Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: ILi/IeYix5xuKd3TFxlX215h9UdOPDxyMQ4W/X2A6Oc=
Subject key identifier: 7A:8D:76:73:C6:5F:7D:DB:00:21:84:B4:78:44:54:FC:E9:7F:9E:2A
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019A533F45448315AB073DF6658E6A6C5D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 011F
Signing time: Wed 05 Nov 2025 09:00:46 +0000
Manifest this update: Wed 05 Nov 2025 09:00:46 +0000
Manifest next update: Thu 06 Nov 2025 09:00:46 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: 8VJDLxPXbCPdJl+mH+Ih+6nwx+hKCYutd+HmNSeR1Nk=)
2: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (hash: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:45:44:83:15:ab:07:3d:f6:65:8e:6a:6c:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Nov 5 09:00:46 2025 GMT
Not After : Nov 6 09:00:46 2025 GMT
Subject: CN=7a8d7673c65f7ddb002184b4784454fce97f9e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:c4:f1:ba:72:92:86:b8:fd:3b:42:36:b7:
fb:3a:5b:a5:d1:aa:9e:cd:dc:dc:ee:5e:14:50:84:
7d:7d:0a:28:ef:c9:b8:dc:5a:18:88:bb:2b:2a:15:
47:db:58:3c:46:ba:80:d4:d5:54:d2:40:be:c8:9f:
e2:f0:82:a1:9e:21:9c:25:71:ed:ca:ca:d1:7a:bb:
9d:d8:7c:88:02:a6:47:a0:1a:6f:c0:5b:97:0f:3d:
ab:ca:48:80:60:e3:f1:0b:1c:2d:01:ca:d3:90:c5:
6e:0c:54:3b:96:14:98:dd:77:93:b6:23:cc:ed:ce:
ae:1c:c5:c5:ab:79:25:32:75:8d:71:67:52:82:be:
1b:66:6d:e2:65:13:00:c1:d1:20:44:5b:78:5e:17:
ec:fb:bc:b4:6b:e1:29:8c:7a:71:2d:2e:10:28:c8:
ef:70:49:8f:57:df:ed:bd:be:c1:e4:8f:a3:0b:d2:
e9:61:0e:74:f4:83:1e:08:2d:7c:fc:0a:99:7e:b1:
2b:d7:8e:90:19:08:db:c7:8d:8a:4b:eb:62:b1:55:
f7:14:d4:07:fe:fd:9b:c4:38:9b:ca:e8:90:cc:76:
1b:7e:f2:cc:0b:41:c7:4c:7f:42:12:63:95:a4:54:
18:04:2f:fe:ab:70:15:f0:21:58:8c:c3:bf:10:16:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:76:73:C6:5F:7D:DB:00:21:84:B4:78:44:54:FC:E9:7F:9E:2A
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:bc:be:9d:11:e9:e3:c2:84:30:d1:74:42:47:31:86:5c:
94:d0:2b:ee:ce:2a:84:4f:29:33:8c:53:58:f7:b0:67:41:04:
ac:48:64:88:05:d8:69:03:1c:9f:c3:ea:86:21:73:d3:79:48:
5f:7a:fb:73:9c:97:73:9d:50:2a:83:14:20:66:e0:f4:00:bd:
e1:aa:65:9e:56:c3:31:17:93:b3:2a:d2:21:90:ae:f1:d3:90:
59:df:5b:3d:5e:bb:dd:67:60:dc:48:7f:db:ed:e0:fb:88:02:
0e:e0:34:3f:aa:96:ba:3e:b5:05:2f:85:3d:0b:d0:9d:fc:93:
94:52:37:97:6b:d6:5f:4f:33:f6:02:8d:22:f0:ed:30:a8:40:
67:1f:62:4f:30:af:35:a8:43:75:5e:3d:ca:10:17:fd:a4:40:
89:33:ca:01:f5:a8:26:97:51:4a:cb:db:f5:1f:0b:8d:3d:9f:
53:48:eb:d3:dd:97:85:2e:ea:1b:a0:0f:fd:2f:37:2b:15:88:
8b:29:8a:1e:8a:29:39:96:86:43:43:c3:1c:f9:d3:4d:cf:65:
80:c2:17:06:2c:01:78:82:87:6b:89:b1:2b:1b:24:2d:b5:e5:
26:21:ad:bf:b5:27:c9:a5:29:9c:b7:29:8d:dc:b0:77:c2:c1:
19:d7:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:27 2025 by rpki-client