Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: Zlc/2YueuO2yw2JnpNmuJjfu4g+po8kM9148r4i2pj4=
Subject key identifier: 8E:C8:B6:21:AF:96:D5:A6:9B:E8:FD:95:9F:38:E2:F1:A2:62:60:49
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 01992F36B5C07D8A8E784858BCF9408785CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0D4E
Signing time: Tue 09 Sep 2025 16:02:18 +0000
Manifest this update: Tue 09 Sep 2025 16:02:18 +0000
Manifest next update: Wed 10 Sep 2025 16:02:18 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: rp0ZkLOgF95vOFYhMOie1paozuc0HVweE9thphclsRE=)
2: cQgNKWK-mfm6f4cfHvy3mXBeUkc.roa (hash: Eznu0WnXIaaF/obgJMif142Kzoju4lKJjzxlXuNlG4c=)
3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=)
4: qnpsS1IYjsvMaOko98oEnyZdTNQ.roa (hash: I8xfQRtglbJjeOJDoN+r4tmjRQM6wlmlXVGeos6jp20=)
5: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:b5:c0:7d:8a:8e:78:48:58:bc:f9:40:87:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Sep 9 16:02:18 2025 GMT
Not After : Sep 10 16:02:18 2025 GMT
Subject: CN=8ec8b621af96d5a69be8fd959f38e2f1a2626049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:5c:bc:98:3d:96:68:26:c3:bb:67:6d:3f:
27:65:84:f3:2a:02:03:d3:d0:29:88:1b:68:73:36:
37:c9:27:a8:8b:19:bf:9b:dd:7f:27:b4:48:fb:bc:
49:c0:80:1d:30:73:ac:73:2e:40:e5:b3:a0:65:0f:
60:87:56:d5:bf:05:01:d1:26:ac:e1:42:f9:7c:52:
4d:57:e5:64:a8:b7:ca:c3:78:84:73:9c:3a:dc:d5:
16:11:10:e3:fe:54:be:55:92:e3:06:35:8a:02:94:
c2:03:43:00:7b:85:f4:99:75:fa:39:ed:6b:cc:d4:
e0:3d:ea:81:6d:e6:34:90:89:79:8c:7a:25:98:f1:
55:29:fc:b9:9b:3a:2b:4a:d2:ba:8c:63:66:84:a1:
4e:39:c1:5d:8f:3f:48:7e:77:d2:06:9f:2b:c9:62:
70:21:58:8c:99:7c:6d:81:4c:31:0b:98:9e:f8:3b:
90:29:10:fd:db:07:9b:08:65:b4:ac:93:64:f4:f2:
2d:eb:33:d6:a3:42:da:c1:5b:0d:87:73:eb:56:07:
bc:8b:67:47:b4:8f:b5:c5:f6:4b:8b:97:9b:87:31:
27:88:e3:6f:2a:66:de:13:9b:cf:33:57:8e:5d:9e:
b6:bb:3e:54:ef:8c:7a:86:1e:42:e3:70:89:2e:97:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:B6:21:AF:96:D5:A6:9B:E8:FD:95:9F:38:E2:F1:A2:62:60:49
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:46:d2:2c:8b:2b:b5:05:c7:0e:eb:b0:c2:76:2f:1d:54:
b8:2a:21:06:27:33:7d:b4:be:da:25:86:06:aa:a3:d5:95:5e:
4c:fa:23:0f:e7:38:08:a8:4f:87:82:c8:fe:59:30:03:fd:9b:
f5:fc:a2:7d:0e:6e:92:53:6a:ce:4d:56:6d:64:a6:22:00:35:
0d:06:89:fc:98:bb:ff:6d:fd:cf:e7:fa:fc:c6:72:a7:09:ee:
64:f7:e9:70:bd:30:15:85:c3:7b:d3:05:8a:dc:21:1f:51:bf:
61:dc:e1:68:43:6c:cc:aa:49:bf:a6:78:ea:4f:35:ae:2f:64:
09:9f:53:26:16:f2:56:97:73:ee:7b:12:d4:b0:e2:cc:bf:b4:
ad:49:f6:bf:8c:e6:7d:0e:7f:5d:fb:c8:d0:e0:da:72:3d:b9:
3d:cb:e6:59:b3:f1:04:92:a9:f2:e9:69:5e:8c:b8:ea:6c:3e:
6c:20:5e:5a:85:a9:81:90:68:1a:ff:b5:b2:88:52:c9:df:ed:
82:aa:7d:dd:c4:13:12:8e:92:34:37:37:95:86:a8:87:f9:97:
ff:fa:e4:30:97:37:b5:7c:fd:82:6c:01:2b:18:a8:3c:b1:d3:
b2:eb:e4:4f:56:27:53:0c:23:18:aa:81:2a:bf:25:d1:23:21:
32:00:fe:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNrXAfYqOeEhYvPlAh4XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl
ZWE2NzAwHhcNMjUwOTA5MTYwMjE4WhcNMjUwOTEwMTYwMjE4WjAzMTEwLwYDVQQD
Eyg4ZWM4YjYyMWFmOTZkNWE2OWJlOGZkOTU5ZjM4ZTJmMWEyNjI2MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33NcvJg9lmgmw7tnbT8nZYTzKgID
09ApiBtoczY3ySeoixm/m91/J7RI+7xJwIAdMHOscy5A5bOgZQ9gh1bVvwUB0Sas
4UL5fFJNV+VkqLfKw3iEc5w63NUWERDj/lS+VZLjBjWKApTCA0MAe4X0mXX6Oe1r
zNTgPeqBbeY0kIl5jHolmPFVKfy5mzorStK6jGNmhKFOOcFdjz9IfnfSBp8ryWJw
IViMmXxtgUwxC5ie+DuQKRD92webCGW0rJNk9PIt6zPWo0LawVsNh3PrVge8i2dH
tI+1xfZLi5ebhzEniONvKmbeE5vPM1eOXZ62uz5U74x6hh5C43CJLpdWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7ItiGvltWmm+j9lZ844vGiYmBJMB8GA1UdIwQY
MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt
NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm
LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw9G0iyL
K7UFxw7rsMJ2Lx1UuCohBiczfbS+2iWGBqqj1ZVeTPojD+c4CKhPh4LI/lkwA/2b
9fyifQ5uklNqzk1WbWSmIgA1DQaJ/Ji7/239z+f6/MZypwnuZPfpcL0wFYXDe9MF
itwhH1G/YdzhaENszKpJv6Z46k81ri9kCZ9TJhbyVpdz7nsS1LDizL+0rUn2v4zm
fQ5/XfvI0ODacj25PcvmWbPxBJKp8ulpXoy46mw+bCBeWoWpgZBoGv+1sohSyd/t
gqp93cQTEo6SNDc3lYaoh/mX//rkMJc3tXz9gmwBKxioPLHTsuvkT1YnUwwjGKqB
Kr8l0SMhMgD+qA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:47:04 2025 by rpki-client