Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: emcPXsnu9RT8htaujfFdd2/49gFPEMWD21ByaB1oAv4=
Subject key identifier: 34:2C:04:0B:0A:64:8A:D5:6F:FE:E5:FD:90:C2:7F:12:BA:CD:08:3B
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019A24AEE2B28F6C01075F633CC1D4737CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 11AB
Signing time: Mon 27 Oct 2025 08:00:32 +0000
Manifest this update: Mon 27 Oct 2025 08:00:32 +0000
Manifest next update: Tue 28 Oct 2025 08:00:32 +0000
Files and hashes: 1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: I7XXUgDCLI2wwoF47WZtX7rkM6iKlF/39w4/Oa0D0ig=)
2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:e2:b2:8f:6c:01:07:5f:63:3c:c1:d4:73:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Oct 27 08:00:32 2025 GMT
Not After : Oct 28 08:00:32 2025 GMT
Subject: CN=342c040b0a648ad56ffee5fd90c27f12bacd083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:00:e1:68:cc:4b:e8:b4:27:6b:12:27:d1:
e5:b9:2a:f7:94:13:57:00:d6:b3:5f:77:94:ff:12:
c7:dd:1d:c9:18:41:e2:7d:14:e7:71:0d:1b:21:74:
d1:0d:54:fe:e6:e6:f8:a1:c5:07:47:2d:a6:ae:42:
a4:77:a9:50:24:84:d5:fe:dd:3e:43:80:e8:9e:e8:
a5:c2:f1:0d:42:7c:c3:34:e0:dc:6f:56:00:31:01:
73:35:59:85:e7:23:ac:13:9c:7a:98:6e:1e:e0:60:
e0:8e:d8:3c:b1:03:63:82:02:92:91:8a:c1:ba:3b:
ef:23:a4:66:43:c6:ee:fb:25:59:50:b4:d0:a9:58:
d7:41:3d:bf:8c:3d:14:3f:e7:5e:54:f8:18:be:84:
3a:7a:a9:0e:de:4b:03:86:a4:64:2a:13:5e:fd:38:
a4:4a:0a:7a:fc:1f:ed:7e:f3:58:7d:1b:0b:01:97:
40:db:91:38:d2:1f:42:3b:1f:d5:11:6a:48:ba:24:
dc:69:f3:f3:11:27:d2:2f:d3:49:b7:f1:ca:28:b7:
7a:04:a2:1b:0b:7d:e7:d5:5b:3c:bf:3c:dc:da:78:
b8:6f:c2:c5:34:ec:f4:96:fd:3f:0a:02:4f:d9:29:
12:b7:17:17:67:77:2b:1d:e4:ab:3d:ab:0e:7d:8a:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:04:0B:0A:64:8A:D5:6F:FE:E5:FD:90:C2:7F:12:BA:CD:08:3B
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:0d:ee:af:77:ba:ba:a4:12:3b:38:12:88:ec:09:3d:52:
df:95:55:99:fd:95:17:80:b8:56:23:f9:26:74:c4:21:4e:3a:
06:da:51:b0:0a:31:d9:19:99:8f:17:27:c6:49:2f:a8:83:19:
1d:10:4c:7e:96:96:33:f9:87:be:48:6e:0f:b6:f1:6f:d0:0a:
53:a4:c2:43:b0:2a:d4:d1:94:1c:f3:5d:72:8d:6e:16:ac:be:
25:90:4b:47:24:d9:dd:07:bb:45:99:3b:ab:00:6d:a3:32:0e:
32:41:02:2c:c5:33:87:c4:66:7b:f9:80:37:3e:df:1a:0b:c3:
5e:84:c7:d4:48:84:f9:89:38:3a:e9:44:b6:e3:93:76:31:36:
86:dc:f8:ff:8c:78:17:68:32:05:9d:91:4f:fa:e3:f8:c6:16:
32:6f:30:f3:c8:0a:e9:ef:fa:24:07:68:92:c5:45:82:20:1b:
51:72:10:0d:64:ab:03:3b:69:56:2a:fe:c5:56:90:04:db:31:
67:fe:52:71:ad:04:fc:90:f0:f5:fc:97:2a:ef:0e:e6:dc:77:
f6:d6:22:94:55:07:1c:8d:7a:8c:2a:11:a6:f7:30:0d:4d:83:
e4:44:10:ef:63:f3:53:a3:17:ea:95:91:8f:f2:39:99:e8:91:
e2:02:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:11 2025 by rpki-client