Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: dNcNsl0U/NnNnBmoQbTs54cpY9dfgPWLbXdVc38RAW8=
Subject key identifier: 0B:8A:48:48:BC:B4:7E:98:0C:6E:4D:3B:5B:EE:61:FB:B7:89:F9:04
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019A714A0F821B27DB3F934E244754B776E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 28
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: 3Gh8OdXmWQdIZ4mk5HiPN4TPVh4.roa (hash: Cp0uJqQCCfVS+mC0KewqKWaLegack3UYWeQPqXDJvvI=)
2: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: Y/v12vlRZhnkmQCgbSHQdTLJ4lPtleT2rED7QsYS8SY=)
3: sChO2wUfE9hSdmv4khdrkrYtnMk.roa (hash: /INpfWnZY160HpcHDvzWJGinUo9LuDU7A4NCloJUW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0f:82:1b:27:db:3f:93:4e:24:47:54:b7:76:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=0b8a4848bcb47e980c6e4d3b5bee61fbb789f904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:25:aa:e3:2d:14:30:38:77:65:4f:26:87:
e4:9f:43:1d:a1:86:a0:31:d6:7e:1f:eb:be:56:a0:
cd:16:3e:6b:38:fc:ec:0f:cf:2a:02:25:3d:0f:ad:
57:04:37:92:4a:59:f2:bc:29:65:86:84:7b:d6:24:
fd:09:73:2c:c1:15:e8:d2:2c:bd:28:ad:ba:61:1c:
33:ca:ff:77:d1:79:50:82:38:7e:84:b6:d2:2e:eb:
20:02:db:b9:61:6e:61:ed:2b:11:bd:45:c8:7c:4e:
47:e1:77:01:bf:a4:c0:74:88:d5:55:36:fe:59:00:
e0:ee:51:d5:96:22:f1:e7:3c:e4:ff:44:e3:df:39:
69:33:d8:d2:20:a8:f6:6b:70:2a:c9:2d:90:59:b5:
62:14:d6:85:b5:81:08:68:a5:c7:07:70:83:51:95:
bc:9c:79:16:8f:04:58:83:06:fa:d4:d3:65:0a:e1:
ab:5c:b3:e1:25:1e:dc:da:18:de:c9:04:78:39:52:
89:c3:e2:a7:38:4e:6a:26:bb:7a:c1:bd:c4:94:f4:
d0:4a:6e:5c:05:b2:ca:ab:18:1d:61:7c:80:e9:73:
22:34:ec:f1:ab:99:a7:ef:c3:d1:7b:87:6f:53:ad:
02:78:a4:62:b9:0b:ef:b7:56:37:14:0e:ec:85:9c:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:48:48:BC:B4:7E:98:0C:6E:4D:3B:5B:EE:61:FB:B7:89:F9:04
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:08:09:ef:4e:fe:c2:d9:50:ac:f5:a6:8e:a8:a0:ba:28:9d:
12:08:a9:54:42:25:6f:53:60:32:e0:49:14:16:df:b2:8d:70:
2f:8f:c4:51:97:64:ea:f5:ef:01:f9:0d:d0:b0:0a:0d:27:65:
bf:e5:2b:9d:0f:d1:32:b5:ca:e4:4d:14:c4:00:9e:7e:be:0a:
ba:b4:36:9f:65:f8:50:5e:91:3d:ba:62:7b:a1:24:3b:37:82:
96:dc:0a:8a:8c:0c:73:a5:96:20:2c:ff:98:12:aa:69:c0:54:
f4:d9:8e:f5:a8:e7:a5:6c:79:d5:e6:5e:23:32:7c:51:3f:94:
71:87:30:7b:96:47:d3:a6:84:2e:19:f1:87:7e:ed:66:0d:7b:
19:16:1c:b8:aa:3a:a6:90:7b:5a:50:6f:7f:c9:7e:b0:5d:ff:
13:49:ee:ed:bb:a8:18:0d:83:22:28:a2:83:4d:ab:c1:4b:6d:
b6:a6:48:6d:fb:01:b8:e0:55:a3:94:2d:fd:80:9a:99:bf:55:
d5:d2:7b:41:9b:2f:35:8a:f9:45:bb:a1:00:6b:26:7e:c2:02:
31:62:a8:84:fa:be:34:f0:1d:97:b4:db:f8:d1:c5:be:5e:1c:
25:78:5c:cf:d8:af:d1:c6:3f:ab:81:3f:a8:5f:b5:9b:36:35:
69:8c:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:18 2025 by rpki-client