Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: F2qrnxomI1mncE63NUOkyn36bm2GA4CxLxohWfxf5BU=
Subject key identifier: 53:16:99:39:F6:A7:D3:1C:78:BA:6D:9C:80:9A:B3:62:0C:FA:87:35
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019A4F994D22AC935C91BA8783C82BF94C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 07FA
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: miGON+zarTQRN//dfaJvjOowFyBtxnoPjLOx0Q1gnRo=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:22:ac:93:5c:91:ba:87:83:c8:2b:f9:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=53169939f6a7d31c78ba6d9c809ab3620cfa8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:4e:98:c3:5c:f8:91:5c:41:a1:82:09:78:
94:05:30:8d:58:18:4c:ae:66:f4:29:59:fa:75:da:
b8:72:da:ad:82:f4:3a:79:d3:c8:92:51:88:aa:67:
d4:56:c6:04:bc:30:31:06:ce:ee:c6:13:f2:ae:d8:
c8:cf:7f:6e:c4:0f:b7:ee:ec:b8:41:d1:85:09:14:
2f:2e:4e:b8:96:b1:b1:84:02:86:be:45:9d:02:4a:
94:8c:29:db:cc:35:3a:fe:dc:1a:43:ae:81:e9:03:
72:d9:00:39:4d:4c:31:d9:ca:b2:73:97:f2:13:b4:
7e:17:69:22:6d:97:4e:99:11:5f:cd:19:2d:80:47:
88:e8:03:9f:ce:cb:01:ad:6b:80:02:53:0e:e5:a8:
4a:c5:28:bc:4c:f6:2d:8b:d3:0f:6e:7c:68:15:93:
89:d0:36:c6:72:51:ef:ee:8e:03:ff:bf:36:d1:ea:
f1:df:89:9d:56:3b:a0:38:86:da:e7:16:53:ea:12:
d4:e3:e4:33:e1:c2:ed:36:a4:df:7d:38:80:ee:ca:
aa:75:03:db:e9:13:2a:6a:46:28:3a:ea:c0:c4:dd:
a7:72:21:29:51:f9:fb:5a:8f:83:af:2d:24:85:53:
85:2b:1a:6c:67:ba:79:f3:8d:10:78:1b:7a:56:6d:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:99:39:F6:A7:D3:1C:78:BA:6D:9C:80:9A:B3:62:0C:FA:87:35
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:27:fa:ac:02:e9:cd:79:c4:bd:3f:7f:b7:27:f2:64:7e:
a3:87:51:d9:ea:78:b2:99:2f:05:a9:d8:46:c0:58:26:3d:d7:
b1:41:7e:64:58:73:24:6d:9e:ca:ee:ea:5f:6c:96:71:47:53:
8e:38:c1:0a:8f:a7:51:62:1e:19:3a:f9:e6:80:4c:2e:59:d7:
ca:aa:44:02:39:a7:b6:28:c5:64:e8:63:6f:51:04:a7:2f:96:
b5:d7:18:2c:18:51:ff:60:22:a2:cd:b4:f7:8f:7d:70:f2:f8:
a3:08:b6:83:2f:e0:2c:bb:11:74:03:33:7d:1d:b5:71:da:fc:
25:59:4a:d2:fa:e3:ac:85:4b:85:f0:61:f0:8f:64:9f:18:c0:
0d:56:91:7e:ee:86:c8:f9:e0:aa:a9:27:ab:42:1d:73:da:5b:
8e:26:00:c4:f8:e6:01:0f:14:9f:5f:14:2d:ba:1f:39:4f:c6:
07:ca:a3:0a:cb:a1:0f:29:0d:f9:14:01:c5:fd:05:d9:d7:d9:
48:33:72:67:44:75:42:95:ec:70:5a:32:12:9f:63:e1:7a:df:
8a:d2:ed:c9:57:46:c4:ee:4c:7e:be:27:13:1f:7c:a4:13:7f:
46:fc:23:c0:ce:81:ae:6d:44:72:8b:c2:75:f3:9c:16:8f:f6:
77:99:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:30 2025 by rpki-client