Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: UQJUPnnlnTxVITeYa6atrro5jh7cufXIo0lpHEPAS0E=
Subject key identifier: C8:B7:8D:34:43:3F:2D:F0:00:4B:1C:9F:5F:68:CB:C1:75:0D:1B:97
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019A5119E27BA38A88A70FC3FB46A098BC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:42 +0000
Manifest this update: Tue 04 Nov 2025 23:00:42 +0000
Manifest next update: Wed 05 Nov 2025 23:00:42 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: VfbHY1/V1P5irGlG2yCMEauEYPNQ+KFxefCUCEzV+rA=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e2:7b:a3:8a:88:a7:0f:c3:fb:46:a0:98:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Nov 4 23:00:42 2025 GMT
Not After : Nov 5 23:00:42 2025 GMT
Subject: CN=c8b78d34433f2df0004b1c9f5f68cbc1750d1b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:c8:bc:b2:28:96:2b:ea:cf:5c:70:6b:08:
9f:4e:61:ea:1d:9d:78:bb:17:cd:86:cf:64:1e:96:
8b:8d:7a:6f:a9:bb:de:25:6e:e6:80:d9:14:71:f2:
ad:13:df:03:df:14:99:7c:e3:f3:f1:37:fa:57:4c:
5c:b3:e4:cb:c3:8d:e6:12:95:e5:a6:3d:28:c4:fc:
d4:bc:31:bc:48:29:25:49:24:2c:c2:76:47:c5:35:
3b:42:d1:8d:5e:bc:3a:43:6f:27:e7:2e:4c:ce:f1:
3d:16:08:c3:25:d6:fc:a7:09:2a:e7:52:bc:24:44:
6f:b7:85:21:6b:b4:08:e3:1e:bd:be:21:d6:5e:93:
22:22:50:0c:38:01:fa:35:c4:f0:73:ff:8a:90:8d:
67:6d:63:ff:56:f6:c4:23:29:80:38:00:52:43:6c:
d4:33:45:1d:89:1f:6f:10:ba:ef:4e:62:49:f6:8c:
57:79:ef:39:c2:9a:ad:0c:1e:21:57:6e:c3:b3:23:
7e:57:8f:cf:c8:7e:c4:61:e7:9a:40:97:4a:e2:17:
ac:48:70:60:59:b2:45:a8:69:53:a2:a0:37:60:da:
c6:d8:86:44:9c:8c:12:7f:db:1f:5b:a4:9e:f7:78:
4b:f7:9b:6e:35:7c:0b:90:ff:8f:0d:56:e5:71:5b:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:8D:34:43:3F:2D:F0:00:4B:1C:9F:5F:68:CB:C1:75:0D:1B:97
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:80:4a:6c:b6:44:e5:63:aa:16:b0:d2:6c:24:a3:7a:56:55:
21:0c:39:6f:1d:f3:c6:fd:ec:41:68:74:6c:d8:b2:ee:d7:8c:
b3:33:dc:d0:b6:eb:4d:88:45:ef:51:54:de:1c:b9:c1:bf:6e:
43:60:e5:0b:13:ce:b3:32:bf:a5:25:fd:3e:45:48:18:50:69:
e5:27:45:89:4f:89:1d:d6:3e:fe:6c:a5:7a:36:ba:d2:45:fb:
b5:8d:5d:8b:28:12:12:6f:d2:de:7d:d4:92:30:70:ac:c9:89:
ed:c5:8e:37:75:cd:6f:aa:7e:4c:a0:b7:db:8d:ef:e8:c0:84:
d6:21:68:dc:91:20:67:42:3d:e0:7b:03:4d:06:cf:a9:8b:3d:
ca:29:88:99:f8:79:e2:7e:b4:5f:be:c2:09:f1:17:42:54:be:
24:0a:bc:27:24:2e:b0:bc:72:4c:a7:fb:91:ee:88:89:ef:5c:
61:71:80:fb:0f:00:33:0f:58:b2:06:02:7e:15:86:e9:c2:e5:
ac:47:68:6b:73:32:82:55:ef:0e:f8:2b:c5:7d:a4:5d:37:05:
ec:cd:c3:af:8a:9d:9d:d1:c1:b3:52:9b:4e:e0:90:1b:e5:dd:
9f:ae:25:c5:aa:58:f8:21:45:f5:9d:b3:99:9b:46:f7:89:d3:
e2:06:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:30 2025 by rpki-client