Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: yhJ2nq8ezZSDA3N4U29EuAqmKRqAtj2R5M1UamkBRW0=
Subject key identifier: F9:FB:A8:BA:4D:EE:BB:70:14:4A:6E:3E:3F:55:08:A2:FD:80:A9:6C
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019A55D2426C39B6901D367A1F69C07DE846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 21:00:34 +0000
Manifest this update: Wed 05 Nov 2025 21:00:34 +0000
Manifest next update: Thu 06 Nov 2025 21:00:34 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: ZoCVVjqLs6wkP5I0a5fJudlNvWkG0qAxstCz4CZrkFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:42:6c:39:b6:90:1d:36:7a:1f:69:c0:7d:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Nov 5 21:00:34 2025 GMT
Not After : Nov 6 21:00:34 2025 GMT
Subject: CN=f9fba8ba4deebb70144a6e3e3f5508a2fd80a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fc:7a:3e:a3:f2:33:72:74:28:77:20:d5:58:
f0:28:28:e5:24:56:6b:c5:9d:db:cc:42:ee:88:ff:
11:82:b8:cf:36:f0:ae:b9:6e:6e:35:8b:b1:54:30:
2e:71:75:d6:e0:b0:37:2f:43:19:23:de:a8:63:c3:
f7:56:56:02:79:58:88:a9:9b:2c:21:17:04:65:e4:
3b:80:1c:27:dd:18:94:17:cb:46:ab:4a:ae:ff:c0:
26:27:89:45:0b:ec:a4:aa:56:bd:2c:eb:c8:f1:a9:
43:d7:3c:d7:e8:6b:d9:9f:69:42:68:6c:fc:9f:5d:
58:53:6d:60:3d:f6:7c:fb:19:1e:fb:2d:4f:91:01:
9d:a7:ba:fc:61:53:b6:e2:82:c3:2d:07:f5:f5:24:
88:75:46:6b:12:15:63:4f:01:7f:46:8f:8b:cc:b5:
4f:e4:e7:f5:e8:8b:c4:14:af:67:34:67:79:e3:9c:
a2:ee:fd:11:6d:c9:26:b6:90:a5:df:7c:50:28:e9:
5a:25:77:09:93:82:cf:b7:04:b3:98:ce:12:b0:7d:
05:88:f4:5e:8a:28:ef:17:1a:69:4a:0f:66:a5:80:
aa:6c:e2:fc:4b:ef:88:49:36:c1:31:07:90:bf:76:
b4:29:9b:cc:ad:fa:54:ff:37:44:61:85:d3:c9:5a:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:A8:BA:4D:EE:BB:70:14:4A:6E:3E:3F:55:08:A2:FD:80:A9:6C
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:6d:c7:1f:66:49:82:c8:7e:3f:92:42:3c:47:3d:4b:87:
0c:c6:b6:71:d6:e7:2a:07:64:61:69:92:04:15:90:07:0e:b5:
aa:08:c1:b8:75:25:44:d6:48:dd:41:59:ee:b7:ec:d7:76:ed:
95:23:90:7a:ca:af:e0:97:8d:29:bb:dc:b4:b8:ba:99:00:b4:
a7:c3:88:1b:be:53:cf:88:c9:99:10:c4:6f:fc:42:8a:bb:1e:
7b:c8:d7:42:f1:a8:63:fd:63:02:48:16:c6:29:78:9c:27:ab:
b3:8c:27:12:6e:03:d4:22:42:39:b8:ad:9f:c0:e9:34:0c:fd:
2a:50:2c:b6:71:9f:20:33:43:83:24:c2:50:03:66:33:80:82:
7c:f5:8d:68:3d:7b:09:b8:92:2b:b5:dc:85:9c:73:27:93:6c:
09:2a:29:cb:7f:d5:a3:b1:7c:41:be:89:82:42:0b:1d:7e:7c:
a4:99:ad:ca:b3:8e:a4:77:8d:6b:9e:e3:8f:54:a2:56:f0:d1:
03:b0:70:9d:68:6a:8d:08:23:81:f1:f0:ff:b5:5b:bd:28:f2:
00:bb:75:c9:9a:3e:7c:35:bc:2c:39:ba:de:00:07:4a:c9:72:
3d:3b:79:26:43:7a:e9:19:57:3e:3d:ef:26:8e:f0:d1:22:59:
47:4f:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:41:10 2025 by rpki-client