Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: Y9fZWkKdvtWGzWsG5qxbuF/T5Q6HlSWeXb4cTFO0md8=
Subject key identifier: ED:C2:8B:10:0F:C4:07:DE:68:B2:71:0F:2C:24:B3:DB:DF:E7:91:7D
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019A50E2FF91EBB577DEA99E05945B625192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 1449
Signing time: Tue 04 Nov 2025 22:00:45 +0000
Manifest this update: Tue 04 Nov 2025 22:00:45 +0000
Manifest next update: Wed 05 Nov 2025 22:00:45 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: GUyFasop3pA8XiGob6+784pEwoHZaDPv9ztI2Ao9BX8=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:ff:91:eb:b5:77:de:a9:9e:05:94:5b:62:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Nov 4 22:00:45 2025 GMT
Not After : Nov 5 22:00:45 2025 GMT
Subject: CN=edc28b100fc407de68b2710f2c24b3dbdfe7917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:50:38:9f:4c:69:f8:83:c3:68:c3:02:26:
6f:73:94:0d:97:21:e6:9b:97:56:b9:ff:a3:b0:f1:
7d:39:b5:4f:7d:1e:05:ef:3e:25:cf:73:19:c1:af:
66:af:b7:96:b3:64:f5:09:43:52:ae:a1:73:0b:d5:
55:91:76:dc:19:34:f3:5c:16:32:6f:8e:ca:a4:a8:
01:cd:dc:8a:5e:93:02:cb:9e:9e:e5:50:60:7e:df:
59:4b:23:52:04:07:59:e6:7f:95:70:10:51:21:bb:
5d:71:7b:71:7b:45:a5:f2:60:9a:92:a4:57:8f:3f:
00:b5:e8:c5:67:b9:82:78:bd:5d:af:1b:b6:4d:be:
69:d6:e3:15:58:f3:a5:20:5e:96:29:e1:49:3c:4b:
f3:b4:62:e4:f9:aa:d1:32:1f:60:95:77:8a:3c:b4:
85:06:1f:ad:82:3e:2a:2f:33:d2:ce:26:8e:cd:dd:
cc:4f:97:fa:39:45:71:f6:21:13:fe:0c:dc:1a:17:
40:e9:c2:d3:38:82:8a:ac:25:d1:d2:e4:20:f4:84:
6a:56:30:2f:29:6e:3c:a4:48:14:5e:48:c2:b9:fa:
c7:3e:67:98:68:f7:b3:10:39:d3:2d:3b:98:2e:bc:
44:23:ab:8a:5d:b5:81:40:44:e5:c5:29:ba:5f:7a:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:8B:10:0F:C4:07:DE:68:B2:71:0F:2C:24:B3:DB:DF:E7:91:7D
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4a:ad:21:f1:47:c2:0a:4f:eb:9c:f5:54:20:1e:11:82:38:
fb:a4:d2:50:0c:62:38:ca:43:f3:39:1d:a0:f2:52:09:72:23:
fd:16:2e:df:e9:29:78:c1:f9:22:68:87:8c:f2:1b:e3:77:6f:
42:fe:ca:1d:d5:41:3d:a3:bc:ad:09:79:47:02:3e:6b:8f:c9:
4e:f8:6a:cc:60:75:39:be:1a:8f:7d:c8:40:0c:63:11:db:34:
c4:f9:80:3f:26:81:6f:2c:83:d9:6b:36:d0:b2:91:39:06:89:
97:b8:9d:aa:58:ba:cc:27:84:a8:2e:a3:22:f0:19:40:75:d5:
30:91:49:42:94:ba:3e:c7:15:8c:e3:3d:f2:74:f1:85:8f:44:
86:4e:b3:88:a1:25:b3:14:98:44:82:db:df:aa:a7:1e:11:8a:
fa:95:b4:04:36:1a:4e:82:6b:b2:7d:73:bc:d3:45:36:08:6c:
8a:7d:6f:16:f2:fe:1f:b8:95:11:d3:2b:3b:1e:af:2f:24:12:
04:82:e7:a5:2a:3d:fd:3b:06:8c:0e:e3:9b:f5:6d:bd:8d:54:
79:96:b5:16:5a:ef:e1:c8:56:5f:79:80:41:7d:35:e7:22:a0:
63:4a:c4:16:15:14:3e:e5:c6:1c:1a:21:00:3c:e7:fb:40:f6:
19:f3:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:09 2025 by rpki-client