Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: Dy0UJtlT5K5U/sGPnBOugyE4mffTZIiq1v9UBlkLiTU=
Subject key identifier: 0F:88:DE:DF:21:35:C0:ED:23:E5:2F:2F:32:BC:79:E5:E4:66:8F:67
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019A221B512019269948BEF38AA59864EE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0BDF
Signing time: Sun 26 Oct 2025 20:00:06 +0000
Manifest this update: Sun 26 Oct 2025 20:00:06 +0000
Manifest next update: Mon 27 Oct 2025 20:00:06 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: vX7+HQHvTnKLgfDAT907RncguAnr2+KNXlSVMkUQmKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:51:20:19:26:99:48:be:f3:8a:a5:98:64:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Oct 26 20:00:06 2025 GMT
Not After : Oct 27 20:00:06 2025 GMT
Subject: CN=0f88dedf2135c0ed23e52f2f32bc79e5e4668f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:91:23:e6:c3:a2:9f:ad:a1:25:9f:d3:de:
d2:23:ac:6a:23:39:c4:0d:91:f0:96:92:59:8e:1d:
26:1b:24:4a:f0:16:4a:2a:15:26:15:7f:f6:88:f0:
0a:f0:02:df:c0:e4:94:0e:06:0d:51:da:4f:ae:e1:
5f:e7:7b:8b:78:4f:d8:b7:81:42:28:5a:aa:09:02:
d2:3d:a8:94:d3:86:30:2a:15:50:16:3b:6d:58:07:
c7:13:61:12:12:d9:67:db:f9:4d:c5:63:bb:64:c0:
eb:61:ee:cb:7c:4c:ec:07:cf:e0:b8:60:c7:cf:20:
3b:5c:34:7e:ce:e4:a3:6b:64:3a:be:f1:cd:89:cc:
b0:32:fd:31:8f:42:04:f3:b6:fc:d2:8c:5c:8b:00:
93:07:e7:10:99:c0:39:2a:48:11:14:db:c8:a9:32:
05:60:c9:7a:aa:dc:0d:f8:7f:52:74:dd:69:dd:29:
df:ed:3f:4d:4d:72:8c:2f:1e:82:0a:9b:6f:fc:e6:
fd:11:46:5b:c2:fa:8e:c5:1c:42:df:b7:4a:8b:96:
45:f4:e0:bb:81:0e:88:ac:59:17:cc:be:75:c5:cc:
25:d5:63:e7:80:1f:89:df:9c:9a:3d:3e:88:71:9e:
62:17:00:df:74:af:f2:a7:ff:1b:e5:c6:b2:bf:47:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:DE:DF:21:35:C0:ED:23:E5:2F:2F:32:BC:79:E5:E4:66:8F:67
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:91:06:34:93:06:60:2c:00:9a:be:c7:f4:6b:2c:bb:fe:
5f:30:4e:57:cd:79:f2:ef:78:e7:2f:e3:4a:fa:81:0e:60:c5:
4b:54:92:fe:e3:cc:8e:95:42:ca:16:27:60:59:d8:91:63:fb:
83:27:db:b5:23:f8:07:f2:08:7c:91:38:a3:79:6f:39:07:70:
b3:49:1e:0b:3d:ba:bf:27:f2:fe:97:e8:37:37:92:85:6c:5d:
b5:bc:f8:49:d8:57:ba:af:5e:43:d2:72:a1:29:2b:14:e8:64:
7b:02:a6:c0:07:cd:41:2d:73:c2:34:4c:f9:0f:e8:5d:dc:92:
5a:38:da:fd:dc:00:53:f4:92:8e:37:c6:ef:f7:3d:41:d9:a0:
80:ab:77:93:ca:61:9c:01:4e:09:a3:ab:2f:77:dd:d3:1d:6f:
44:65:81:33:3b:27:b0:53:19:32:e8:f9:c8:66:97:14:f3:6c:
d2:a8:3b:c2:9c:f4:b0:da:bf:8a:80:db:4d:3d:de:bc:f3:86:
9d:00:f3:7b:d8:ff:de:5b:49:c1:a0:06:8b:37:96:16:5c:61:
0a:73:e5:bf:b0:cc:d3:55:67:42:0b:11:ff:03:47:57:d0:6c:
95:03:de:47:b0:b1:1d:b1:31:c3:53:0f:b5:0b:0e:96:5a:99:
d4:9a:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:27:53 2025 by rpki-client