Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: 44ngskSBDEYiZk2J3sjFxUs5Gh6Ck4KpXRNgA4DwudU=
Subject key identifier: FE:2E:78:07:23:87:CF:0F:7A:7A:97:2A:27:E4:19:25:37:82:91:C0
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019A54C01F0618A3B4432B6B6B4C50B4D2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 02A3
Signing time: Wed 05 Nov 2025 16:01:08 +0000
Manifest this update: Wed 05 Nov 2025 16:01:08 +0000
Manifest next update: Thu 06 Nov 2025 16:01:08 +0000
Files and hashes: 1: FZlDRwQNmXCg3_Qh5afXAwCGih4.roa (hash: SoWjx9Et7z/xhRKKbjGE/59bJXf4bvrCWGT22R3gJr8=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: XKmEJJOlzko06GXbtReP+TqwBGBoPQmblvz6M0W7fxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:1f:06:18:a3:b4:43:2b:6b:6b:4c:50:b4:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Nov 5 16:01:08 2025 GMT
Not After : Nov 6 16:01:08 2025 GMT
Subject: CN=fe2e78072387cf0f7a7a972a27e41925378291c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:ef:59:de:59:9c:e1:c6:39:97:ca:6b:2c:
db:2a:c5:6b:60:d0:94:a9:b1:9f:66:e4:ba:23:59:
0b:e1:22:51:83:f4:bc:2e:a6:57:87:74:b9:c5:42:
ba:15:88:2b:9c:31:7e:db:b1:2d:3d:1a:ed:9b:4c:
1a:1e:74:91:f1:a4:a9:75:14:f0:5c:1e:d8:3d:3e:
3f:e5:4d:d0:0a:3d:06:cf:61:a6:13:40:d6:ae:96:
56:40:5e:04:ca:b9:49:55:94:dd:21:9c:1f:5f:f7:
2c:d0:2a:31:1a:f7:6a:97:ce:f4:18:e1:fd:1c:76:
a6:d8:d6:a5:73:70:b1:c9:81:8c:b1:27:bf:04:53:
cd:30:a7:43:91:80:5d:5f:57:1f:fe:b1:68:9a:b2:
be:4d:b9:e1:bc:38:56:2f:e0:0a:ca:ff:d6:96:98:
a0:d2:48:69:81:cc:7e:5f:7d:d1:31:28:47:e6:ce:
4e:8a:1a:ba:c8:f4:bb:c9:af:ce:64:b3:d8:e8:3d:
d8:05:4b:24:9f:c4:23:fe:17:41:c6:89:2d:42:34:
4a:56:56:01:1a:6d:3f:53:45:17:0f:57:92:53:e3:
d2:4b:be:da:e2:4c:e2:eb:7f:55:6a:b3:7c:58:17:
64:aa:42:10:60:af:90:88:17:9b:36:a2:6a:98:41:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:78:07:23:87:CF:0F:7A:7A:97:2A:27:E4:19:25:37:82:91:C0
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:5d:40:99:f3:c6:12:58:e7:db:f6:18:16:78:42:a8:2c:
ce:6c:19:5f:54:69:4d:01:d6:b7:a0:ff:a4:8a:ec:9f:4b:44:
77:e3:c9:97:ad:ce:ad:12:47:9c:0c:47:57:d3:e4:b3:9f:62:
5f:b6:5a:40:06:6d:6b:1e:00:c8:99:60:e2:ea:47:0c:a9:e9:
b2:f0:11:2a:24:c2:f7:9a:d9:f2:cf:e6:d1:7c:64:e9:70:da:
1a:a4:7c:8c:51:a8:ed:6e:1c:b2:af:39:86:e9:c0:29:4f:5b:
22:46:33:a0:37:e9:ec:dc:96:67:27:dc:fd:81:aa:32:bb:38:
bd:2d:ae:3f:f8:05:17:d4:c3:18:00:bd:9b:ab:36:da:4e:f9:
3f:4d:3b:ff:c3:95:80:24:75:62:e5:28:e9:73:e9:90:f6:fb:
3d:5e:21:59:6b:68:17:28:23:6f:be:81:85:b3:04:2e:7b:00:
b8:01:f9:9b:33:44:12:a6:6c:6e:06:36:25:a9:94:4d:35:f8:
79:9a:2f:18:00:22:2b:72:e9:65:4b:7a:65:6b:9c:91:24:6f:
f9:34:84:ef:f5:be:08:39:ae:27:35:5e:8c:23:ba:d1:29:55:
f2:99:f7:4e:a2:b1:ba:63:38:57:48:6e:54:25:01:e6:a9:e6:
4b:21:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:47 2025 by rpki-client