Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: CyVhRMQ/DiXjmq+LOCwQVqAfrkgdIjLgJVfnfP+4ryw=
Subject key identifier: 13:42:79:88:A1:52:E1:92:BF:EA:90:62:84:75:9B:B7:38:A2:E5:97
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019A71EEB2431C11F8F71E788DC0C60A3277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: jqZ0KlT2BoO1GUhexwnsesTtFd8tlXdnSZ5/49ojjjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b2:43:1c:11:f8:f7:1e:78:8d:c0:c6:0a:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=13427988a152e192bfea906284759bb738a2e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:68:b7:81:1f:ce:07:2c:e7:cf:53:11:93:
ca:47:ab:4b:67:fb:75:6a:30:c8:e5:4b:d0:c7:cb:
3c:59:e1:c4:c2:48:ca:0f:7b:69:89:b8:de:33:8a:
9c:cb:1b:bc:cf:b7:a5:c5:c8:f7:31:c1:49:e9:e7:
17:a9:f6:b9:f0:8f:0b:b1:7d:d0:07:f3:58:51:48:
fc:07:0c:00:15:e3:9c:f6:53:1b:a1:d4:0b:cb:17:
f8:7a:a3:c9:b3:2f:a1:4c:f5:43:52:28:a6:a5:ae:
b1:d0:e3:0a:4a:ef:1d:da:5e:63:99:6d:06:6f:86:
46:20:99:7c:af:ef:95:f2:b3:95:cd:c1:98:a4:4a:
a3:27:21:58:cd:11:a7:55:f3:a7:42:49:c0:1d:f4:
c3:09:c5:ec:ee:17:fb:8f:73:73:98:96:14:b6:2f:
c0:09:bc:dc:61:f4:f3:d0:92:b3:22:3f:cc:cb:b6:
68:8f:2e:12:e1:c9:b2:e7:d5:96:e0:a0:9e:0a:90:
83:4a:f6:d4:15:4d:01:b5:7d:8a:d1:97:46:93:9f:
6e:7f:18:1b:1b:8d:e5:63:65:7f:1b:e7:e3:15:0f:
b0:d9:a2:fb:87:05:b2:4d:f1:9c:c3:21:1c:62:5e:
bd:fb:4e:43:44:6b:cc:6a:93:52:78:aa:11:70:00:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:79:88:A1:52:E1:92:BF:EA:90:62:84:75:9B:B7:38:A2:E5:97
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:fc:d8:2e:7c:05:58:aa:cd:b5:73:21:ea:bc:3c:c4:c3:
1a:dd:54:40:8d:b2:82:b3:24:50:a1:0f:77:7d:8b:f8:bc:55:
1b:96:2e:99:86:96:60:c6:ca:8b:95:e5:dd:60:24:ad:5a:02:
85:85:32:b9:ac:d1:65:29:7f:5b:29:b5:93:fe:61:65:ab:d7:
d2:46:52:71:9a:b0:60:26:75:25:0e:7b:6e:94:d6:86:2d:01:
89:d4:eb:2e:da:d5:17:42:0d:7f:a7:09:72:0c:1c:80:43:67:
e7:e8:75:2e:aa:ba:d3:09:22:a2:df:d9:2c:9b:4d:30:ba:74:
da:23:55:9c:a7:87:52:b2:1a:10:7d:e4:d3:e2:3f:fa:21:e6:
b0:da:c9:ee:62:b6:a4:82:df:58:2a:0c:38:d0:62:9e:3e:ff:
6e:4d:77:33:4f:12:07:82:dd:73:b8:5d:24:64:90:86:80:2c:
4b:fa:73:37:dd:7b:da:47:84:c3:fa:46:4c:af:af:33:3f:16:
75:ad:b0:81:18:d8:12:49:00:2c:2b:89:10:2d:69:99:f2:05:
f4:81:99:dd:ad:39:3a:d9:2b:6f:d3:ae:a4:50:18:15:75:9e:
c0:ac:8f:66:19:b2:f7:dc:e2:c2:a2:0f:e5:2e:25:07:d2:c4:
07:71:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:26 2025 by rpki-client