Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: rzGwnumlB1c/hSUNJWIHbAxXrkGsOCWaDqEdvrya7cE=
Subject key identifier: AC:FC:DC:FB:1E:26:D4:C6:DB:F5:20:08:A1:C9:C4:66:36:4F:C2:55
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019A511955D2CCC94F21493125C16D22665B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 23:00:05 +0000
Manifest this update: Tue 04 Nov 2025 23:00:05 +0000
Manifest next update: Wed 05 Nov 2025 23:00:05 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: ZAQoaCMM1QHjUBtoGbghotiBvbbzdUaLWDshljO5dxI=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:55:d2:cc:c9:4f:21:49:31:25:c1:6d:22:66:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Nov 4 23:00:05 2025 GMT
Not After : Nov 5 23:00:05 2025 GMT
Subject: CN=acfcdcfb1e26d4c6dbf52008a1c9c466364fc255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:1c:85:1e:67:6a:7c:45:59:33:bc:c5:38:
84:95:26:b9:8f:16:4d:30:bf:dc:4f:6a:6b:8a:b6:
82:d1:27:99:ea:b7:93:81:4a:ef:20:18:de:70:7c:
28:f7:e2:43:22:f7:63:16:63:d1:d3:fa:be:c1:f6:
41:fd:91:fa:cf:13:66:b9:37:da:f0:de:75:66:4f:
64:4d:f6:f9:43:ed:ff:0a:e0:e7:f9:53:de:70:e1:
bd:89:61:c2:da:bd:cb:c2:01:c6:a8:d9:a7:c9:36:
c2:35:8c:25:33:11:b4:05:39:98:3f:23:2e:b5:cb:
63:67:8e:25:46:20:6f:5b:53:a6:4b:a5:6e:11:85:
46:f6:86:67:7e:07:32:4b:01:c1:18:9d:2b:a3:b8:
81:3b:14:70:29:36:d2:86:01:11:3c:f4:f0:57:8e:
54:f7:94:b5:d6:25:94:31:da:ca:07:eb:4e:23:b4:
94:e6:4e:c2:cf:0c:1d:03:93:40:81:b9:d4:dc:c7:
22:03:f6:0e:7e:9d:dd:ef:40:bf:63:4b:f0:2c:cc:
d1:79:bc:b1:f1:00:19:77:95:92:4b:54:97:a5:30:
69:ab:64:dc:75:1a:72:08:c3:b8:22:3a:75:56:6e:
bc:7e:5b:c5:d7:46:96:79:09:c0:47:6e:70:22:6d:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:DC:FB:1E:26:D4:C6:DB:F5:20:08:A1:C9:C4:66:36:4F:C2:55
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f6:68:72:13:64:76:c5:e0:e6:e4:1e:3f:fc:02:10:0e:0a:
4b:70:60:c2:05:b7:ea:ac:b8:b0:36:d4:5a:94:5e:00:15:27:
be:ef:23:67:c5:84:2b:3f:ef:b8:44:8e:34:fb:84:cb:01:af:
fc:f1:a2:ea:d4:85:a4:a0:6d:18:56:11:d5:81:59:d1:78:78:
d4:9a:38:92:7b:b9:71:d7:39:2a:de:b3:0c:3e:80:75:48:41:
62:23:93:fe:49:47:79:c3:e9:d9:48:66:78:c1:e0:e2:b9:59:
40:af:be:95:1e:57:b3:cb:89:79:32:07:cf:4f:d4:b9:f0:5b:
9f:8e:ef:2b:0f:6c:af:d5:a8:1c:c4:17:4e:19:6e:f7:e6:ba:
76:59:d6:5f:10:e4:5a:ca:78:25:47:ef:21:00:a4:b4:19:45:
14:81:38:71:a1:85:e4:41:0d:be:86:cf:af:84:5e:8c:4a:b8:
55:d8:7d:af:15:d2:37:9d:e0:ad:d3:5d:1d:a9:55:66:7c:b3:
02:27:1a:05:c0:a6:4a:68:aa:d8:3c:58:aa:21:9d:34:c8:e7:
98:de:4a:94:9b:11:f2:5d:5e:05:91:a7:1b:c5:2a:ad:0b:e5:
bc:d1:34:5d:c1:8f:09:8b:93:8f:e2:01:01:cd:66:a6:f0:b3:
a2:36:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:53 2025 by rpki-client