Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier: X2wgdJwbmZCDo13NZ4M1ERTbCBzJrh1LuF7Rz7mZmFA=
Subject key identifier: FF:AA:81:2E:56:D6:00:29:80:F6:1C:A8:97:06:C3:1C:A8:31:1F:F6
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer: /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial: 019A4E4FEBF370DCE9A373F36E054FB94205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: WVDcDP9RUeKmX971GCsgowrsm0gZ12Iw1sRyWP9/X00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:eb:f3:70:dc:e9:a3:73:f3:6e:05:4f:b9:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=ffaa812e56d6002980f61ca89706c31ca8311ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e0:67:92:4c:42:da:8b:9b:57:a4:31:55:2b:
3e:7f:d3:24:c3:ce:ca:b4:d2:e3:15:08:ea:11:0b:
3f:5a:76:da:9d:3a:e2:56:d9:88:b3:19:a7:fb:cf:
f5:ea:77:2f:51:cf:30:42:ab:c3:ea:2f:cd:49:11:
51:47:cc:d8:8f:70:96:e3:f8:1e:05:f2:f6:cf:9f:
26:a7:17:9f:26:05:42:78:43:2d:49:67:9d:fc:ca:
ff:7d:9e:25:6b:98:3f:b4:0b:86:af:fa:13:0c:f5:
71:46:d8:99:ad:46:21:50:b7:9c:b9:8b:4c:66:a8:
6e:21:d7:87:ef:d1:7d:4c:66:b5:be:56:1b:51:3e:
01:9c:1e:d0:ff:92:4f:99:5a:fc:69:af:98:0a:3c:
1f:68:c0:57:ee:a2:e3:fe:28:85:66:d2:8e:05:10:
10:74:cb:fc:b8:91:f4:d3:26:3f:63:1e:c5:6a:d6:
4b:86:4d:92:6e:d7:40:a8:70:a6:bd:39:2e:c6:f0:
0c:cf:df:82:19:78:9a:45:2c:5e:70:36:77:de:e5:
cd:fc:b8:df:4a:28:f2:e8:e8:59:bf:28:60:24:d3:
7e:10:2f:2b:72:83:85:66:5d:69:1f:87:2d:ed:0b:
b9:ed:13:b3:85:8d:5b:6c:de:fc:eb:2e:74:f2:43:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:81:2E:56:D6:00:29:80:F6:1C:A8:97:06:C3:1C:A8:31:1F:F6
X509v3 Authority Key Identifier:
keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:43:46:ab:e9:41:a7:f2:e9:18:d5:30:6b:e3:35:6d:c7:
89:3e:20:9c:d0:de:42:a3:32:6d:d7:23:eb:91:68:16:2b:fc:
06:55:ed:e7:d2:3d:ed:4e:fe:a9:6e:69:ff:65:6b:0e:be:72:
29:d0:2f:1b:5e:a7:ff:1c:7b:40:a7:59:0c:e8:00:a8:24:88:
83:bd:d4:ff:e8:f5:9d:9a:00:5a:50:54:e0:ff:e9:b5:11:5f:
ce:7f:b2:b7:a2:c9:89:ea:80:c9:c9:b1:8d:52:ea:ba:ed:c5:
0f:cf:37:7c:2e:c1:2f:0e:c2:10:82:a2:66:4e:e0:b4:15:ae:
ec:33:ad:04:96:3f:59:01:98:14:ec:5b:24:af:24:bf:60:d5:
dd:eb:b4:d0:9b:b6:17:d8:e0:95:e9:2e:62:bc:5c:f4:36:f6:
05:67:03:13:5c:3e:82:ef:75:cf:35:a7:64:99:01:5e:a0:e9:
6d:2e:a7:21:ff:cf:df:bf:ea:b1:01:a2:b3:10:60:8a:e6:85:
57:5f:92:00:3b:97:ab:62:26:46:b6:62:a1:c5:1c:ad:55:1b:
4f:cd:c1:4b:2a:63:93:ff:1e:8f:10:ca:4a:99:78:ec:40:a3:
62:f5:f5:00:e2:ad:22:b3:51:e1:ce:b3:08:59:52:f7:78:f2:
63:de:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client