Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: MX2zZ0KlC9YiuoofZAdawCqmVcee6ix5a8ASzy1grR8=
Subject key identifier: FE:BF:51:8D:51:9B:6B:18:D5:20:84:E4:08:FA:D2:B2:36:A6:36:C8
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019A4F6201F401DCAD056FC9493EEA3A11B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: Fk/peUtun2be9t8U4XRNoeLsVD984yFIYD/aBcyGzdM=)
2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:01:f4:01:dc:ad:05:6f:c9:49:3e:ea:3a:11:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=febf518d519b6b18d52084e408fad2b236a636c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:54:42:8c:95:e6:f0:36:f6:b6:f7:b7:60:
64:44:e8:53:51:92:1a:b8:91:35:b8:43:56:9f:92:
bf:4b:fb:b8:a2:14:7c:29:36:7b:4f:85:cb:04:ea:
0c:28:81:ed:3f:e5:a4:87:05:6d:da:89:71:fa:f1:
27:02:22:f4:e5:54:87:22:63:c4:ca:53:51:a5:bf:
82:b9:19:0f:78:3d:db:75:65:de:a7:ca:70:f6:ad:
65:71:08:89:f4:2c:6e:35:d2:14:77:47:b7:20:7a:
ac:67:ca:a3:d6:74:4d:2f:15:b2:ec:c4:f1:22:c5:
6c:55:5c:f6:d9:5c:70:82:0a:41:8c:1e:ef:be:e7:
c9:aa:e7:d7:29:48:2b:f2:51:e0:2e:6b:a6:13:19:
61:15:75:49:52:0c:ca:d6:43:29:5e:88:40:84:aa:
9c:3a:6a:d1:17:21:13:66:0a:1a:34:0c:db:1c:14:
df:f1:e7:72:cf:cb:07:5a:98:7c:3c:ef:45:18:70:
d2:a3:c8:68:b6:4d:2e:82:ef:f1:be:d5:83:26:fa:
3c:54:55:63:ba:38:b3:db:dc:4b:41:34:8a:8d:7f:
d2:73:57:a3:12:2f:da:d0:dc:98:88:73:47:b0:e1:
40:a2:10:38:44:3c:ef:16:59:dd:5a:ab:ca:5e:0e:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:51:8D:51:9B:6B:18:D5:20:84:E4:08:FA:D2:B2:36:A6:36:C8
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:2b:20:1b:4d:03:97:b1:80:75:42:2b:3a:ae:10:58:aa:
55:83:31:59:07:2c:97:2a:36:b6:78:6b:ee:eb:4a:6c:43:6b:
bb:68:a8:16:7e:e5:e4:b4:2f:16:da:51:7d:01:6c:09:db:91:
95:ac:4a:8c:d5:5b:aa:ee:b9:43:d7:8b:1f:47:1f:76:af:73:
fe:60:db:a8:1a:e4:6a:19:82:fd:dd:78:17:02:95:2e:60:ba:
c6:51:ce:99:f3:6b:e0:b8:ae:55:df:1b:11:b1:a6:03:c2:77:
de:86:0b:5d:ff:f0:2c:6c:16:84:c0:51:ac:c9:a8:ff:7f:ee:
09:8e:c3:d5:ef:84:20:68:33:d9:57:99:36:d7:34:98:12:11:
50:84:f3:0d:8a:b2:dd:b1:51:d3:32:2c:b8:33:9b:9d:78:81:
d8:cd:93:ee:c6:85:2a:6a:46:73:e1:38:56:45:e3:8b:ed:c7:
56:b3:d1:4c:3b:45:c9:c2:6b:1e:98:57:a2:c2:5f:83:ff:13:
a3:b1:bb:4c:97:86:e5:c2:57:5e:40:da:1b:17:fb:8e:96:0d:
cc:c5:fd:11:ee:04:7a:27:b6:3a:22:18:b7:10:e7:c0:9d:db:
7c:ba:fa:fc:e3:e7:c2:6e:05:77:c1:3e:8c:45:14:38:7f:57:
04:02:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:58 2025 by rpki-client