Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: micNevM1bg30/L4Db2GYYxzIEGwGncFC9AUypwH+gI4=
Subject key identifier: E3:E1:A0:60:7A:CA:29:79:7A:42:6C:75:7C:8A:81:02:DA:92:62:8E
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019A5006DB617550662D15D6EE32FF78932F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 069E
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (hash: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=)
2: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: oL6PWtGyluqLHCvUbuSAAh+nxJTloWcTzaIofXRIG6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:db:61:75:50:66:2d:15:d6:ee:32:ff:78:93:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=e3e1a0607aca29797a426c757c8a8102da92628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:e2:e7:d6:56:ef:af:1c:97:8c:10:33:39:
8f:dd:92:7e:fc:4e:c6:83:cc:4d:24:b3:bc:69:4a:
dd:95:f2:64:c2:31:09:92:90:76:5d:84:79:1c:b0:
86:31:40:22:9d:4d:ee:72:c8:dd:d8:76:2e:ff:bd:
94:e7:c1:4b:1d:72:b7:a4:01:81:37:c3:03:34:2f:
f0:72:b4:0a:2b:a4:24:6a:97:4b:6f:ec:55:a3:d3:
b0:67:33:12:1e:8f:76:b8:bd:9e:9c:b4:5a:0a:a4:
e1:56:97:0b:7b:d8:1b:d6:52:68:11:7a:17:31:f3:
69:9f:5b:fc:c3:8b:0b:3b:26:4b:19:f4:91:6d:a6:
07:c4:6b:33:3a:22:62:55:1d:7a:06:82:2a:d4:91:
2b:e5:5a:9c:db:e4:ee:63:6b:12:ed:6b:1f:76:71:
58:53:60:84:f2:7e:1a:38:30:b6:4b:63:54:3e:04:
5a:27:f2:b7:b2:b5:01:27:51:f9:c5:52:47:cc:7d:
da:64:4e:e0:fc:62:89:0d:fe:19:d8:f9:99:8c:22:
04:d6:c2:fb:a4:91:ef:05:c6:6c:b9:cb:11:6a:6f:
7e:9a:ee:85:6e:ee:24:2c:dd:c6:19:37:88:bb:f3:
d3:43:bd:d1:16:e7:ce:6c:3e:6d:c2:41:c4:83:d1:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:A0:60:7A:CA:29:79:7A:42:6C:75:7C:8A:81:02:DA:92:62:8E
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:6c:4d:76:80:4c:94:5c:fe:a5:2c:81:15:02:40:32:a5:
4e:95:5c:6c:4d:64:f1:06:4f:f4:e6:78:10:03:33:8f:2f:03:
ed:c5:73:9d:3a:cb:88:1e:71:de:78:3c:fd:4a:08:69:24:29:
07:6a:66:aa:83:66:7c:1e:1d:51:b9:78:95:62:9f:29:36:2c:
ef:a2:7f:08:bc:ab:1c:d7:20:79:dd:0a:bf:20:39:1a:b0:a8:
84:7a:bf:57:0a:ca:35:c0:3f:26:45:f7:eb:b6:7a:96:f1:43:
c2:49:29:b5:8b:57:fa:c6:b0:fd:54:38:90:8f:16:ff:69:3d:
ff:54:55:f4:ea:84:05:71:e9:87:6a:cb:c1:42:6a:80:e6:eb:
aa:bc:bb:f4:53:63:04:b6:22:c6:0d:ce:17:fb:55:eb:4e:f7:
37:63:3f:9f:e5:2e:bb:88:73:45:22:56:6f:43:31:1e:49:1f:
b2:7b:56:29:5d:4b:f3:ca:e0:2c:5c:86:40:61:f5:41:a4:2a:
7f:8d:da:f6:48:4b:20:ee:5a:95:74:ea:7f:e7:81:0d:d6:ab:
16:7f:52:65:12:70:d4:d3:71:8d:fe:30:40:49:7e:45:b7:ba:
99:f0:21:56:4b:9f:e5:f1:c9:f5:db:08:99:d6:ed:0b:ea:ac:
ee:90:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:49 2025 by rpki-client