Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: FZ1g1E2e20/CS/wqbKvKAzq8EYI/nkfEF59JuUNMZz0=
Subject key identifier: A3:E8:42:0B:3D:16:6B:AB:12:7E:B8:F4:BE:43:3B:A7:C2:AF:E1:9E
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019A71EEA97BE285A4B18C6339F3893E7667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: Zg6KU1DSabcZcvaXKTa9ODTbVOVD/MeMPrgE5scB4oc=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a9:7b:e2:85:a4:b1:8c:63:39:f3:89:3e:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=a3e8420b3d166bab127eb8f4be433ba7c2afe19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:8b:03:4f:ee:cc:cf:68:4c:97:73:d1:ea:
86:0a:6b:bb:7e:6b:38:f5:cc:bf:b2:5f:71:19:ec:
52:68:9c:9f:ad:fe:fd:9e:6e:05:33:ed:4c:03:d7:
b4:b9:ab:7e:64:e9:d8:68:fa:7b:33:3e:20:7d:fe:
73:34:6e:68:58:43:4e:b4:ce:a9:c6:53:f7:72:8d:
7e:8e:5b:54:18:f7:7e:8d:e9:23:44:ad:5e:cf:77:
fb:11:9c:13:da:dd:75:86:19:37:27:69:2c:db:61:
6b:4c:8e:e1:61:52:34:58:59:f5:37:17:a1:35:a7:
d9:e4:d4:4d:19:38:2d:20:e8:38:4c:76:6e:1d:3b:
43:df:c1:64:e8:9f:5b:8f:06:9e:fe:11:9c:63:33:
78:33:44:60:e2:11:ad:c6:91:6b:5d:e6:63:27:66:
d4:12:20:ab:82:a3:c0:a4:61:75:24:95:ae:7b:9b:
3e:49:8e:35:d7:19:ed:17:c1:0c:40:f8:9f:e1:95:
a5:39:58:a3:a1:22:48:05:bc:10:d6:02:93:b8:8e:
22:ec:1e:f7:35:52:db:fd:56:f5:f6:be:0d:05:a7:
1b:3a:11:ea:22:9c:c0:c9:c0:2d:74:35:c4:65:7d:
03:b3:a8:cb:86:6e:b6:59:d5:ef:7b:58:36:e8:99:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:42:0B:3D:16:6B:AB:12:7E:B8:F4:BE:43:3B:A7:C2:AF:E1:9E
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:ed:87:ff:f8:34:6f:6d:95:07:68:72:8f:88:7c:39:9d:
dc:83:47:58:b3:5f:f0:38:99:91:9c:24:56:42:d3:2b:56:05:
9a:0a:21:fd:02:51:85:04:9f:36:be:37:b7:16:09:fb:be:4c:
93:31:78:bb:43:e2:54:92:7f:fd:a4:36:db:bc:0b:bc:36:aa:
40:22:b4:57:83:a9:6a:5f:33:d6:4e:f6:4e:9f:38:04:70:80:
65:2b:39:1e:fd:e0:5a:e1:3e:86:9c:7e:e8:94:9b:86:b7:cc:
90:04:bd:84:92:a3:96:dc:a0:16:02:d7:0d:7b:c3:90:f0:62:
6b:9d:a2:a8:df:c7:da:47:b5:e0:ef:a3:3e:6d:57:08:0a:65:
aa:ef:1b:de:f0:4d:25:fd:ad:2c:d6:50:e4:45:2d:34:c9:b6:
5b:7c:cd:e8:48:d4:03:18:32:fa:8a:58:f7:7e:8c:4e:59:bf:
d2:d8:9d:88:f7:aa:28:1b:71:80:30:79:62:38:41:93:21:97:
0d:1e:29:b6:52:59:df:6e:18:7c:4a:f1:fc:5f:36:fc:49:88:
bd:59:e2:dc:7e:f7:c3:ed:1a:18:35:09:e6:71:22:ad:85:b1:
fa:06:6e:44:1a:34:a5:c4:b9:8a:49:50:94:22:a8:67:64:08:
b9:f5:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:43 2025 by rpki-client