Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: sZ/wxl1cZPFp7Vu7wLtNFGrKmMy9zlUf2E5V3urWxjU=
Subject key identifier: A9:05:CA:8B:46:F4:18:6C:96:7D:23:C7:A9:BF:E7:69:5E:46:E3:E4
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019A4F2B5BB6E1168345956FC42F8592231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: yP5WSKppobCG+i50SXuRO/iOJcdsoGgYW9qrTjQKJjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5b:b6:e1:16:83:45:95:6f:c4:2f:85:92:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=a905ca8b46f4186c967d23c7a9bfe7695e46e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:04:b7:d7:b5:a3:42:ac:37:51:e0:85:0c:
08:7a:ae:65:52:d9:f7:2d:5d:e0:83:3f:0f:92:3f:
a2:60:87:6d:f7:95:4f:83:58:90:38:d7:01:1f:0d:
15:26:35:40:52:6d:0b:22:1b:a4:a2:46:cd:39:e2:
e2:bc:3f:15:97:4d:af:cc:47:4d:a4:40:a8:67:c5:
b1:1c:75:50:c6:0d:64:a9:44:1d:c7:c7:06:d0:87:
25:8e:92:9e:7d:c6:a9:d2:9b:87:a1:57:f9:1a:1f:
e8:98:97:48:be:4c:93:2e:bc:bb:91:46:ed:3f:26:
fd:52:13:30:dd:53:ac:67:fa:41:2a:ec:24:6f:b7:
d4:24:f1:5b:9b:04:85:c3:ae:b3:99:14:52:c7:80:
4d:a8:10:6d:30:f8:e1:74:76:12:b4:fa:91:ff:7d:
ec:78:23:b6:e5:81:2a:94:1d:1c:49:12:18:cc:12:
8b:b8:5b:58:ad:1d:8e:a7:4b:01:ce:a9:54:38:dc:
46:69:3d:b7:58:04:39:eb:9f:82:fc:56:7b:31:ba:
24:00:7b:3e:a8:5e:66:01:86:55:23:ab:38:42:f2:
45:af:3e:f9:0a:7a:e4:40:e8:31:b2:36:9e:36:00:
8f:ba:6e:e3:43:e6:ba:6f:c2:99:30:c3:72:02:0a:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:CA:8B:46:F4:18:6C:96:7D:23:C7:A9:BF:E7:69:5E:46:E3:E4
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:65:46:c2:4d:42:24:c4:64:5d:f2:a4:c3:71:2e:26:48:25:
a0:4d:27:ba:3a:b0:93:24:13:a4:32:11:97:6d:c9:c6:1d:50:
60:f9:61:db:73:d5:5f:d4:20:58:dd:2b:87:33:77:81:74:c8:
7d:e4:1f:7c:c6:aa:0d:d0:98:7c:c0:0d:3e:ca:39:72:71:09:
b3:54:ef:c4:b6:76:f4:99:f2:db:0b:87:35:4c:8b:7c:5a:d3:
01:1a:47:e6:67:4c:59:67:c9:a6:f1:b5:2f:0e:fe:d1:3b:59:
f0:eb:f2:bc:fa:6e:67:07:8f:5e:4d:1f:7d:f1:55:40:49:53:
c0:46:e2:13:67:e5:20:81:37:eb:52:08:e8:cb:53:3a:06:9e:
dd:37:f4:30:ee:ae:99:5a:ed:f7:d7:cf:c5:1f:79:24:ad:c7:
3b:c1:95:e2:90:19:9e:da:ab:a2:cb:52:a0:de:6d:71:e3:04:
63:fe:14:d2:15:3e:b5:9e:50:d0:54:fc:e9:c7:35:19:0e:94:
ce:01:10:74:5c:ee:81:58:44:7e:9b:1b:73:9c:0d:19:a3:d6:
18:27:4c:cb:fb:94:88:ff:eb:af:99:5e:c4:19:8e:98:ab:2f:
f5:b8:dc:43:9a:a7:ed:3a:e6:b9:48:62:82:0b:91:f9:11:f0:
53:de:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:08 2025 by rpki-client