Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: 8NeavXWuZsBQmzJCZwc3RClharHzJYthBDCOhlaetw4=
Subject key identifier: 9E:C6:6B:20:CE:BB:52:E2:E5:0A:E5:33:F7:4F:38:12:A6:C5:42:1C
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019A55D20E5AD13AE16DDFCC91413D8962FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 21:00:20 +0000
Manifest this update: Wed 05 Nov 2025 21:00:20 +0000
Manifest next update: Thu 06 Nov 2025 21:00:20 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: VpyTP3wudT5gpHOsh+YFebznC02mwI0kOdDQ5oM3TdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:0e:5a:d1:3a:e1:6d:df:cc:91:41:3d:89:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Nov 5 21:00:20 2025 GMT
Not After : Nov 6 21:00:20 2025 GMT
Subject: CN=9ec66b20cebb52e2e50ae533f74f3812a6c5421c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:36:1f:70:6f:34:5d:df:92:c7:71:00:7a:
89:be:46:f0:47:4e:37:61:3d:f1:90:42:0a:4f:da:
a1:3e:e1:58:22:d6:d5:d2:9f:a7:ff:94:36:96:61:
80:c6:eb:66:2a:81:2c:9e:be:3e:77:df:a8:a1:f4:
aa:c2:9b:91:ab:d3:ad:2d:8c:a7:99:77:58:e5:87:
b1:2f:c6:e2:83:fb:b7:5f:ee:0d:70:0f:1d:8c:8f:
76:97:6d:96:cc:45:e3:5f:c1:6b:72:e6:c8:16:68:
84:be:66:43:74:6d:80:eb:2c:65:be:55:ac:b2:94:
b3:11:0d:71:ee:12:db:85:ce:8f:cc:9f:a5:38:ae:
c1:ab:92:c9:62:ef:16:e9:2a:a4:fd:c1:11:08:61:
7b:ef:88:61:de:d7:7b:9e:d5:45:48:f9:63:5e:83:
a3:d9:69:19:e1:d6:ed:ae:22:95:59:ee:cd:e5:3e:
33:66:7a:b3:a6:df:63:47:fc:f9:dc:1c:b8:1f:73:
91:47:1d:0f:b9:c6:43:49:19:01:e3:ed:69:2c:7b:
fc:3f:46:c7:2d:56:87:e3:77:42:3f:f7:37:4b:77:
ef:e1:b7:e0:e1:17:db:78:f7:e0:50:b0:4e:27:53:
25:2c:02:2e:3a:57:e9:d7:67:3c:05:5f:14:8f:d8:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:6B:20:CE:BB:52:E2:E5:0A:E5:33:F7:4F:38:12:A6:C5:42:1C
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:43:25:be:50:2c:54:6b:03:ac:9c:ed:3e:fa:61:6c:e6:
72:b3:d5:1b:07:dd:51:87:e9:1f:80:5a:8d:80:69:f8:c9:79:
3e:20:9f:23:93:7f:65:b1:e0:0d:fd:19:59:d4:cb:c0:3a:60:
6d:77:29:85:79:8f:4f:9c:05:da:52:42:95:cc:d3:57:fe:eb:
5d:9f:38:bd:6e:a0:c9:1d:09:20:2b:4e:4f:88:74:5f:58:3d:
6a:b2:b5:8b:15:03:86:a7:a2:3f:c3:b2:f7:4e:3e:19:3d:2f:
f3:08:c3:da:b6:ec:22:21:ef:5f:98:76:ce:40:13:9d:19:0c:
75:c4:0d:ff:ac:cf:04:7d:a7:0f:e2:a3:55:87:31:d7:2b:a0:
4b:78:16:74:dc:0c:8c:e5:9d:a5:5a:73:98:92:7d:bf:11:4a:
9b:c7:4d:22:00:f6:15:a1:b5:4b:84:48:4d:95:e6:39:91:bd:
c3:2c:c3:a8:9b:ad:bd:fc:be:65:13:51:8d:d3:8a:98:99:87:
92:5e:04:9d:9c:a1:ee:c3:65:b8:2b:39:ba:d8:76:76:47:32:
7e:17:f3:b9:26:e6:72:b0:e6:6e:27:6e:ad:cb:ae:b8:ba:ce:
81:84:c4:a3:33:a5:ba:25:86:20:e7:65:96:23:c3:0d:e6:fe:
58:21:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:16 2025 by rpki-client