Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: GSlOZCa2RWnqXImCoonyMS7GG3HsLc5jUh5khrxxrWI=
Subject key identifier: 6C:35:A7:9E:77:46:33:EA:09:E0:3A:EE:C2:4B:6B:CA:89:EE:1D:27
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 019A725C4E29A333BE1705D9D68FF82887B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 041F
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: 5bYIEpTcdt3Oybv5ymCpchARHzkfEnwUhuopdUEcWp0=)
2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4e:29:a3:33:be:17:05:d9:d6:8f:f8:28:87:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=6c35a79e774633ea09e03aeec24b6bca89ee1d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:89:a8:0e:ad:33:7c:54:63:cf:27:7e:0c:
57:ff:d6:62:d2:57:6b:b5:d6:88:ea:6b:4d:78:5a:
7c:a9:19:52:65:a9:f7:28:77:6d:2d:bf:3c:7c:41:
cf:87:11:d8:dc:b6:cb:79:ae:18:5a:c1:bb:de:92:
cd:66:d5:bb:dd:fa:fd:6f:dc:27:2e:69:56:86:f4:
f7:cb:2a:28:9e:f9:70:e4:90:b6:4f:d3:5a:21:8a:
55:3a:f6:a2:3a:96:0f:50:85:06:19:b0:b1:ca:3c:
c4:ad:5e:cb:e2:da:c1:e3:8d:17:d6:6c:8f:b5:0a:
47:a5:89:94:ea:36:b3:8b:2c:3a:61:1e:7b:54:ef:
18:62:91:1e:ef:39:80:f2:aa:4b:50:b6:f4:73:2a:
7f:07:23:79:0c:19:0e:f2:5e:88:ca:f5:5c:34:47:
96:66:65:97:64:5b:58:bf:00:8a:84:d4:ad:b5:94:
76:43:eb:b1:4d:70:ff:19:a2:71:05:e7:a3:3e:d9:
79:e4:76:1a:c6:3f:32:a0:79:88:d5:ae:b4:bf:6f:
ba:b6:8d:e6:d7:3e:a0:cb:29:f3:93:7a:27:36:49:
40:83:7b:9f:c9:db:19:52:f1:db:42:e4:56:6a:d7:
8c:79:0b:a3:f2:a9:7e:b1:ab:1f:7b:19:b1:f1:ae:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:A7:9E:77:46:33:EA:09:E0:3A:EE:C2:4B:6B:CA:89:EE:1D:27
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:18:b4:cf:10:fc:c6:d1:34:e8:53:7f:14:08:0c:48:76:7f:
ef:90:45:ce:25:68:e1:87:a8:d8:e9:e9:ca:72:2d:15:b4:b6:
8b:55:f4:c1:77:b0:14:74:e8:5e:c8:2b:37:27:08:a0:cc:5f:
a9:aa:93:db:5f:ff:9e:2a:d4:29:e8:b5:6f:a0:ba:23:53:b3:
af:77:2d:42:c2:fa:36:cb:34:0c:56:0a:88:c0:bd:2b:72:9d:
79:96:6b:77:64:16:72:1f:2e:c1:0b:ff:79:50:85:22:72:1c:
0d:9f:c6:42:3e:53:ac:48:5f:e7:14:e7:c6:c1:3e:92:26:81:
96:b2:51:84:87:ec:6f:ec:f7:88:84:b2:88:66:9f:40:27:08:
52:f8:0c:e2:30:fa:92:b6:f3:95:65:c6:d9:cf:43:eb:cc:06:
ca:0f:78:20:34:fc:fa:9c:02:0b:43:8f:e5:09:c1:03:56:dc:
5f:eb:e8:08:a0:51:11:f1:b6:71:92:90:9c:85:15:44:ac:e0:
9b:cb:69:c1:28:3c:12:4a:7b:e1:8b:4d:3a:00:50:f9:e3:09:
3d:85:01:74:0c:96:e0:43:bf:07:a8:e1:b8:17:56:4c:16:a2:
c7:61:1b:e9:85:d7:d8:c6:09:e0:94:90:9d:f7:b8:7f:a9:80:
c7:2c:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client