Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: RvNw96w/6kPrimWvq5TWaPYoIzfSJ8IDEg2fwWUtOV4=
Subject key identifier: 68:4F:20:89:05:10:84:50:00:BF:65:87:2E:D9:5F:B3:27:E1:D8:0F
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 019A4DE1963F25D3943DE17764C0704E99DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 064A
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: YAnVwFY6AP7hD44YDg6L6tCFI4VgfYq3rHAw+J3wFM4=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:96:3f:25:d3:94:3d:e1:77:64:c0:70:4e:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=684f20890510845000bf65872ed95fb327e1d80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:c9:af:15:d5:37:69:5a:f7:cf:b8:c7:f8:
a8:e2:89:b8:12:b6:ae:30:88:22:fb:05:c0:7b:b2:
b5:93:dd:0b:c1:ca:56:64:30:be:0d:b5:db:fc:d8:
32:b0:68:b4:dd:89:92:38:2e:bf:2e:c5:d6:b0:1a:
ef:b3:2b:c4:80:df:af:53:b6:4c:ab:1b:ec:de:07:
fe:0f:72:a9:1e:14:2b:75:49:bd:5b:46:e1:93:3f:
08:39:67:34:64:0c:3b:f7:38:a6:ff:d0:94:3d:9f:
6b:99:e8:79:66:08:50:2b:c7:9f:5e:ac:85:61:18:
a1:90:04:49:f5:ef:e7:18:7c:7b:fc:31:34:3e:b8:
e6:04:08:2b:40:16:4d:b8:47:e5:a3:54:ab:f0:a1:
04:34:2d:50:ea:a2:6b:47:34:5a:5b:e1:6d:64:53:
28:38:e5:f7:cf:5e:49:80:91:6c:48:e2:f6:df:0c:
a6:dc:37:db:5e:5c:5f:cb:aa:93:97:d0:4a:3e:bb:
34:ee:1b:12:9c:fc:90:bf:17:b0:e0:34:95:38:20:
1e:36:0b:f2:43:57:a3:82:ad:e0:e6:22:05:0a:29:
2d:8c:2d:eb:be:65:67:17:2a:de:d0:68:35:96:dd:
f9:d2:70:08:e9:d0:14:99:68:ad:8a:5f:1d:3b:8c:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4F:20:89:05:10:84:50:00:BF:65:87:2E:D9:5F:B3:27:E1:D8:0F
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:27:02:4a:f4:2c:d6:09:3d:5a:ed:50:33:89:57:cb:09:a5:
dd:3a:67:3c:1d:55:b8:1d:59:aa:49:0e:3c:fe:66:71:01:ea:
49:ee:a4:44:59:30:38:6c:8d:d1:24:2e:2d:4a:dd:97:10:4a:
ba:11:41:47:fc:12:6a:5f:6d:97:2c:fc:ec:7a:5a:83:9e:8e:
c7:eb:e0:fc:24:c9:c1:33:ca:3b:8c:59:cf:35:5c:15:a0:26:
62:ac:b4:7e:32:9d:30:31:af:37:19:ee:d0:de:9c:35:d3:6c:
a4:cd:cc:51:f8:60:f4:25:44:25:1a:a2:2f:f9:4f:b8:9b:82:
e6:f6:09:2a:9f:e5:22:a1:50:4a:57:30:eb:e3:34:56:fe:0d:
db:b6:2c:53:0f:21:b7:9f:2a:05:fe:30:f9:b3:16:91:62:2c:
27:40:46:01:a5:48:58:73:70:fe:1a:d6:07:ab:8f:65:21:20:
8f:8b:6d:8b:25:68:f5:29:59:a1:39:5b:22:86:f5:60:0c:93:
a9:59:a1:0d:e2:95:55:ef:90:94:af:ef:d7:f5:0e:e1:60:b6:
5c:84:4e:3e:31:0a:e5:4d:71:36:03:69:ce:9b:70:9e:9c:50:
ca:16:ac:4d:61:9f:16:0a:77:52:b1:45:a1:e6:7a:6c:2f:a1:
20:35:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:42 2025 by rpki-client