Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: mxg4U0WNj4DnZXnTQ2h9AaTyBb3zpbcDYnJ80Uqv4nc=
Subject key identifier: F2:A3:2D:8A:3E:4C:94:52:C7:9F:3E:43:B1:10:01:AE:5C:4F:AD:28
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019A1B06DC622C8198C1738823678F9DA034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 15DB
Signing time: Sat 25 Oct 2025 11:00:25 +0000
Manifest this update: Sat 25 Oct 2025 11:00:25 +0000
Manifest next update: Sun 26 Oct 2025 11:00:25 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: O8qEciVBjDooFokDnHqAMc9PpWM.roa (hash: RGa2nLDp0/bHbVbOkr73dwyquGWNJsV+DHv7xfkWAwg=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: 48B32ANgLz+h5jSWrrz+BnX7G9jFNvElqJK1y032gHU=)
8: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (hash: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=)
9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:dc:62:2c:81:98:c1:73:88:23:67:8f:9d:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 25 11:00:25 2025 GMT
Not After : Oct 26 11:00:25 2025 GMT
Subject: CN=f2a32d8a3e4c9452c79f3e43b11001ae5c4fad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:77:ef:31:08:69:42:2c:a7:0e:f0:6f:c5:
01:b8:32:cc:29:7c:51:c6:54:76:41:d9:be:dd:b1:
87:a7:48:ef:cf:43:86:24:57:b3:ce:21:8b:90:b4:
3c:36:2d:eb:ff:36:d6:75:2a:20:df:17:41:ef:93:
3f:28:ff:8e:ac:eb:1e:32:c7:1d:7d:a7:b4:3f:12:
cf:b7:aa:11:c6:68:45:bd:1d:64:ef:8a:4e:a9:08:
5b:16:68:95:08:fa:3e:80:7c:4e:e1:ac:53:61:57:
f4:9a:4b:e1:cd:c0:0d:63:d2:2d:90:0d:0b:4b:09:
0d:bd:ca:26:3a:45:33:ed:5a:c7:77:27:39:a1:b0:
53:11:63:8a:ae:f1:ea:ae:93:06:4b:21:ff:55:65:
29:cd:d9:48:bf:48:45:b1:28:c0:d2:42:ff:af:c4:
57:13:71:44:7d:98:ae:f7:24:8d:20:78:3c:6d:c7:
e2:9f:9e:d6:7a:ea:ec:45:88:51:13:ca:69:a5:d9:
c0:87:fc:c1:1d:bb:52:27:80:94:04:12:f4:bf:3f:
1d:ec:31:72:f9:9b:03:cf:8f:10:55:42:76:e1:e5:
18:cf:f3:63:98:20:a6:d5:77:f8:49:07:bf:e9:a6:
87:d2:28:4e:cf:d2:e4:d5:bd:d1:56:5b:52:c5:a4:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:2D:8A:3E:4C:94:52:C7:9F:3E:43:B1:10:01:AE:5C:4F:AD:28
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:2d:f3:fc:33:de:30:fc:1f:67:4e:a9:c5:ad:cb:6b:35:
d5:6d:a0:fa:46:1b:e0:91:63:42:0f:a6:e8:f5:73:48:a3:29:
39:04:8b:9b:36:12:fb:95:60:06:e5:89:5b:25:c9:3f:19:b4:
68:ca:cf:63:45:59:d5:dd:cd:f5:bb:d7:17:7b:5b:96:fd:51:
e8:05:72:ef:5d:46:9c:44:a1:a9:5c:93:6d:1f:1d:2f:13:f0:
f9:27:0f:f9:a3:4e:8e:3c:1a:d0:a3:c2:89:47:84:91:8f:47:
17:46:64:07:1e:04:42:bb:9f:27:77:f0:ab:5c:7d:32:2b:ad:
77:f8:2a:f8:b2:f3:b0:33:b0:fb:da:2d:86:00:42:f6:1a:db:
f5:3f:36:53:31:70:48:a2:67:05:9d:ad:ab:c6:2d:2b:f4:8d:
9a:0d:b8:7b:0e:eb:7f:8d:c6:27:ea:39:75:03:93:5c:22:39:
ba:82:ab:1c:4a:94:4b:37:97:65:17:78:b7:fc:25:53:eb:5c:
2d:d4:cc:ed:c3:21:3a:8d:2d:b2:37:41:55:96:91:bb:95:19:
2f:21:86:34:3f:bc:93:88:7e:6f:2a:06:6f:fb:04:e7:0a:a2:
51:4b:bb:fb:ea:30:19:72:c2:ae:cf:47:9b:b2:cf:01:7b:6b:
3e:25:67:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:56:57 2025 by rpki-client