Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier: yeZBTAiadzf4cMxFOhJGCcnTiWGkyNONE0RRQ2yFkT4=
Subject key identifier: 31:34:CC:D0:89:B6:0E:E0:84:17:07:B2:29:6E:94:2F:7B:15:51:33
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 019A4F62A6B95076EB9D4BC2B0888546F229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: 3oCThZuHe+4HxD+NEt9395gE9w7R4nAzPtFCyNaxDeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a6:b9:50:76:eb:9d:4b:c2:b0:88:85:46:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=3134ccd089b60ee0841707b2296e942f7b155133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:95:fe:ea:8a:f0:03:bf:43:a5:42:cf:b2:
ce:01:65:51:aa:93:70:74:13:fd:4a:a4:70:f4:2b:
c2:e0:6a:4a:a9:fb:bc:e2:52:f2:d8:0f:9b:c5:a2:
1b:58:0d:02:b4:90:00:cc:8e:da:99:6e:f2:6e:12:
d3:e5:b5:0c:d1:bc:04:ac:f7:b9:b9:a3:4c:3c:dc:
63:9e:11:04:c3:98:a3:9b:dc:c5:4a:b0:78:fb:b8:
fd:68:13:7c:3a:12:c0:e0:cd:ef:fa:d6:97:bd:1e:
c9:8a:9f:08:11:de:65:2c:e2:6c:22:ff:f7:ee:3f:
c5:c4:e1:b5:4d:0d:6b:13:13:51:5a:5f:22:5a:4e:
71:69:a0:75:2f:8d:60:f5:b1:9e:c9:f7:70:ca:99:
26:7a:bc:79:44:a0:01:3e:78:71:7d:8a:41:55:33:
bf:35:3a:ab:4d:6b:e4:bc:d0:c5:65:41:c9:4c:9a:
ac:de:6f:4f:d4:c2:1d:91:4e:c3:dc:52:c8:29:51:
3e:62:4a:cd:57:7e:be:fa:fe:93:ba:bb:ab:43:bf:
09:5e:3b:d4:a6:36:39:92:b5:e4:b3:69:15:a3:ea:
37:30:81:c5:00:f7:1b:a1:a1:ce:57:81:4d:9a:c1:
ff:93:89:95:2b:1b:a6:44:95:e6:31:4d:d4:01:2c:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:CC:D0:89:B6:0E:E0:84:17:07:B2:29:6E:94:2F:7B:15:51:33
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0f:75:f9:5d:ec:c6:d2:64:2c:38:dc:a1:2f:da:1c:7c:08:
d5:9f:38:f3:1b:52:0d:24:f8:71:29:d5:af:50:9a:95:c5:d7:
7f:be:bd:74:3e:c3:15:b5:91:c5:c4:76:d7:54:4d:24:b3:07:
ac:db:95:13:db:2b:b0:57:7c:59:64:2b:88:77:74:f3:96:c7:
f6:ba:81:e2:65:9e:b1:6f:bd:63:fb:0b:12:1a:b0:27:93:ea:
e1:3a:43:c7:f2:fe:07:c9:4c:a6:a7:06:5b:0a:85:90:bc:a8:
02:dd:d4:ed:ea:f9:8d:99:eb:df:96:e0:8e:84:b9:c6:fc:50:
f8:77:45:19:4d:2e:77:0a:89:ea:ab:7e:0d:b1:93:62:3e:5c:
b4:e4:3e:81:2b:42:cb:f7:06:d3:33:5d:5e:75:a2:8a:31:42:
66:25:6b:27:cb:60:58:f1:88:8a:8b:57:87:55:4a:58:ee:5a:
f7:21:c0:3a:7d:61:d5:ad:c2:43:73:35:d0:f7:cf:97:53:3e:
f5:35:0a:d7:fc:0e:ed:61:2a:d1:4b:7c:75:47:40:d4:41:66:
1a:b3:09:13:92:8b:69:96:de:2f:c0:d5:a9:72:2a:59:64:ae:
57:69:99:19:cb:4c:fd:b4:d2:f7:72:19:ac:85:65:08:6b:07:
a2:2e:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:54 2025 by rpki-client