Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: Le6oNXLmfV2zzNOnYxSjXAG0ZPgMSrJsBEN0HbU+iZ4=
Subject key identifier: AF:E2:26:03:E3:C2:55:38:45:2C:E9:1A:3C:CD:8E:A9:FA:AB:CE:9F
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019A4D745470A5A7801F8189607E51C1FC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 09A1
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 9hAzaXbKZ8ZMMxZ36PcXE/FeeCQ3Efv3sN/LRy2t3hU=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:54:70:a5:a7:80:1f:81:89:60:7e:51:c1:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=afe22603e3c25538452ce91a3ccd8ea9faabce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:54:28:57:88:6c:78:1d:ae:50:a3:aa:ea:
83:b7:5f:3f:b6:6c:c0:06:b2:0f:38:af:a3:0e:c3:
9f:0b:47:80:0a:ed:85:81:19:c8:89:87:18:9b:98:
33:8c:66:f3:df:29:4d:bb:5d:26:93:2f:8c:56:55:
1c:ec:88:d0:70:d5:a0:ef:b1:8f:61:6b:72:b5:8e:
25:d2:83:fe:ed:d8:d5:02:2a:58:0c:cb:ef:09:d9:
7d:82:7f:86:4a:e5:0b:b7:3d:91:e4:bd:9b:65:f2:
ec:7d:f5:3e:0f:7f:a2:18:15:67:00:a6:cc:e2:29:
9a:78:57:9d:16:7a:0f:8e:fc:30:0d:90:3f:d1:e0:
5c:ef:e1:4d:c7:8f:3f:6a:c0:28:45:53:62:57:85:
ab:1c:3a:3b:4d:0f:41:ce:65:75:11:45:ce:91:ea:
cd:8c:05:f1:2c:76:df:ca:32:7a:4f:e3:dc:8a:4f:
d8:8e:2b:27:96:e1:99:c3:51:b5:8d:c2:9a:ec:96:
54:e9:f5:c0:d0:ad:50:20:c9:a0:8b:74:a0:49:c2:
36:c1:b9:c2:62:ac:23:50:94:ce:92:48:3f:05:ed:
cb:12:4c:64:60:bf:90:05:eb:b3:ea:9a:40:7e:75:
28:66:b0:d2:82:6e:95:f7:e8:0c:dc:ba:0f:ac:3c:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:26:03:E3:C2:55:38:45:2C:E9:1A:3C:CD:8E:A9:FA:AB:CE:9F
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:36:88:39:ea:d0:7c:e6:31:98:e9:70:7c:c0:56:86:5a:f9:
fb:de:a1:40:14:0f:51:9b:d9:b7:f6:b1:56:2e:f5:1a:57:2d:
d7:e4:cb:ff:ac:85:7b:e3:0a:9b:03:ef:31:59:58:a1:a3:c8:
5c:94:74:2c:5b:d3:0b:d0:2f:c0:bb:d4:3f:a5:aa:75:86:49:
02:34:3c:43:a8:d1:29:d6:be:3c:91:2a:76:ee:7a:f8:c7:0b:
7f:53:55:74:da:cb:3b:ae:1f:18:e9:e8:7d:76:de:3a:65:15:
73:77:4c:c5:8c:1b:af:f1:b8:3c:3f:6e:9c:86:dd:e8:58:b1:
80:63:f7:df:f1:e6:85:8d:eb:a2:0d:4a:52:2c:58:9b:39:57:
b0:36:8c:16:c9:18:14:5b:b3:f8:39:6a:21:97:2b:97:b7:0a:
a7:44:28:d3:b6:91:55:77:ab:67:43:d2:06:9d:6b:40:35:05:
c9:c0:11:b9:a0:dc:f9:3b:b8:a1:9d:84:d3:c3:11:ae:3f:fc:
96:da:3c:bd:72:25:c2:f6:a6:48:f2:d8:d6:bd:89:ea:b4:ef:
b3:af:e9:f7:6b:f5:2e:27:23:b9:ee:88:ed:c0:44:a5:d2:82:
9d:9f:c6:6d:bc:13:e6:b6:a0:63:e0:af:57:55:77:d1:39:dd:
8a:bb:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:32 2025 by rpki-client