Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: cnt2yy1sN6Y9ovzwU7YGnXfLnD9Ptq6xWF4GiNWQspk=
Subject key identifier: 9B:73:00:C0:48:55:9E:53:61:F0:D2:09:FD:1F:09:99:CD:77:C9:1A
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019A4FD08A938DC2788ABA62C1C4D9046489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 17:00:58 +0000
Manifest this update: Tue 04 Nov 2025 17:00:58 +0000
Manifest next update: Wed 05 Nov 2025 17:00:58 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: sdznuuaMIwh0P/te1zhEaPpW+fc06YaIpSQLhcq1F18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8a:93:8d:c2:78:8a:ba:62:c1:c4:d9:04:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Nov 4 17:00:58 2025 GMT
Not After : Nov 5 17:00:58 2025 GMT
Subject: CN=9b7300c048559e5361f0d209fd1f0999cd77c91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:e8:81:44:77:de:ba:7b:16:44:55:6d:b5:
a3:86:cd:2d:5f:a4:16:0f:f4:7d:33:56:72:2d:ff:
cc:a4:9d:54:0c:3f:96:46:ab:f6:3b:d0:fb:89:00:
a7:41:e6:f7:c2:94:c4:e5:26:76:60:7d:4f:e7:af:
3f:d5:6d:1a:ed:b0:ef:56:01:d5:e9:64:a3:45:76:
07:cd:81:05:e3:a9:39:b3:46:91:0f:ef:fb:4d:fb:
ab:b2:1f:03:88:7a:17:ba:78:3e:47:f8:d4:33:df:
0d:fe:10:0b:1c:f7:dd:c2:b3:b8:74:19:e9:ae:6a:
57:d6:d9:3a:ec:7d:40:ff:a3:6b:b6:66:8d:86:30:
64:c8:fe:78:62:0b:aa:cf:93:d4:73:dc:3e:9c:34:
0c:c8:56:ca:e5:fc:97:20:15:71:fe:e7:17:d4:e3:
95:36:91:72:26:06:45:67:0a:4f:37:c2:33:dd:41:
8f:c2:a0:9e:87:6a:8b:ad:35:27:50:19:0d:1d:16:
47:b9:c0:69:de:27:c1:a1:80:11:ff:ee:a3:cd:10:
9d:b5:8b:64:d3:53:a9:23:54:4a:d0:75:f5:4c:41:
5d:92:0e:7b:ee:59:a4:ed:80:a8:20:7a:87:3f:99:
1f:f4:23:ae:19:09:ef:a0:b9:8f:8c:66:45:fa:67:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:00:C0:48:55:9E:53:61:F0:D2:09:FD:1F:09:99:CD:77:C9:1A
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:4b:20:96:fe:33:23:91:60:90:2e:82:2d:12:9f:76:2b:
69:b4:37:c5:52:b4:33:c8:a8:13:1b:81:ce:68:36:ad:0a:27:
ce:bb:ff:7a:2e:81:c7:c5:a8:a7:df:da:9c:ed:0c:42:cc:70:
ab:a7:f3:97:42:1b:ba:70:69:e7:41:df:a6:6b:4c:d5:62:41:
fd:c4:87:21:6c:80:ae:6a:55:a8:47:ee:e6:cd:a7:15:aa:41:
9d:71:fd:33:1f:0a:b0:2b:9f:c4:49:fc:d3:92:59:4d:93:c1:
8f:a5:af:fd:d1:05:6d:95:a7:e0:70:07:12:4f:5b:52:b9:dc:
8e:b2:95:9c:6e:b2:cf:28:58:00:14:0e:9c:4e:79:31:36:dd:
68:ff:f7:77:20:35:f6:00:11:59:45:cc:61:41:4b:9d:2e:41:
72:b4:79:f2:f1:ff:2d:69:2b:06:35:9b:8d:f1:c4:eb:2d:f5:
8d:5d:b5:1c:76:ed:ec:a1:89:56:c9:8d:84:43:25:91:fd:ef:
c8:4c:12:b0:f6:7f:fc:84:89:1a:f1:dc:e6:50:c6:2b:c0:fd:
e1:30:f2:1c:d0:bc:e4:b1:dd:67:6e:97:6e:57:1c:23:af:bd:
c1:6a:b1:4f:98:e5:1b:9f:9d:7e:ed:49:01:5a:ad:79:94:3a:
7c:90:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:13 2025 by rpki-client