Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File: A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier: p6GxlVT2ALOnBQ+f49Zg7jYsDgIODRAlMkDJlp+srCk=
Subject key identifier: 46:2E:D5:D9:82:3B:2F:5A:12:94:70:0E:A2:DB:03:3C:F3:76:15:08
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer: /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial: 019A4F99928BDEA41DB20FC76415E802F4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: tEpvYJsgRRmzQ72XyEk4H4ilb4lSnp2CT4SPlkf4aqI=)
2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:92:8b:de:a4:1d:b2:0f:c7:64:15:e8:02:f4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=462ed5d9823b2f5a1294700ea2db033cf3761508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:98:8e:ca:a4:46:ec:d8:94:ea:00:8f:63:
8e:37:3d:17:bd:9f:63:bf:c5:c9:1d:a4:c8:1f:23:
4b:16:ec:c2:67:ae:79:ad:b6:d7:39:a0:19:04:cd:
1e:58:cd:f5:98:51:1c:e5:cf:a1:e8:0e:5d:e6:80:
90:cb:c3:a9:e7:5e:66:7e:39:60:f1:a0:3a:a3:24:
bc:a5:d1:9c:17:99:ab:24:d4:bc:af:09:1b:95:58:
83:b4:7c:6f:8e:f4:44:b7:a5:ee:d2:3c:cb:62:c2:
4c:e0:4f:4e:1e:fe:33:4a:b2:aa:c8:c7:87:5b:14:
92:53:c7:04:cd:69:62:f2:d2:a3:f4:47:22:15:a5:
c7:e2:e5:b3:60:17:d8:12:db:88:23:65:0b:28:84:
a8:a1:6f:1b:dc:d2:b4:f5:b3:8f:26:de:1b:26:4b:
e7:81:ea:1f:f6:a4:d8:ac:0a:11:75:a2:cf:0a:c6:
56:c7:5a:78:72:8b:1c:e8:f9:26:f2:c4:a1:8d:f0:
2e:13:9a:86:05:cc:ad:56:88:8d:d9:a5:9a:37:b3:
a1:43:54:c8:67:09:37:dd:fb:69:6a:0d:03:8a:cf:
e3:f0:94:8d:fe:16:75:be:54:f9:56:b6:3d:a5:d2:
bd:12:ad:e4:25:04:9f:b7:bc:85:7c:d1:00:43:fb:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:D5:D9:82:3B:2F:5A:12:94:70:0E:A2:DB:03:3C:F3:76:15:08
X509v3 Authority Key Identifier:
keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:fb:b4:94:d9:84:fd:55:25:74:bc:ca:1d:70:45:fc:df:
d5:f4:b1:1f:c3:17:87:e1:f8:85:89:ce:04:ac:ab:98:60:5d:
89:46:52:82:37:52:94:b1:ad:5d:a2:c8:e7:24:62:8f:e6:1a:
4c:89:9c:b1:db:f7:65:8d:69:ff:fc:03:1a:36:44:6a:62:6d:
d2:05:80:1f:a9:38:16:cc:e8:b9:be:fc:13:7e:ee:d4:63:38:
93:49:e9:8a:f3:a6:05:48:af:d6:57:6d:c7:0d:84:ca:b7:64:
cb:d5:e6:8a:9f:37:3b:4d:90:3c:29:75:9a:72:1a:19:e3:32:
69:f4:b8:ac:96:88:3c:4c:cc:ed:15:ce:80:b7:ff:49:58:2c:
f5:89:6d:d5:ae:2b:9b:77:fa:93:bf:eb:a9:fe:f4:f6:0d:dd:
aa:1c:17:ac:b3:43:59:d5:0c:4c:d9:19:f2:81:e6:f0:f6:9d:
aa:b5:98:cd:40:82:07:03:3d:4d:0b:53:6e:86:00:c2:0f:78:
6f:e9:46:c1:fe:6d:ad:c2:46:40:e6:90:46:c0:dc:8e:c3:a7:
9a:4b:3f:d8:6b:a1:99:ea:8e:65:b1:29:5e:d7:5b:7e:61:37:
d8:a1:8d:9a:3a:6c:ae:67:88:20:89:ae:55:68:0d:f3:f3:0a:
d0:a8:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:31 2025 by rpki-client