Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: hgjNJu1vMb9oRAH69c/yQdNLz6SG6Rs4lNST7JRpDFU=
Subject key identifier: 3B:5A:7B:4C:BA:37:D7:2A:50:3E:D8:8D:21:2D:68:D5:6C:E8:94:66
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 019A4DE224865986E4C3FB2517A34EB39693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 0552
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: lJNDD2txoWyZIEfs7pV+B3aG8itilEy9trVfVx7BATQ=)
2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:24:86:59:86:e4:c3:fb:25:17:a3:4e:b3:96:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=3b5a7b4cba37d72a503ed88d212d68d56ce89466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:16:c3:9c:bc:92:9d:00:a7:4e:a2:6f:e9:
d9:56:f6:4f:96:f9:c6:da:84:b1:12:91:23:93:7e:
e7:e0:60:ad:6e:c7:a9:34:1e:fc:8e:e5:09:39:76:
15:97:c3:83:d7:73:15:95:9f:05:dc:0b:33:43:c8:
f1:45:95:83:bc:7d:fa:cc:64:26:2d:53:36:15:98:
03:ee:d3:d0:cb:d7:bf:e0:d5:3e:b7:7f:12:6b:33:
ac:ea:ae:c8:97:4b:6a:d3:0d:7b:92:d4:65:97:28:
8c:84:06:80:99:42:e2:66:d4:78:d1:8f:91:c6:8c:
56:95:9e:89:a3:c6:80:eb:d8:90:21:52:79:9b:49:
94:8a:02:57:cf:8f:bc:d3:33:c0:9c:c1:16:e0:77:
30:1c:73:30:b5:01:05:56:c8:40:9e:81:04:d6:bd:
8b:95:3e:d3:b2:b4:2f:3b:3f:62:7d:5b:b5:f0:26:
47:12:d6:42:a1:7c:86:88:2e:b9:fa:c8:fc:e5:b1:
24:83:4b:49:5c:59:1b:fb:05:8a:db:76:7d:11:23:
a2:e5:d8:0d:8d:72:c4:b0:7d:05:bd:ec:02:12:52:
6f:c5:c2:ad:3e:b6:60:fb:77:a9:66:a0:bb:bd:60:
62:44:72:22:0f:f5:58:7c:31:12:8b:89:19:92:5b:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:7B:4C:BA:37:D7:2A:50:3E:D8:8D:21:2D:68:D5:6C:E8:94:66
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:32:46:eb:ef:66:1a:27:d3:f9:40:97:f5:07:7a:5e:d1:95:
5a:41:16:cb:95:49:d4:3e:ac:95:d8:91:df:e8:27:41:ef:4a:
16:d2:5a:8a:bb:00:0c:46:e0:e6:e2:6e:cb:9a:2c:60:b4:c9:
ed:ed:b7:36:54:70:b7:c5:e6:d6:dd:02:a7:2b:61:91:f6:d7:
6d:2e:0b:85:b1:f9:f6:39:3a:da:50:97:35:24:16:33:11:2a:
85:cc:3f:84:f1:6c:48:98:25:b1:bd:7e:1d:6e:e8:5f:71:5b:
8f:a1:37:16:26:7f:37:18:c6:fd:17:38:64:53:0b:f6:e2:16:
2b:22:12:bf:a9:ba:cf:86:6a:2d:42:b0:f8:7f:64:ce:c6:a4:
ed:12:ea:46:73:92:0c:8e:56:40:e2:4d:0d:01:cc:b2:90:5b:
24:74:cf:5b:89:a5:28:2b:9e:74:24:e4:72:46:0f:33:7d:39:
d1:4d:41:fd:3e:7e:02:8e:ac:55:0e:99:e9:c0:ce:39:88:6c:
c8:58:db:67:99:53:9c:3d:eb:34:09:fa:2c:48:47:38:a4:97:
f9:79:69:16:17:01:91:fc:4c:49:e8:a8:39:de:9e:65:88:f0:
b9:6b:03:5f:8d:91:2a:59:7e:43:79:aa:7d:fb:88:31:52:ea:
6e:3b:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:00 2025 by rpki-client