Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: qPJpY0pHSRX8+0wFGCLSAxWWRBf7yIAlb5m8N8JWykk=
Subject key identifier: 91:51:B4:BD:14:6F:89:28:52:17:4A:1D:1F:AC:38:A5:39:B0:CF:9E
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019A71B8418BA24678F3605AAD290EA58B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 1195
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: JXXDHvD42aj8sNeXAt9OvQzZhsuegSoLE1nbKRU7kn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:41:8b:a2:46:78:f3:60:5a:ad:29:0e:a5:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=9151b4bd146f892852174a1d1fac38a539b0cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f1:a9:63:7a:b2:c8:09:ea:8d:03:58:60:70:
45:c2:aa:11:ce:20:88:3f:bf:9c:9c:32:6a:35:d4:
1e:d6:b8:41:3b:b3:9b:ab:3b:f0:2c:6c:dc:09:b8:
e1:ce:d6:c0:8d:9d:c7:8d:a6:2f:82:30:10:66:44:
9b:8f:ef:dd:48:17:31:97:b7:4e:fd:10:ae:a8:d1:
47:9d:43:40:f0:14:73:82:7e:f8:ff:99:02:84:a6:
3f:f6:98:0c:76:6c:40:9a:bd:75:81:bf:b0:d2:92:
62:e6:6f:50:99:f0:da:30:58:19:d0:31:b2:d1:be:
01:14:e1:70:3b:5c:6f:29:58:96:16:4f:5b:3a:72:
03:9a:1b:2f:d7:81:d0:a1:e2:8c:f0:a2:3f:d0:41:
fe:45:53:7f:27:a9:d8:79:ce:61:ef:1c:4f:02:a8:
45:7d:b0:5d:cd:16:8d:fb:de:8d:b5:2d:a9:88:80:
c4:4e:05:b7:7b:0c:6b:9d:cd:a5:19:f9:97:75:c4:
ca:fc:59:98:44:19:bb:ce:df:81:b5:b0:5a:b5:db:
55:bf:f3:ed:34:9e:a7:0b:3f:a7:c7:8a:e5:a9:be:
93:4b:23:64:bd:64:4b:d4:69:a7:89:6d:4c:2f:4c:
b5:fc:7c:a5:75:fd:18:54:96:2b:8c:df:e5:e2:e2:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:B4:BD:14:6F:89:28:52:17:4A:1D:1F:AC:38:A5:39:B0:CF:9E
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f6:b8:d5:c3:57:96:82:c0:53:73:80:a4:4b:7f:e4:de:00:
4c:48:b5:3b:f3:41:c5:97:0a:c3:f9:bf:03:ba:7f:4a:6d:57:
54:25:90:5f:cb:a7:b6:96:7f:5c:d1:bf:1f:c2:00:64:ba:15:
27:4d:c5:4e:44:a4:e4:12:2d:d9:cc:9f:45:70:5f:bf:4f:1b:
fb:80:d7:d4:db:3d:34:77:2b:b5:a2:b1:6f:95:da:5e:90:a9:
60:17:58:4c:28:34:e1:ea:32:cc:d6:69:5a:50:04:de:43:55:
92:eb:72:d2:dc:b4:cb:ab:91:1b:32:b0:ab:15:19:f7:94:63:
e7:07:b5:a4:e0:76:94:5c:55:b3:62:b3:17:3e:08:d9:3d:f7:
b9:08:48:6d:20:00:82:a7:a7:a7:8f:8f:8d:18:a7:2b:ce:67:
f3:6d:c9:7e:d6:c3:d4:7b:36:28:91:66:c4:64:88:59:a6:30:
a5:15:1e:7c:d7:23:bc:aa:96:57:f9:a7:df:f0:08:aa:60:12:
7f:ac:c4:0a:b8:5b:ab:86:09:e9:14:64:e7:88:6f:1e:02:66:
ac:c8:2d:7c:da:94:58:96:c1:e6:3c:8c:20:c0:b7:79:a7:41:
59:ce:71:5f:5c:5a:f3:2d:ef:6a:1a:9d:91:6f:ec:32:5a:02:
c9:85:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:48 2025 by rpki-client