Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: 1O+E2jj5CnhdbLtUj8TNiD7+2SlvsZtKfhrBF1aRduk=
Subject key identifier: A7:E6:2A:35:3C:2D:A7:95:C5:C2:B9:49:8F:E1:D1:6F:5F:FD:D5:7F
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019A4DE1A885486260376B58F6AF0FD20D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 05D8
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: qg9kin9c2+4mpoNQ70s7mDt0GTudnU4WXwKP5fzVkKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a8:85:48:62:60:37:6b:58:f6:af:0f:d2:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=a7e62a353c2da795c5c2b9498fe1d16f5ffdd57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:4f:60:47:b1:d9:93:14:a7:ec:4b:6c:42:
e9:6c:79:52:1e:0d:50:b0:33:3b:ca:76:f5:83:5c:
e4:aa:bf:4e:5c:dc:8d:56:4b:64:a1:5f:1c:9e:fa:
04:3c:14:34:76:73:d2:bc:83:2c:71:e8:91:f6:d3:
9b:5e:10:78:fb:53:39:1d:59:92:4b:8d:6e:6d:1a:
4f:61:92:79:79:ca:00:69:c3:f0:e3:3d:37:a8:ee:
56:39:61:12:9e:0f:92:b1:06:bd:3e:a6:37:d8:ec:
92:59:94:b7:4c:6a:63:4e:fe:2d:b2:55:85:f1:f5:
ca:9e:72:f4:ad:84:e5:17:fd:ff:d0:52:0e:65:bd:
5c:e6:eb:34:6a:48:b2:ff:0f:4d:74:59:99:07:81:
69:65:ac:1e:ac:ab:19:e1:54:24:c0:3e:92:32:9c:
95:74:d5:d1:c9:2e:92:2d:06:b2:1c:d3:16:ca:f9:
d4:0c:77:65:59:92:c1:53:b9:2c:08:1a:c7:7f:42:
6e:18:9f:3f:a6:1e:c1:24:92:8e:df:b7:8a:0a:cb:
e0:b4:da:6b:ae:fd:7f:33:e2:a2:f4:70:79:1a:f3:
0b:ea:02:f4:d6:d5:18:2f:60:31:2c:57:b6:1b:96:
00:eb:e6:3b:c2:7b:6d:d5:c2:9c:3e:6b:d3:2f:b4:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:2A:35:3C:2D:A7:95:C5:C2:B9:49:8F:E1:D1:6F:5F:FD:D5:7F
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7c:2e:2d:54:d4:31:f7:a5:e5:74:82:9b:2c:da:76:7b:1b:
e0:23:75:1b:0e:1b:8f:3c:44:d6:a6:c0:87:e0:76:82:d4:8c:
e5:a3:db:23:7e:7f:4f:0d:f6:ab:c6:78:05:43:a8:e9:90:bb:
37:26:69:00:25:6e:f2:fe:30:84:97:4a:cd:6a:28:2a:57:d5:
1b:6f:69:b0:b7:9f:8f:f6:08:e7:f6:a5:04:68:03:04:29:23:
e2:cc:41:0e:cb:08:1b:d4:21:2c:21:a1:73:13:dc:15:32:28:
15:99:f9:4e:18:a6:d6:fd:5e:83:71:61:8f:f0:49:c9:9b:b6:
d7:8b:e9:6f:09:c9:06:3e:3f:20:a2:4c:7b:83:fb:97:8e:4c:
29:64:35:21:92:e1:bb:6e:a9:fd:ed:59:33:36:48:bb:40:91:
95:6b:ce:e5:87:76:8f:9d:f5:50:9b:84:94:11:d2:82:c2:47:
4c:9d:5e:d5:8f:21:95:cc:0a:29:1d:cc:c6:43:be:38:ff:91:
04:66:0d:94:7a:68:aa:93:fe:23:10:04:be:ef:90:0a:cf:53:
86:99:ec:05:cf:fb:f0:6e:0a:9c:ab:7a:99:3f:1a:1a:75:36:
4e:f1:5f:cb:b4:f1:a0:1e:4a:1b:a5:f5:e3:cd:d3:19:04:1f:
81:1a:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:01 2025 by rpki-client