Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File: A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier: D9GGgtNBNHWBTx6yNBoFovi5/yqqnfEsXtKAeP5C1gA=
Subject key identifier: 1B:35:55:6B:51:47:00:E4:86:58:E5:DC:9A:62:6C:13:1E:6C:29:DC
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial: 019A4DAA8BF02DA7B7544ACAC40DF8DF6A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: 7x/lcYOhFsC5+/O0kbYhi+D9YetiJiclHurICSP/dic=)
2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8b:f0:2d:a7:b7:54:4a:ca:c4:0d:f8:df:6a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=1b35556b514700e48658e5dc9a626c131e6c29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:8b:f1:71:7e:1f:2f:c4:30:16:48:8e:6f:
42:34:01:17:3f:eb:31:06:f2:a6:a8:26:01:d1:79:
d5:4f:29:da:18:91:bc:52:2e:27:6d:7a:37:6f:18:
bd:10:77:49:70:f3:44:00:18:fd:f5:52:45:74:1f:
08:91:6e:86:ee:0e:73:5d:30:83:8a:e7:3e:2c:98:
f9:c4:c4:34:4e:76:89:05:d5:d9:30:e6:5a:eb:2f:
38:71:3d:2e:6f:74:95:26:02:a5:17:a9:f7:3f:02:
39:24:1d:32:a9:ab:84:3b:db:e1:59:4b:40:de:f8:
b8:ee:c1:3e:20:7f:c9:5e:f8:99:6e:0f:be:ba:cf:
27:c3:4d:67:29:89:3b:b5:8b:e7:7c:49:7b:f3:d8:
b6:f0:3d:cf:5a:61:c0:75:af:3d:0b:b9:86:5f:49:
85:5b:f1:7a:64:bd:a8:b6:e6:bf:9c:70:90:fe:6f:
b2:0f:1a:29:6b:5b:da:aa:c7:c8:a0:ce:ec:8e:1c:
cc:a6:5c:9c:b2:e9:6c:86:62:ab:28:e5:d5:ab:2b:
95:26:1c:2a:cf:f4:b8:bd:8e:4c:fd:8f:a9:bf:d0:
5b:11:d7:68:d5:67:41:4e:8b:08:0c:76:06:c0:73:
9a:60:ce:dd:88:29:18:68:98:9f:d2:f2:0e:99:01:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:55:6B:51:47:00:E4:86:58:E5:DC:9A:62:6C:13:1E:6C:29:DC
X509v3 Authority Key Identifier:
keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:96:8d:72:7a:29:82:96:0d:19:52:9c:fe:ed:35:d4:cc:
52:78:61:8b:00:08:7f:f8:93:bd:26:61:a8:d9:46:b9:c1:14:
26:4b:c6:97:b4:75:f7:96:34:de:81:66:da:1b:20:33:cd:9d:
f1:da:54:3d:12:c7:38:23:79:9e:3f:54:73:73:88:2d:ac:85:
27:b5:48:aa:02:b1:c2:87:54:28:8b:7b:cb:f5:49:ad:84:e2:
b3:04:a6:53:20:1f:46:e6:00:cc:64:99:f0:bc:5a:c3:59:e4:
13:9e:59:d5:ac:b9:6a:e8:66:1f:3d:31:c1:4d:4e:28:25:04:
50:10:70:f7:07:c9:43:57:c9:99:8d:67:9b:89:b5:01:f4:60:
98:87:0c:00:a2:9e:f7:a8:9d:1a:f7:78:30:d1:f2:5a:ec:82:
6a:5b:2d:5b:90:78:9c:5f:c9:91:21:2e:ba:88:af:b7:88:83:
bd:56:b1:8e:0a:e1:8f:9d:42:52:40:58:1f:53:15:0f:12:8a:
95:5e:3a:a5:97:ea:df:3a:49:d5:8f:de:97:e9:82:75:80:66:
98:11:05:fe:48:93:e9:0c:d2:07:d8:ba:69:a3:b5:b8:db:00:
66:e6:83:d8:0c:ad:7e:c8:9b:a0:c8:12:85:53:92:45:b6:63:
8c:33:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:17 2025 by rpki-client