Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: eVCftWDRGc1R7G74DU1H0ZW4ELlNUMatGjreTH3yP+I=
Subject key identifier: 34:A4:BB:C6:84:33:D0:25:4C:27:AB:AB:BC:AA:97:0A:64:9C:F7:34
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019A4DE190A9D49F8182AB10D97FA948AB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0E45
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: bhmtN6cFpUqmGbWJn8RNSH59gtXYOt2aNBQB19WaHVo=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:90:a9:d4:9f:81:82:ab:10:d9:7f:a9:48:ab:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=34a4bbc68433d0254c27ababbcaa970a649cf734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:c9:2b:c0:62:42:cf:6d:08:ec:c2:d5:4e:
f1:29:6e:d5:75:3d:fd:32:fa:65:37:8f:bd:cd:4b:
71:09:6d:64:42:e1:f4:2f:20:df:0a:4c:90:b9:7d:
88:47:21:fc:f8:97:d7:79:8b:7a:f7:fe:f6:4c:b6:
16:b3:5b:7b:27:d8:73:d3:8d:6c:ba:a4:e6:f3:bc:
e3:fa:90:93:b2:2d:cb:9b:34:5e:66:e2:43:60:f2:
6e:2b:35:24:cf:a0:89:2e:ff:c1:a5:66:01:be:c2:
37:ce:28:d0:df:5c:e4:89:a3:c6:a4:25:51:1b:b9:
67:bd:72:fb:e3:d4:10:d1:54:8c:1b:fa:d0:9b:0f:
a3:93:94:d9:25:f3:ec:86:62:b4:1c:09:cc:08:c5:
95:e0:eb:c5:c2:c1:05:6a:92:78:25:04:c7:5a:94:
64:d3:5f:4d:0c:6d:1a:f5:50:9d:0a:7c:12:e7:03:
ac:aa:52:7c:bf:2a:84:0b:18:9b:57:ba:79:2b:52:
19:38:f3:f2:26:b7:d1:dd:5e:cf:6a:4d:15:a4:ef:
7e:fc:74:d1:3a:4c:91:42:c7:93:0f:29:f9:65:18:
ea:9b:f6:68:0f:00:9b:bc:0d:4d:9e:bb:a1:f5:77:
9c:89:27:f1:3f:5a:ed:f5:3c:8c:20:41:c1:9e:fd:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:BB:C6:84:33:D0:25:4C:27:AB:AB:BC:AA:97:0A:64:9C:F7:34
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ba:d5:0b:ab:ab:38:f0:29:d0:72:80:de:b3:20:e2:bd:75:
9f:a8:86:d0:55:d2:39:60:13:7c:65:03:44:9b:8b:0a:8c:42:
2e:db:20:b2:cc:ee:90:2b:c7:f1:3c:3d:ea:77:7d:9e:b1:36:
74:3f:99:14:55:b7:09:60:a3:ee:02:91:6a:b8:4e:7c:43:14:
b4:bf:f3:24:e7:5f:ad:0a:44:9f:a7:64:3e:4c:5c:09:f6:fb:
f4:bc:2b:39:4c:4e:12:e8:a4:63:ce:ec:00:f3:05:65:41:1b:
76:86:e6:fd:f2:a2:03:c8:74:85:a4:3d:52:88:d9:4c:3d:21:
63:b6:69:37:62:50:0e:b3:63:89:72:39:93:35:35:ea:fa:63:
29:76:d9:6a:cd:69:12:6e:a7:d6:09:e4:a4:76:67:eb:45:65:
85:e4:a6:fa:0d:2c:5c:e4:ca:7f:cf:49:35:c4:4b:5d:b8:be:
47:40:aa:84:47:4f:26:9a:1e:c0:7d:c4:d7:50:8c:2e:e5:31:
04:37:4b:61:5b:7b:19:03:82:2b:dd:e0:7b:26:33:7a:8b:6d:
ba:24:3f:b7:fd:83:98:d0:ce:ff:6d:d7:6a:40:91:84:a3:51:
b8:f6:85:db:f7:77:70:97:b2:24:d9:48:c5:7e:2a:3f:5a:36:
b3:38:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:59 2025 by rpki-client