Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: GiIp1w5SzIFH2Ojy54uqHO+o45CirtWDDpF12ULFiTc=
Subject key identifier: 93:5C:91:50:54:BC:6E:B8:C8:8E:7E:ED:96:9A:ED:3D:96:B8:89:3C
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019A4D0777EB847FFBF352D78CF92525B9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0809
Signing time: Tue 04 Nov 2025 04:02:06 +0000
Manifest this update: Tue 04 Nov 2025 04:02:06 +0000
Manifest next update: Wed 05 Nov 2025 04:02:06 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: aSJbTBqNB+2NDTUpjoRuaoNxQ59iwiJEhqxxwl93iZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:77:eb:84:7f:fb:f3:52:d7:8c:f9:25:25:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Nov 4 04:02:06 2025 GMT
Not After : Nov 5 04:02:06 2025 GMT
Subject: CN=935c915054bc6eb8c88e7eed969aed3d96b8893c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:11:a2:12:b1:b0:cc:13:43:8b:eb:df:12:
86:df:ec:d0:75:ab:63:51:33:5b:9c:2d:7f:8b:13:
2e:56:6a:e9:a1:29:af:5a:01:a5:3a:8e:8b:79:6e:
72:e8:5e:3e:4d:31:7d:39:0e:c5:32:3a:e4:15:1e:
f4:eb:0e:da:77:95:8d:32:d5:14:be:c2:5b:1d:6c:
95:cb:d6:e5:ce:9f:56:1e:27:12:ee:07:09:64:6b:
84:84:f0:28:7e:07:fa:38:d5:a1:b0:17:6e:8e:3b:
34:1b:43:1f:b5:b9:b1:6d:73:36:bf:6b:a1:19:d4:
6f:5b:a8:69:0b:6f:17:56:5e:b2:f8:d1:dd:38:82:
b3:54:23:1d:17:48:12:18:21:29:6a:6b:98:86:41:
72:bc:c2:60:39:e0:e9:be:50:f9:6c:3a:2f:35:4a:
bb:09:df:ce:67:c8:cd:8f:9e:8e:32:ec:42:f9:b0:
e5:e8:10:c8:e2:1b:42:42:6b:3c:24:3a:d4:12:c7:
87:90:cf:29:74:a7:16:e0:31:cd:54:6c:ed:3f:57:
7b:c7:ad:2c:82:26:4a:9d:ba:66:9a:72:3f:5f:05:
01:63:95:fa:ce:94:f0:25:17:84:b8:10:1d:32:f2:
d2:66:dd:f4:76:81:00:c0:7b:96:83:a8:64:24:25:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:91:50:54:BC:6E:B8:C8:8E:7E:ED:96:9A:ED:3D:96:B8:89:3C
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:4b:2e:bb:15:0b:64:7e:67:4f:64:e7:85:73:16:78:03:
78:36:01:51:cf:4f:d2:49:f4:36:eb:2d:35:1d:10:a3:56:2c:
79:b9:31:93:6b:e9:25:d0:ad:30:7b:9e:d0:c2:a5:b4:a6:86:
43:22:22:51:be:79:56:e6:45:64:1a:c1:93:fd:d0:99:6b:1d:
af:68:c6:29:e9:f7:a9:15:8c:38:f3:3b:01:8a:15:08:18:a9:
54:8d:1b:43:23:d6:28:4e:68:fb:83:b2:f5:0d:56:01:ef:20:
43:0c:61:bf:c2:57:e0:8c:34:35:ab:97:98:12:b0:7f:76:33:
34:c5:6a:b9:b4:41:6a:8c:61:dd:3b:76:70:7c:be:db:c9:96:
30:23:e3:3b:70:25:67:a9:ea:f7:0d:f3:6b:86:67:11:d1:94:
54:f3:c8:a0:08:6e:4d:e5:42:45:20:b6:39:66:70:cc:16:26:
8f:58:52:14:b7:60:67:1d:3a:dc:28:b0:20:53:f7:4a:91:54:
c1:ff:47:46:03:1c:10:eb:b0:67:0a:66:0e:52:60:b6:cb:e8:
71:de:23:23:08:00:37:e1:7d:45:9e:d0:23:a0:6d:d9:61:2b:
c8:38:e8:92:c1:7e:7a:a9:14:b4:0f:af:42:8e:48:be:ea:2b:
a8:56:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client