Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: tq6n6FxXKTF9SKsg21rO4jtrxyOdCs7kOng0QteLI+w=
Subject key identifier: 81:30:62:E4:EB:51:A1:A5:6A:8F:05:0B:65:36:DF:E9:A3:0B:A7:6D
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 019A4EF54B8F9201A0337A3D608D84194F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0A62
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: cNJolw19gs6f2P98hETJdpIoo3U3YFrrs8D9np2wANM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4b:8f:92:01:a0:33:7a:3d:60:8d:84:19:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=813062e4eb51a1a56a8f050b6536dfe9a30ba76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:16:31:c4:26:d2:9f:d6:0e:80:3a:b0:2f:
8a:a0:b8:75:ee:22:02:0d:8b:a2:0e:5c:22:af:d0:
8f:a5:c7:31:6a:81:3c:79:a5:ea:27:c2:74:97:45:
9e:c8:ab:77:70:fa:01:aa:86:a0:88:cc:11:b2:c7:
95:5c:e1:68:74:b0:a5:d1:26:fc:81:b5:06:fc:67:
bd:62:a0:62:86:f0:96:31:ce:47:17:9d:7f:07:f1:
d2:93:4b:05:23:43:4d:87:ed:2f:1c:8e:93:28:c4:
95:2c:21:29:97:56:e4:8a:84:da:f5:84:81:02:26:
88:dc:c9:ac:ca:90:59:dd:76:b1:ce:21:10:29:b7:
aa:20:2d:8a:05:88:74:a6:ff:92:12:5b:6c:5a:16:
32:bb:f8:0d:25:f9:00:fd:4b:dd:bb:30:9b:b3:44:
11:ff:21:a7:d4:cb:de:b2:ee:e1:bb:95:d9:9f:5a:
18:d1:f8:aa:08:04:ba:32:93:76:81:cf:f0:e4:ff:
f5:a2:43:bc:3c:18:d3:70:ac:57:1f:0c:cd:6d:e8:
09:22:1b:82:a0:9a:1c:48:37:2a:a5:ec:52:0e:2f:
19:19:79:52:fe:1f:fa:4a:fe:1b:f5:12:32:70:0f:
78:62:e5:e3:62:2f:66:45:ab:2f:7c:40:b6:42:c4:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:62:E4:EB:51:A1:A5:6A:8F:05:0B:65:36:DF:E9:A3:0B:A7:6D
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d0:17:f8:c8:f2:40:fe:49:1c:e7:58:e3:7f:c3:a9:53:4d:
c4:c1:fd:dc:70:ed:0e:f8:2b:11:ba:07:05:ae:eb:87:04:f7:
05:e3:b7:64:5b:56:9e:95:96:2f:1f:8f:7b:a1:88:f4:2c:1d:
93:93:0b:5a:26:98:b9:0a:43:7b:09:70:b5:9d:54:4b:77:93:
3f:a4:43:cd:d0:aa:7f:d2:0d:52:2f:18:1d:ae:e5:8c:d7:6c:
c4:56:00:0f:6a:55:2c:1a:92:c6:a7:05:db:e6:4e:7d:09:aa:
d2:bb:27:e7:f7:f4:44:47:04:b0:b9:53:46:6f:88:37:8d:d6:
3d:c2:40:ee:a3:64:d0:b5:cc:80:75:46:25:ea:42:f6:51:40:
67:ee:a5:05:5f:68:27:92:9a:1e:05:f2:8d:a1:be:b4:0d:b9:
65:32:e1:2f:73:83:5b:b1:c9:f2:82:c3:24:e8:1f:33:e6:d6:
99:89:68:d8:76:3c:b4:24:77:4f:58:27:1c:95:79:9e:a7:09:
9a:64:1b:e6:3d:38:2b:c3:f7:72:7b:4b:b9:10:fd:ca:d7:b2:
da:02:58:b8:d7:c8:4e:81:53:65:f4:26:69:7c:9e:cd:84:d3:
e7:18:ea:38:75:2a:d3:7a:70:13:a4:2c:c8:9d:79:46:71:e0:
86:84:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:36 2025 by rpki-client