Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: Km+cslumI8GWpSggauufNVA8aHkQk0IEvU3ixHDwAbw=
Subject key identifier: B3:BE:6C:5A:9E:95:74:9E:90:AE:62:05:BA:63:FF:EA:EE:51:9D:A8
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 019A1B3E5ED028EDC0D8B2C58CBB69D1209F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1685
Signing time: Sat 25 Oct 2025 12:01:03 +0000
Manifest this update: Sat 25 Oct 2025 12:01:03 +0000
Manifest next update: Sun 26 Oct 2025 12:01:03 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: s63JDGEvj0GoW1sbvmzYkFpWxvrqkJagvz/QxlneNWM=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:5e:d0:28:ed:c0:d8:b2:c5:8c:bb:69:d1:20:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Oct 25 12:01:03 2025 GMT
Not After : Oct 26 12:01:03 2025 GMT
Subject: CN=b3be6c5a9e95749e90ae6205ba63ffeaee519da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:85:4f:ec:0f:6c:3b:46:cb:9a:51:fa:b0:
d6:9c:c1:8f:7b:e4:d8:9e:1b:c5:91:43:e8:f0:af:
ee:ed:58:18:87:21:b6:ef:d2:0e:4b:87:8f:5d:85:
62:43:20:53:5b:82:ab:be:65:9c:19:ae:cc:ac:3d:
1d:fb:29:2c:28:59:c6:32:e1:5f:e3:07:57:c8:87:
4d:10:ec:b8:ce:bc:e9:9d:f5:5c:f6:cd:bc:e6:70:
9d:7b:4a:16:47:8d:86:13:23:8c:cc:c9:ef:ef:9e:
48:56:2c:f5:82:ef:39:7c:12:ce:ee:6d:b5:48:17:
dc:1c:22:ad:be:46:e4:b8:8c:a0:a4:0e:b2:e5:32:
df:aa:88:3e:73:a6:73:16:79:87:04:72:f1:4a:6a:
3e:ec:0e:8f:d5:b0:0f:54:ac:17:e9:1e:b8:04:44:
5b:59:6e:cc:a0:c8:66:71:c0:4a:b7:6e:95:8e:2a:
a7:57:9b:6c:52:0d:11:9e:28:e3:57:66:a8:48:6c:
aa:94:06:2e:78:1a:9d:01:36:82:fe:49:2e:9c:24:
44:78:df:eb:35:49:68:c0:3e:b8:4e:06:33:00:19:
67:7e:a3:8b:6d:b3:98:2b:11:18:ae:88:75:92:ab:
99:f0:db:0a:dc:a0:01:a7:57:11:74:9d:ce:7e:74:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:6C:5A:9E:95:74:9E:90:AE:62:05:BA:63:FF:EA:EE:51:9D:A8
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c1:22:73:e7:f2:15:a0:c0:d3:80:05:9f:e7:3d:7b:93:46:
64:9f:50:5a:3e:1d:16:e3:f6:ad:ae:84:cd:5b:70:a7:a7:66:
72:e2:90:8a:5c:f9:4e:7f:95:01:dd:d6:0c:5c:55:7f:a6:ae:
27:04:f3:21:7d:16:9f:07:c2:f0:0a:a8:b6:bf:9b:1b:41:58:
66:7f:98:79:83:8b:dd:ea:7c:a1:d7:bf:58:a3:c1:5e:19:9c:
6a:f0:8d:af:12:6a:ca:ad:ce:28:05:82:03:cb:36:72:be:9e:
15:36:42:ec:c9:c5:d7:8a:51:27:3a:57:fb:11:b0:ec:0f:4a:
8f:fe:0c:bd:b7:3e:b0:0e:18:df:61:99:ea:79:94:76:a2:e9:
6c:5c:9c:a0:fa:6b:f8:88:d0:1c:e4:76:5c:55:22:85:d1:34:
46:53:31:89:73:82:a8:a3:cb:bb:45:2e:91:a4:89:2c:05:10:
2b:1b:2f:36:d0:d6:68:40:83:b8:6f:cb:67:ac:ee:e9:f5:fd:
79:ec:00:12:41:85:06:fd:2e:6b:fb:40:b3:62:22:9b:73:c9:
0d:ae:1b:28:09:bf:ec:41:8e:86:6a:9b:92:56:d0:37:53:6b:
45:26:df:36:25:ed:68:90:7c:12:ae:ee:4c:f6:51:48:99:62:
7d:3d:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:31:42 2025 by rpki-client