Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: jV+BeImigYGJ4gOw7M6JdDi41Hw72ZG76mb5zK9XDAI=
Subject key identifier: 41:78:12:07:39:7C:68:BD:62:BD:10:5D:61:BA:BB:C3:72:EC:F2:D1
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019A4EF537B0A38180AE1B942E27BC06A99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: vCprhejnylKBfARHAYVNBWgZo+qN6aTnm8y9l7Koypk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:37:b0:a3:81:80:ae:1b:94:2e:27:bc:06:a9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=41781207397c68bd62bd105d61babbc372ecf2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:61:f3:9e:43:8a:21:18:19:eb:39:0e:c6:
f0:14:d6:cb:4f:2b:4d:9d:80:6c:27:c0:5d:03:45:
aa:35:f8:0c:b0:f4:00:80:a0:d9:43:c9:c6:97:66:
ab:77:0d:85:88:e5:3b:f0:ca:8d:7e:d2:2f:a0:6d:
c4:46:a5:3b:44:cc:dd:be:f0:66:4f:4f:7c:8b:4c:
c6:93:ba:08:04:b9:f0:c6:3d:2d:73:c3:0d:b0:d9:
13:72:bf:7a:e4:13:1d:11:d0:c8:c9:7d:5f:51:ce:
59:f9:36:a3:f5:93:52:02:3f:37:ff:cb:d1:fb:cd:
72:aa:69:71:b9:01:ce:44:7d:9b:b9:8d:4c:4e:14:
b6:12:39:1d:21:1f:f4:95:3d:d4:f6:cf:72:10:78:
a7:e5:c7:aa:fe:ff:cf:4e:d7:f7:a0:0e:0b:03:6b:
44:64:70:85:4e:c9:60:cf:9b:de:02:27:fd:b1:eb:
3b:38:7b:71:f8:60:07:8c:35:93:9c:6d:28:d9:e9:
ed:9f:8d:ae:65:d1:9b:6c:fc:65:74:ab:48:08:ba:
9c:28:8f:09:dd:62:11:92:c5:ab:6c:73:be:77:ed:
cb:c6:47:13:35:b4:a0:1f:f3:83:c7:92:c4:03:48:
d8:ce:2e:f6:de:23:32:e2:de:42:51:34:e3:ce:f6:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:78:12:07:39:7C:68:BD:62:BD:10:5D:61:BA:BB:C3:72:EC:F2:D1
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1c:24:3a:68:b9:55:ed:6e:e8:1a:31:0b:de:fe:89:66:c4:
0f:1d:f5:02:4f:87:dd:d2:f7:a5:29:53:0d:bc:74:ac:8d:0b:
af:44:0f:58:5e:a6:70:c2:aa:ab:0f:a8:a7:54:64:ea:d1:be:
1f:a4:80:55:54:46:ad:c0:d3:f6:8e:a9:1c:38:a4:d6:3c:39:
27:49:13:d9:70:a6:b6:2f:1d:fe:7d:5e:df:93:44:55:db:a2:
a7:93:f8:03:1c:10:1f:3f:fa:e4:86:30:14:f7:0b:ab:e7:ab:
20:01:6c:8d:8a:20:86:ba:ea:fa:ee:db:ff:8a:0d:d7:7e:da:
a5:35:62:5e:3d:95:b4:00:fa:1f:ca:f8:9c:5b:bf:3d:dc:f1:
40:48:c5:42:be:9c:a5:6d:06:11:c7:52:c2:70:5b:9a:9a:2b:
34:df:66:cc:81:16:75:4b:c8:9a:cb:9f:1d:d3:d1:cf:42:29:
b4:36:4e:23:3a:bc:77:ac:1b:fa:2d:49:93:6b:2a:65:87:5b:
8e:04:d0:29:1e:64:b6:f0:11:02:20:d5:32:f9:35:3f:2c:d8:
f7:cd:db:e9:ff:44:4b:34:7a:7e:32:b3:62:5c:40:4a:e4:64:
f4:22:9c:d0:fa:ed:aa:de:66:a0:80:c7:a7:d3:8d:c1:9b:89:
47:5a:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:42 2025 by rpki-client