Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: 11EmhdttaVfdi/WnHUIapBGd591MdoVkLpDQYokEFYw=
Subject key identifier: BA:BF:B0:F8:B4:74:1F:D3:E6:11:AF:1B:26:32:BB:58:70:53:00:59
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019A5119A1F06AD10D78D142BC7B37A135F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0DAD
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: zsXqaORaN1dWBFW6nVdZnQ6RTT7a4aN1a3kVYnlNrKY=)
2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=)
3: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (hash: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a1:f0:6a:d1:0d:78:d1:42:bc:7b:37:a1:35:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=babfb0f8b4741fd3e611af1b2632bb5870530059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:58:66:2b:ef:49:cb:f6:eb:83:91:9a:2c:
1b:84:6d:30:73:05:12:95:36:97:3d:c3:a3:18:16:
cd:f1:3c:2f:18:65:5b:2e:0e:cc:e5:d0:89:83:75:
ad:f1:a3:b9:a4:3f:73:b4:ae:e8:85:51:e8:9f:8a:
06:0a:80:f8:c6:82:20:dd:58:cd:e2:64:2d:64:81:
5a:13:19:eb:69:04:54:ce:62:ad:f0:1d:3c:d5:a5:
7d:bb:10:d7:4a:70:0e:b5:6c:b0:a5:9a:fb:32:2e:
bc:bb:ce:91:be:45:8a:fb:32:a1:c6:7f:99:11:a7:
1a:6b:06:58:a3:49:4d:b8:3b:65:49:c6:d6:b5:f5:
bb:38:c6:71:51:ad:51:e3:15:30:48:e9:e9:6b:6f:
7d:8a:27:5e:ea:91:16:cd:06:b9:a0:ad:b3:8e:7d:
d0:a8:f4:aa:82:b0:1f:36:2e:be:fb:f8:86:06:e6:
ca:19:b9:17:01:ea:37:0a:ba:9c:61:d8:9d:3b:20:
87:31:a6:c1:e5:72:3d:23:c9:c7:36:79:4d:11:bd:
bf:3f:07:f4:f3:c9:05:f5:05:1c:30:fb:1d:2e:a8:
b7:a7:3b:48:25:4d:8d:7c:cd:d8:5b:a1:64:b9:7e:
33:00:96:7f:43:2d:7f:e2:86:4e:ac:0b:1d:29:87:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:B0:F8:B4:74:1F:D3:E6:11:AF:1B:26:32:BB:58:70:53:00:59
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:4d:7c:99:c8:b0:ba:4e:8c:52:1a:5a:b6:45:64:03:ac:
17:08:6d:17:66:b9:ab:38:85:28:94:1e:f6:b4:fd:7a:8d:fc:
83:16:13:69:32:dd:a6:54:e3:c9:a4:d7:99:d8:f3:41:a1:d5:
ce:43:c3:a2:15:a4:7c:b3:87:86:98:26:45:bb:34:88:9d:0d:
35:d6:60:e6:33:6e:2e:2b:1f:2f:10:cd:41:c9:3a:60:b2:be:
88:0c:87:61:92:f6:29:37:f3:d2:83:6f:a9:2c:4a:5f:23:91:
08:1f:00:94:bb:9d:f9:30:4d:fa:19:78:ef:e0:48:9a:9d:3b:
c2:7e:11:87:c0:ad:1f:1a:85:10:27:0d:5d:17:e7:1d:5c:10:
a8:9a:72:90:b2:87:a8:8d:ef:94:38:13:b2:94:2c:21:25:c0:
4c:a8:de:d4:de:f0:3f:c3:b6:5e:5e:7c:d3:6c:92:68:5a:86:
5d:38:fe:dc:80:e0:7a:28:94:ae:54:b6:15:3f:f6:0c:c7:59:
c2:a4:d7:e9:5d:a2:5c:85:45:c9:94:ad:66:9b:21:7d:1d:69:
b2:f1:73:18:73:50:e6:66:df:5e:1d:f7:86:ee:ff:a2:be:86:
c9:c6:aa:4b:9f:b0:03:0d:b1:6c:15:6c:b6:e5:9f:cb:d1:58:
68:11:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:03 2025 by rpki-client