Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: NyOoKavfEUskMPSUara5UIjAOO6vCJ7pPs7tKtXpGYc=
Subject key identifier: AB:A8:6E:0E:9C:24:8C:FB:87:91:E3:CE:34:91:67:8D:65:2D:48:53
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019A4DE154D54E8B0F4C04E0A91AD4861845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: rCrfGIaFRt1Q6b7OdVvPQgYHyf+3fo4kTn8lsDa7ysA=)
4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:54:d5:4e:8b:0f:4c:04:e0:a9:1a:d4:86:18:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=aba86e0e9c248cfb8791e3ce3491678d652d4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:1c:e3:f2:ab:77:a0:ff:68:c1:4d:e0:36:
a2:21:7d:f2:1f:b2:4a:16:1a:95:32:58:ba:3d:a2:
7e:2c:01:de:60:40:4b:3a:ca:65:9b:c9:86:44:c1:
1f:2f:85:fa:1e:2c:7d:56:9d:18:c0:9e:fd:ae:34:
a0:87:92:c5:cd:ab:ad:f4:59:27:b8:0a:0c:08:63:
1c:16:bb:7c:8f:aa:b3:c2:7e:7c:e4:5a:29:64:64:
e2:68:b7:01:c8:6f:33:83:cf:4e:ed:49:10:e3:75:
a6:3e:e1:55:18:0f:b3:08:5a:e2:fb:3d:d9:3f:5e:
71:33:ec:42:77:b6:47:35:62:69:72:e7:f1:49:f7:
34:fb:68:9f:e0:79:c6:b3:0f:ad:01:90:d5:68:48:
b5:40:28:f7:d4:e9:96:77:2f:7b:03:19:8c:4e:06:
e6:13:e8:15:07:ab:90:00:4b:1c:cb:b8:bf:4f:e7:
49:57:32:58:da:b2:39:c5:2b:29:05:ab:a8:86:57:
5e:f5:92:6d:9d:c7:a8:f4:15:a0:fb:86:b4:70:74:
3f:4d:a0:1c:81:48:1e:e3:e1:9c:59:07:69:05:e4:
e8:6d:6f:cc:a1:e8:af:8b:fd:0f:84:bf:8e:e5:f2:
48:10:d4:9d:0a:91:61:ef:0e:23:94:54:e2:df:8e:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:6E:0E:9C:24:8C:FB:87:91:E3:CE:34:91:67:8D:65:2D:48:53
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:52:f6:d5:45:ab:d0:32:01:ed:9f:43:6c:f9:2c:39:5e:c7:
f8:2c:2f:3c:07:69:d0:76:4e:33:28:d7:2d:36:2b:b4:f8:ef:
ce:32:00:d6:5e:ca:56:95:b4:e8:21:2e:15:93:84:d5:9a:71:
55:fe:19:6f:77:27:04:95:8d:04:68:07:22:99:49:0e:07:1f:
67:ec:64:af:e3:67:db:8c:19:bb:29:37:63:28:ce:b0:6c:04:
35:2c:db:76:8d:d4:c5:da:de:7a:fa:09:71:0d:2f:9a:90:ba:
c4:92:45:45:f4:d2:dd:6c:b5:ab:5f:04:c2:f0:b6:51:24:00:
62:92:a6:30:37:07:94:f9:a5:29:0b:e4:ef:da:8b:cf:62:c7:
d0:d8:d3:4b:b3:c2:d1:7f:f8:45:ed:53:25:3c:84:24:54:be:
26:e3:3c:03:43:2e:47:79:25:aa:74:0d:4e:b8:8c:d2:ac:67:
33:0d:d5:35:af:a1:e4:c4:03:d4:16:d8:95:22:53:47:8d:ea:
c4:22:fb:c4:af:27:67:3f:fb:fb:47:78:46:e7:18:ae:4f:71:
36:2c:60:9c:6a:df:c5:0d:4c:45:41:a2:68:1b:7e:60:3e:cd:
3a:dc:90:22:80:2b:79:27:b6:3a:bd:cf:e4:c2:20:5f:97:b7:
b9:b4:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:24 2025 by rpki-client