Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: vQQEndAJxB9sY+NKf0jjOAeA5QTRS3R5diV1afezyqg=
Subject key identifier: 0A:2A:27:21:97:1F:C2:FF:9E:D9:6C:B4:31:02:F9:16:2C:6F:90:9A
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019A4EF5AF2C1D9C4196D4FF1BCE7BC11572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 06B8
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: 4O9Sn9UeHTi55kKGRxg957KXFZ79NAOBJiFoo479mgc=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:af:2c:1d:9c:41:96:d4:ff:1b:ce:7b:c1:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=0a2a2721971fc2ff9ed96cb43102f9162c6f909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:c5:81:6e:a1:ef:e1:57:1f:40:7b:13:7b:
4a:43:20:56:ec:a1:db:b5:54:a8:94:c0:fc:bf:96:
72:73:42:3c:a0:f2:cc:eb:d1:d0:9f:c0:a3:72:89:
7c:1c:cc:5d:dd:45:d8:4c:77:9b:b3:4b:72:c4:e9:
a9:fd:e3:f1:d0:fc:3e:ea:0c:71:c9:50:47:b8:27:
65:fa:b0:72:da:0d:3c:f6:c5:80:16:17:55:61:4b:
e6:f0:2d:31:c5:9f:d0:5a:11:ef:2f:36:fa:3b:3f:
af:d4:ed:f9:c5:3c:aa:5a:23:af:3e:89:8c:8e:1a:
fc:75:fb:27:12:3f:de:5c:6a:00:2b:cb:f2:59:42:
8c:3b:80:1f:7a:2b:0f:35:e8:64:8d:5a:02:17:49:
59:ed:4a:24:eb:2a:87:c3:d4:83:44:ce:c2:a2:12:
e4:a2:c0:11:3e:a8:af:e1:da:5c:bb:0d:15:78:36:
de:ea:58:7e:fb:ed:e5:8b:7b:0d:c7:a1:fa:c0:95:
55:f5:8b:d7:dd:c1:f3:4d:39:2f:83:96:5f:5c:2b:
11:0f:94:b7:dc:30:be:53:39:4b:da:fb:b5:83:04:
b9:e9:0f:04:44:f1:08:bd:f9:c5:0c:42:36:91:42:
c0:2e:5d:be:cd:50:ad:9c:45:8c:04:a3:4a:e5:49:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2A:27:21:97:1F:C2:FF:9E:D9:6C:B4:31:02:F9:16:2C:6F:90:9A
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:57:c8:bf:47:68:77:7a:ca:24:3f:a0:e0:bd:7f:11:30:54:
c1:70:1f:b3:bc:46:0c:24:a0:7d:e0:a5:32:38:62:4b:21:7b:
3b:66:2a:90:6a:80:85:15:c1:4e:84:b3:ae:56:92:f8:dc:b0:
fe:fb:5a:4f:1b:14:f8:48:e7:f9:c4:b6:b8:c9:04:b6:8e:91:
68:de:24:97:0c:30:f5:1e:97:bd:2e:4a:2c:c6:bb:18:6e:f1:
1f:7d:42:a0:49:b0:4c:2d:04:e4:df:a3:44:12:a7:a9:cc:3a:
ed:5f:40:82:32:4c:9a:d0:97:2a:5b:83:09:e3:95:0b:50:d5:
6d:a9:06:23:58:f6:1f:23:21:fb:07:15:0a:99:b7:5e:ea:f6:
34:88:ba:55:4e:37:d6:19:d1:27:87:4a:90:dd:a6:fa:2b:f7:
8e:31:de:21:d2:b4:ca:be:3b:a4:81:8a:93:2f:76:65:4c:e4:
19:31:d2:fd:e5:73:fa:2d:d2:f8:1e:d7:98:a7:62:6b:80:03:
7c:a8:2f:4e:06:96:a1:36:89:88:e5:98:9e:77:26:e5:77:68:
41:f0:7e:0f:36:3c:78:b2:c4:1b:4a:8f:0b:17:29:49:7d:c3:
37:bf:b5:f0:62:df:92:b2:9d:ea:d0:4a:87:5e:10:77:77:7e:
e5:ec:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:30 2025 by rpki-client