Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: lhONHc7eSuuF/1mqmnu6wCsBZGwixVTN31eBZHr26Rk=
Subject key identifier: EE:A1:D9:9D:62:E7:8C:5F:4F:77:E8:3B:97:72:8E:F2:CB:D8:A5:E6
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019A4D3CF77CEA1F2131C3BEDB1953FF92AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: vnFnHyHmqpD+toFqWryGeiMrq77Kt2Yog8YZnGBQMto=)
3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f7:7c:ea:1f:21:31:c3:be:db:19:53:ff:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=eea1d99d62e78c5f4f77e83b97728ef2cbd8a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:3a:24:55:f7:40:65:53:9f:6c:c8:d3:7a:
80:40:54:67:28:58:8f:b0:35:26:08:e4:16:a5:d3:
23:59:7e:50:08:f6:28:ee:04:6f:ff:f6:a8:31:8b:
78:a3:9b:24:39:08:62:0c:42:b6:57:69:5a:c3:4d:
d5:a8:10:27:6a:dc:bb:22:f9:93:e5:b8:4f:0b:d5:
0e:90:7b:69:2b:53:bc:0c:d2:32:3d:85:00:00:78:
7c:52:45:12:e1:6a:59:b4:1e:08:45:c7:72:95:a0:
51:7d:c0:c4:73:39:09:fe:e6:36:c6:85:59:1f:b8:
cd:1b:4b:b6:90:37:f4:8c:43:85:19:00:55:07:e7:
ca:a8:fa:24:c2:a7:f7:4c:10:eb:e8:af:4a:b3:ea:
38:1e:2b:b6:bd:81:14:2e:49:97:fe:e5:a4:a6:1c:
55:c2:16:49:b2:12:03:95:18:0e:d5:75:e3:e6:ed:
84:03:4e:80:23:33:43:fa:3d:d4:db:19:1b:02:a8:
e8:13:ee:78:0f:15:5c:18:12:0e:d0:60:ab:49:b0:
06:dd:51:f0:d6:fd:ce:56:d1:56:9c:a9:99:9e:cf:
a8:74:53:a8:95:f1:2f:9f:96:4e:ce:6c:4c:f8:4e:
cc:ee:8c:aa:09:19:18:b8:84:15:be:79:b5:a7:8e:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:D9:9D:62:E7:8C:5F:4F:77:E8:3B:97:72:8E:F2:CB:D8:A5:E6
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:ae:f3:c5:31:dd:62:db:0d:e1:1f:c1:36:e0:6f:e4:b9:
2e:42:cd:41:57:91:4d:6d:76:e7:d0:c6:18:63:e6:89:c8:19:
b3:9b:6e:42:0f:08:33:a0:fb:9c:a3:10:26:1b:0d:8a:f0:c4:
9e:9e:1b:3b:a7:b4:4d:bf:24:65:69:3c:a9:8f:5c:01:9e:fb:
c4:62:92:32:7b:73:63:68:23:64:36:56:fe:4a:33:c2:5a:5e:
63:ce:ce:76:55:9e:ee:a9:1b:4b:fd:a2:59:e2:d3:ea:02:08:
3a:bb:06:0f:e0:ee:e9:2b:85:84:f6:15:38:7f:3c:91:a7:98:
d9:e1:66:b2:a3:5a:72:1c:42:f5:f0:47:70:e7:0d:d7:50:a0:
da:40:bf:10:d5:74:32:84:4b:06:2f:00:8e:e9:63:ea:0a:4e:
00:e5:29:c1:8c:e6:17:c8:d8:a9:e9:f3:e9:b9:df:d3:c6:f0:
57:05:b2:65:6c:6d:9d:ee:cc:d9:9e:71:aa:e8:f1:8b:98:ab:
e5:e1:2f:5c:3b:b9:94:ff:0c:8a:db:47:d3:7f:d9:e4:fb:d5:
25:9d:94:8b:d2:e1:3c:dc:6d:ad:c4:3b:39:40:2a:b4:f4:1c:
d8:b0:89:aa:af:42:1b:11:09:e5:78:0b:e1:b7:f5:37:ab:15:
7a:7b:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:20 2025 by rpki-client