Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File: a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier: uSBbDVkFga0qFh02rdF6gd+kvbACjRtTTNgDRU0+zqc=
Subject key identifier: E5:EA:94:99:BE:3D:7B:F8:88:10:93:B5:F5:EA:CE:98:B8:04:84:19
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial: 019A4DE1D9394CAC89B11371C2C099D19C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number: 11AD
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: AxMLubt6F+B1Z8h84W2Jtu4IhYEhTggdZCULLlFM9ck=)
2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d9:39:4c:ac:89:b1:13:71:c2:c0:99:d1:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=e5ea9499be3d7bf8881093b5f5eace98b8048419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:de:46:62:c0:9f:30:75:33:86:f9:ac:ac:
9b:b2:1b:68:77:da:94:fe:39:3d:30:61:8d:9c:0e:
d1:04:14:b2:a6:7a:14:03:01:f6:de:b1:d8:68:2f:
b0:7e:ae:96:9d:97:ea:02:bb:09:fc:2a:6b:a0:41:
c8:6a:fe:ad:fc:1c:e3:bc:51:9b:08:97:5a:75:00:
fa:0d:0f:5e:da:9b:ed:51:49:4c:f3:c3:17:32:8f:
7f:2b:11:88:4f:42:50:e6:68:fc:e5:4e:57:89:4a:
e5:ef:46:10:8f:aa:43:73:40:97:40:89:34:85:8c:
14:0e:90:ce:cf:73:ea:8a:c3:b7:a2:e3:68:4f:fd:
08:d3:8e:8e:89:e5:0e:16:1e:ad:5e:fb:5a:80:68:
7a:55:96:d3:10:fd:9d:18:79:52:43:aa:38:ae:1e:
e5:71:17:10:3c:01:1e:0c:8c:27:76:bd:e2:c0:84:
f8:d4:58:f1:0b:76:68:77:92:8f:11:4b:61:ef:68:
96:4d:8a:dc:43:e4:78:25:e8:2c:d0:1d:a5:4b:2f:
1a:ef:76:bf:df:3f:69:04:74:ba:e6:c7:b4:6c:ec:
c2:ed:91:67:34:4d:e3:57:b5:d4:a0:04:dc:d6:2f:
42:d0:29:05:b2:7d:a8:67:45:34:ee:15:45:df:30:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:94:99:BE:3D:7B:F8:88:10:93:B5:F5:EA:CE:98:B8:04:84:19
X509v3 Authority Key Identifier:
keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1a:37:52:34:fc:3b:70:fb:87:07:b9:da:33:82:dc:51:13:
9f:18:50:b3:cc:69:94:c4:71:a2:33:f1:15:4b:8d:2c:9f:49:
d4:06:6a:fb:d7:fe:b1:79:b9:76:7e:11:81:d8:b6:a7:75:79:
7f:c7:67:8d:8b:f0:a9:40:64:d4:da:1b:2f:04:ac:7c:07:00:
e1:f1:ce:d7:c9:f9:01:3e:c8:e1:32:38:a0:f8:2d:a3:ad:2d:
0f:11:f5:14:94:e9:1a:c5:2d:a6:4c:83:a3:d9:c7:42:4e:12:
d2:9d:98:7c:c9:93:6c:26:cd:7b:f2:31:bd:ca:0e:69:f7:05:
cf:67:cb:36:f0:20:bf:27:3f:e3:e8:a4:3c:96:66:3f:92:98:
40:24:a9:9a:7f:aa:46:87:4d:d9:76:69:03:f8:5b:b0:4c:05:
84:74:10:51:a5:9e:70:26:91:2c:c3:a1:6a:d1:83:11:78:ca:
69:a2:05:fd:3f:56:c5:bc:3f:57:93:62:b7:a3:3a:15:c3:f5:
d2:9d:ae:4c:b1:70:9f:1f:62:f4:9e:04:71:e2:23:4f:1d:28:
5d:ea:dc:fa:89:72:68:67:9e:e5:83:7d:8c:d8:b0:1d:07:42:
3b:4e:2c:1d:cb:24:b0:42:ca:d3:f5:ef:69:fc:f1:17:e7:df:
84:7a:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:31 2025 by rpki-client