49:9f:a3:cb:09:04:c9:a6:ff:b5:bc:a9:21:17:f8:54:
d5:56:0b:b4:58:f9:b8:a3:ab:82:e5:f5:99:d5:93:5f:86:0e:
5c:86:cd:94:11:f4:fb:83:63:12:03:66:39:3e:4f:a6:6a:24:
4b:63:96:d6:9d:b8:47:4d:dd:7c:0b:38:8f:23:95:2b:33:9c:
51:74:52:8f:92:9f:56:c0:b0:e6:99:40:fe:e5:3f:dc:7a:64:
f8:57:ab:c4:a9:ea:15:da:f6:7d:92:90:d4:f4:4b:90:13:c2:
14:fe:62:21:da:71:c7:c3:c1:2c:72:c8:5d:59:6e:3f:87:ae:
fc:27:91:8c:8d:f0:b6:23:94:67:ce:e0:2d:14:59:25:77:65:
6a:24:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:16:13 2025 by rpki-client