Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: qYzDNm1IX6hi0FaXg/R27Obo1cRwejTt4Fsm5pZYnnk=
Subject key identifier: 28:5D:AD:C6:7E:C8:0C:1D:CB:93:67:2C:6A:97:CC:3A:E0:9F:A2:71
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019A4E18DD919FD31B3D05705F23EA0DCBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: xvAVDPeuo8VUkpScHkQJxy5jK6bd2DMh2su1Vm1oyW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:dd:91:9f:d3:1b:3d:05:70:5f:23:ea:0d:cb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=285dadc67ec80c1dcb93672c6a97cc3ae09fa271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:84:f0:32:98:1d:b1:94:db:c8:08:94:f8:
83:33:6e:ae:d7:b6:71:32:8d:9e:cc:97:7d:92:55:
d8:78:0c:95:4b:8f:19:53:83:30:9e:84:55:4a:4c:
a7:0b:b3:0b:3d:ee:e0:c7:ff:98:8d:eb:51:5e:38:
b5:e6:83:58:15:48:ea:41:00:a4:19:1c:ab:42:10:
82:44:95:28:d5:d0:b2:b5:84:18:bf:d2:26:eb:54:
9d:d7:b1:6f:b4:4f:7f:3d:97:5c:a1:e4:12:4e:05:
d7:2f:3f:57:c8:cd:e3:66:fa:5d:28:77:39:0a:9b:
fd:16:a0:a5:f8:45:b8:15:fe:0b:b3:94:5b:7f:fd:
4c:ed:24:9c:a7:39:02:0b:2f:63:46:04:ec:15:7f:
c5:40:89:dc:30:9a:d2:4f:56:6f:c5:72:78:e8:e4:
7c:bf:89:15:1c:a3:c7:9b:36:d7:67:f1:bf:87:04:
e4:b9:c9:8e:46:92:db:64:fd:7d:5e:f3:92:c7:9f:
0e:a9:ff:67:10:ed:46:76:2e:c5:ae:73:8a:4d:9d:
be:32:62:ac:c5:3d:06:8c:1f:a9:2d:8b:44:06:88:
f7:17:48:d2:cc:bf:8b:18:49:74:b8:e2:d3:66:ec:
88:80:f2:ed:8d:fc:0c:a8:63:53:ff:d9:b8:2e:dc:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:AD:C6:7E:C8:0C:1D:CB:93:67:2C:6A:97:CC:3A:E0:9F:A2:71
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:3a:87:03:69:32:53:79:9c:23:8c:ec:a6:c0:43:35:f7:
95:1f:f8:21:36:b4:dd:41:56:c1:9e:76:cd:a1:c3:6b:e9:7a:
ba:a3:82:dc:9f:49:b0:4b:81:be:22:d6:78:d3:ce:1b:d0:0b:
1c:e6:fc:3d:70:94:f5:d8:4b:77:9f:74:2c:fd:9f:19:b9:1d:
92:3e:19:ea:72:f7:65:de:a7:a6:ae:72:a0:5b:e0:51:79:ac:
5f:d6:5a:ca:b1:88:46:e3:a4:2a:29:22:fd:88:e7:df:73:47:
b1:5e:04:25:db:a9:62:35:5d:60:6f:f8:b1:7a:37:d1:5e:8c:
d4:01:58:ed:13:a3:94:20:8f:3b:7e:1c:de:23:3b:08:05:63:
db:89:84:38:76:6d:64:57:8f:88:fd:92:93:89:a6:1a:33:b1:
64:69:33:96:f5:5e:e2:be:bf:1f:4d:7a:fa:51:27:46:d6:82:
e6:1c:72:6e:35:3d:3b:14:2d:24:02:3f:5e:03:ad:d7:a2:fa:
f7:23:20:dd:a1:2a:13:33:7f:dc:35:44:fa:4a:2a:03:34:00:
06:5d:05:57:33:a7:5a:9b:4e:ee:d7:cf:4d:23:a1:ba:0b:7b:
8b:12:e8:15:60:56:68:73:f1:ea:44:ea:ee:d2:d8:af:0c:61:
d3:4c:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:03 2025 by rpki-client