Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: O3kB0ZFK7FdH8bSOTJiXO6/0C8N/qQ8YNAGVXu1WPwA=
Subject key identifier: B8:E0:10:6E:07:22:E3:1B:D4:07:93:36:6A:B4:77:94:4C:0C:FD:02
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019A4E4F493C6DA967037CD7D4B88617ADC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1380
Signing time: Tue 04 Nov 2025 10:00:10 +0000
Manifest this update: Tue 04 Nov 2025 10:00:10 +0000
Manifest next update: Wed 05 Nov 2025 10:00:10 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: RvlIZ4F6AgBDPfJgnLnYx+aRZQeF4AsgE9h3kAFKxjk=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:49:3c:6d:a9:67:03:7c:d7:d4:b8:86:17:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Nov 4 10:00:10 2025 GMT
Not After : Nov 5 10:00:10 2025 GMT
Subject: CN=b8e0106e0722e31bd40793366ab477944c0cfd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:f3:eb:9c:a8:aa:6b:13:6e:8b:5a:95:66:
22:11:54:fe:c9:67:e9:b1:54:67:17:27:a2:08:3b:
d5:a2:34:e4:76:a6:4f:5c:ea:6a:6d:8e:98:40:72:
65:19:7d:1d:c8:5f:62:03:17:53:a6:7f:76:e1:73:
ab:aa:ab:7b:f1:6b:06:c0:3d:34:ec:c1:56:28:1d:
97:85:08:75:e1:12:87:12:69:24:03:8d:2a:cc:8b:
7a:fe:d0:f2:da:ed:a0:5f:ed:97:2e:9f:a5:64:e5:
b5:85:c3:b6:f5:6c:7d:f8:a4:7c:78:67:6c:cc:2d:
ff:0a:69:ec:6e:2a:47:7e:27:c0:ee:f1:1b:3e:1a:
1b:e2:aa:74:c2:39:f5:d7:7b:0d:0e:21:21:28:43:
79:03:cc:f2:5f:89:2b:49:26:39:34:61:48:a1:07:
b0:d8:6a:13:57:e6:d3:df:32:5d:f4:d8:9c:a0:9e:
89:3c:86:ae:49:ba:a9:57:5c:f9:92:d3:fe:83:5e:
87:ab:65:1d:b7:43:0d:57:ec:3b:d0:df:a8:58:f2:
75:6e:27:0f:6f:b2:91:f8:91:d3:0a:0f:f4:ad:93:
da:5b:1b:ae:62:3f:3b:e8:c9:4e:9d:78:c9:53:7f:
f3:b3:de:a9:c2:9c:4e:02:98:22:c8:f8:88:f9:86:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:10:6E:07:22:E3:1B:D4:07:93:36:6A:B4:77:94:4C:0C:FD:02
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:f7:cc:9c:09:67:c8:86:1d:80:07:5f:18:c8:81:7c:7a:
42:ec:ed:ed:ad:6e:55:de:cc:2e:4e:8a:2e:72:30:f7:8f:2e:
aa:80:d6:d1:e8:a5:aa:d9:2e:eb:07:a3:62:88:4e:0e:98:3c:
0a:2c:43:8d:35:bd:fa:5d:71:82:d1:71:88:6a:f7:dc:66:ef:
54:81:7a:90:6a:43:84:90:07:2c:f1:ec:1f:f2:f2:8b:5f:54:
a7:b7:91:24:d1:6f:25:8d:6d:fe:0a:ae:db:ae:9a:28:41:33:
23:a4:e8:60:04:0d:3a:e6:8c:cb:5a:35:ec:82:fd:5c:9c:a4:
70:f4:d7:0a:fd:5f:27:73:d2:30:83:ad:86:d7:09:88:d6:ae:
b5:29:9c:59:e5:ba:40:93:51:61:2f:86:16:ec:9c:06:31:7c:
24:60:a4:e2:85:f6:a4:d6:9d:8b:68:5b:9f:7e:ef:bc:ec:47:
29:ef:a9:5b:77:35:48:9d:e4:a8:54:28:99:4e:d5:8b:8c:8c:
41:9f:52:2c:d5:23:85:8f:0a:a9:cc:dd:b2:76:47:22:16:6e:
ff:83:85:21:d1:27:d6:32:4b:45:19:ba:38:4e:ba:f3:9e:8f:
61:ea:ab:4d:a3:22:88:b5:12:a4:5d:80:28:83:91:98:e5:76:
72:82:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:09 2025 by rpki-client