Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: C4F7ejpzvP4T0M/ZLOV2hPY50Z7SuhFOIu48ZMLeLQw=
Subject key identifier: D0:14:11:4B:EA:D9:0E:98:2F:29:15:5E:FF:3B:85:36:67:41:BC:7D
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019A5074C33B8317E7AEFDBFCBA56DD2F3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 0391
Signing time: Tue 04 Nov 2025 20:00:20 +0000
Manifest this update: Tue 04 Nov 2025 20:00:20 +0000
Manifest next update: Wed 05 Nov 2025 20:00:20 +0000
Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: 13v0fSxyX7Cs6ZK4PLfWHBEUPfxp3L9ngTWso4iuvDU=)
2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c3:3b:83:17:e7:ae:fd:bf:cb:a5:6d:d2:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Nov 4 20:00:20 2025 GMT
Not After : Nov 5 20:00:20 2025 GMT
Subject: CN=d014114bead90e982f29155eff3b85366741bc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:51:64:53:a6:e6:a9:33:d7:90:e1:f2:80:
cf:ba:34:6b:2f:98:99:2e:97:7b:b1:d1:a8:33:46:
f3:29:ee:6c:5b:63:33:fd:3c:67:11:a5:07:71:05:
04:24:61:f0:02:c5:a5:61:a9:03:1b:6d:db:b0:42:
1f:87:e0:7f:2e:2f:5a:74:bf:42:7b:2f:2f:ad:58:
bf:87:3c:c1:63:0a:41:eb:03:00:6a:1f:49:ed:32:
bb:cf:23:ba:5b:16:c0:81:5b:29:b0:9e:67:16:75:
70:70:21:a9:8c:eb:11:18:35:47:86:97:6c:20:10:
b1:bf:7f:77:64:13:8d:16:bf:cb:d4:5b:89:bd:ce:
27:cb:a4:e7:9a:4b:5f:3c:9a:8b:41:97:c3:f5:9e:
1d:a3:b9:08:78:e2:0c:13:f8:df:fe:6e:f8:35:98:
e0:ac:48:ba:89:8a:31:01:8b:e8:c0:a5:56:b1:67:
8b:5a:75:30:a0:5c:47:0e:6a:3c:dd:39:7b:39:35:
6e:cd:27:bf:18:e1:11:2f:79:16:e2:b9:fb:51:72:
62:48:8f:28:73:1f:61:06:ac:9b:bf:e2:9e:18:7c:
4b:4e:2d:1f:2a:58:43:6c:a3:69:44:32:26:4c:15:
c2:ed:f3:19:53:dd:db:60:5c:bf:19:86:9c:26:e7:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:11:4B:EA:D9:0E:98:2F:29:15:5E:FF:3B:85:36:67:41:BC:7D
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2e:91:e0:69:89:90:f9:c8:a8:9f:dc:f8:e3:d8:1d:7d:8a:
0c:f9:2f:d6:ed:e8:93:30:b2:85:7e:03:38:e6:2d:db:d2:53:
9b:11:96:d4:42:7a:36:03:25:c4:bf:95:ba:ba:df:60:6b:ff:
94:54:58:18:7a:a2:b2:0d:af:9d:3e:5e:1d:5b:0f:ad:3c:0a:
2d:3c:8d:bf:b5:2d:20:d2:e5:89:78:b4:68:e8:95:00:6d:bc:
34:ba:e6:19:99:93:b6:74:f2:17:17:31:14:6f:c8:1e:8a:82:
65:d5:85:ed:96:34:b8:c4:6c:27:d1:5e:f6:f4:5d:26:2f:65:
e3:79:76:f3:91:71:77:7f:02:93:75:86:ae:07:38:98:eb:3f:
85:c4:6a:b4:7a:03:6a:c0:7d:01:63:85:0d:39:45:ab:57:d3:
94:50:cd:c8:6d:5e:a7:71:5a:c5:20:fc:c4:16:a4:91:f2:92:
3d:a6:37:dd:07:b7:0e:fe:d6:6f:c6:2a:74:b8:54:40:b7:a6:
44:7c:2a:06:e6:0b:e4:18:85:ce:30:ce:a5:25:a2:7a:ad:35:
40:aa:58:84:5d:98:bc:29:01:c8:ee:45:9a:ce:80:92:2c:e6:
2b:72:7d:54:91:53:c3:3b:34:39:8e:9e:b2:33:60:42:9d:68:
bf:6d:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:09 2025 by rpki-client