Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: Zd18yeGH3HIcXtOjBfyfOz+xDDKQFc4XEKN3Tr/3bGY=
Subject key identifier: A6:6B:78:EF:42:C6:8B:04:33:9C:D5:59:4F:42:FC:84:B8:00:95:90
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019A503E3AB0F9C76F70C3063136BD2EAC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: uckO4gLElbffyyovgClrNfbYS4os3oINHK4/hlByuhg=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3a:b0:f9:c7:6f:70:c3:06:31:36:bd:2e:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=a66b78ef42c68b04339cd5594f42fc84b8009590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:99:d2:45:4c:b7:00:ac:17:53:c2:3c:78:26:
06:2c:2d:df:7f:01:35:dc:ed:ad:85:02:af:81:e3:
16:9c:39:db:ab:14:d1:c2:1a:e6:2a:58:30:2a:1e:
96:66:86:b3:3a:2a:9a:6e:c0:e7:d9:6b:61:c7:34:
5a:30:70:14:bc:0d:3d:ac:6f:24:4a:58:d1:88:3b:
50:1a:08:b1:0d:ea:c3:63:1b:14:0a:19:90:de:77:
ee:dd:df:77:65:40:7c:d0:9a:ed:b6:97:33:a9:80:
01:c2:c1:4b:d4:e1:f4:fc:b6:0e:0c:53:a3:6f:8a:
dd:2c:47:f9:15:48:c2:f6:42:49:ad:c7:7e:99:20:
94:45:b7:c9:0d:df:44:52:27:bd:c1:ed:c3:45:68:
ca:eb:7b:6f:d3:b7:95:cb:28:1f:79:f1:ec:bf:02:
5e:68:43:72:41:ee:7d:40:ed:b5:22:90:ff:d4:8f:
ec:a6:26:59:39:19:aa:ec:23:60:9a:e1:3c:59:01:
c5:40:c6:16:88:ef:6c:ac:d2:a1:06:6f:73:a0:d6:
e9:e9:47:68:57:97:5a:4f:90:86:3d:46:32:49:44:
20:f1:ac:5a:cc:6c:d5:0b:b8:6c:e7:f5:16:30:59:
12:62:d9:45:e2:a5:f2:0b:b0:58:f6:47:32:a4:7c:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:78:EF:42:C6:8B:04:33:9C:D5:59:4F:42:FC:84:B8:00:95:90
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:03:a7:3c:b0:dd:6b:4c:8f:ef:9b:5e:74:c6:89:44:5d:
cc:bf:d1:e5:d4:23:c1:7c:27:e1:f9:51:3a:be:fd:00:d6:9c:
2a:4c:61:c0:6a:f6:f0:4f:1c:af:18:21:ab:f9:25:df:19:e3:
f8:02:b8:79:9d:90:f6:d3:2c:69:72:9f:19:f5:a9:90:7b:1d:
d3:9c:42:03:16:96:dd:11:28:e4:00:b1:4a:cc:b7:fd:07:48:
f7:fc:c3:c7:1d:79:12:0b:f3:49:27:93:a7:61:74:e7:dc:1b:
9c:da:ff:d0:08:48:e9:e3:b1:2e:e0:fb:65:da:ef:19:bd:95:
36:f7:e8:05:a3:7f:4d:2c:17:76:78:18:a4:82:00:12:7a:a5:
ca:5d:55:b8:92:b5:1a:88:cd:ac:d2:8b:62:14:f3:0e:5b:92:
47:6a:7a:3c:e0:25:bb:88:3d:3a:80:ec:d5:a2:5b:ac:43:9a:
c9:89:a5:91:55:e9:54:fe:7b:1d:cc:b8:fe:c6:6c:97:fc:f0:
00:d9:79:b5:61:ac:17:b8:c5:69:d7:68:be:c4:41:9c:b5:37:
8c:6b:2a:cc:9f:6d:e0:5b:93:4d:49:26:cc:11:41:73:ea:3f:
77:24:fa:a0:c1:14:f8:c5:8c:51:1c:d5:3d:3c:44:6c:15:2a:
b5:f1:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:52 2025 by rpki-client