Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: FdTK8pmUkLyFE3D2vck3Y9cjjBmjSAbrxrtBVy0YNm8=
Subject key identifier: 54:E3:E7:ED:BD:A2:8B:72:7B:1F:24:82:AA:9A:11:5C:F1:7E:9B:31
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019A72935C90B074EE1357B8E519530570E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0DF6
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: n3EojnxFwojxdvShue2mGrvQsyOs+SbIVVyA7YfKORI=)
2: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=)
3: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5c:90:b0:74:ee:13:57:b8:e5:19:53:05:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=54e3e7edbda28b727b1f2482aa9a115cf17e9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:a2:0b:93:f3:a5:d9:14:88:7e:51:a4:a2:
3e:c5:f5:16:57:48:d3:e1:44:5e:9f:df:af:46:31:
69:ae:5f:b0:e3:0b:11:64:c2:81:80:f1:50:c0:93:
d4:f8:2f:a8:35:da:6a:b0:51:9d:21:7b:f6:41:8c:
b9:19:15:13:16:25:aa:95:c5:aa:1d:60:63:ed:75:
fd:3e:83:7a:25:14:10:f7:76:5b:e9:10:20:c5:cb:
da:d8:58:f1:aa:85:7e:f7:7d:61:96:f7:ec:62:c1:
b2:94:0b:df:96:8a:9d:a6:b1:4a:aa:fb:c3:11:ff:
67:b5:f2:0f:25:26:70:44:22:a6:24:95:00:0b:e1:
14:c7:33:a6:7f:ea:b0:18:b7:05:a5:5e:17:97:97:
74:68:22:89:0b:eb:97:87:21:e5:51:4c:a4:61:ec:
e2:9c:4b:f4:26:c3:b7:d3:4b:e4:50:69:69:44:fe:
d4:4e:70:54:ef:6a:ba:f9:24:b1:4e:9e:4d:7e:7a:
ea:2e:84:a7:db:6e:ef:43:0d:1e:a4:5e:0e:11:40:
78:6e:22:80:8d:9a:a6:64:8e:6c:b9:85:51:eb:33:
6b:a2:03:8b:f4:14:e9:e0:77:e8:c3:35:0b:9e:89:
f3:62:71:db:6d:07:ec:0d:0e:27:f4:44:27:06:c6:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:E7:ED:BD:A2:8B:72:7B:1F:24:82:AA:9A:11:5C:F1:7E:9B:31
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:96:6b:30:f5:5a:45:8a:55:e9:8a:e5:4c:c9:ba:11:94:
f2:e1:bf:a8:0b:ec:fe:e7:f8:fb:c0:e9:eb:fa:24:28:1e:b4:
95:45:d1:a4:c0:ad:67:db:d1:ba:b5:ed:35:5b:b5:7d:75:42:
07:13:e4:b8:d1:3e:05:13:ae:a2:40:e5:2c:8b:e6:8d:3d:ef:
33:9a:7d:01:f9:38:48:ab:3f:8e:88:e9:03:98:fc:40:b0:6a:
46:97:38:70:f1:bb:0e:e1:81:85:38:30:17:1e:06:c8:65:76:
c7:fc:17:03:92:82:5a:15:e9:2b:fc:07:05:d4:6d:71:1b:c3:
5e:70:f9:24:3a:f7:a0:eb:43:ba:9e:14:f0:84:30:b5:fc:80:
3f:95:51:d6:d7:b5:e8:88:24:ab:5d:46:14:47:89:b3:56:2f:
0f:63:e0:9b:87:5d:5e:fb:58:8f:bb:e5:b9:0b:e1:5a:d9:1c:
67:8c:36:86:9e:85:21:f1:33:87:94:44:dd:9e:52:a5:38:4c:
06:7f:18:24:2d:ad:da:0a:ae:0d:43:f5:3b:18:b4:41:47:65:
0e:84:0b:e8:38:1d:ae:28:cc:03:05:27:96:1c:c3:ed:5b:59:
0c:14:41:14:a9:5f:e6:29:4d:bc:0e:12:c3:f8:e1:fc:d4:35:
30:46:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:56 2025 by rpki-client