Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: SvZh066wsaQ3zYoJyyDtrwmTd+E9CLNmt8YyOMJxCsY=
Subject key identifier: A4:12:FD:E1:18:52:E8:A9:66:E1:C8:CB:AB:B6:17:5B:8C:D8:50:B6
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019A53E3E08BA03925612F8FCB1C70FCF40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0736
Signing time: Wed 05 Nov 2025 12:00:34 +0000
Manifest this update: Wed 05 Nov 2025 12:00:34 +0000
Manifest next update: Thu 06 Nov 2025 12:00:34 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: 0mIeDGOgUpGo02cCQ8NTTU8GujRQh4ocH7ivcVRNaAI=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e0:8b:a0:39:25:61:2f:8f:cb:1c:70:fc:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Nov 5 12:00:34 2025 GMT
Not After : Nov 6 12:00:34 2025 GMT
Subject: CN=a412fde11852e8a966e1c8cbabb6175b8cd850b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:12:62:a2:31:69:d1:0d:3e:bc:7d:2d:65:
cd:b9:36:ae:4b:6e:0b:09:ec:4e:e1:ea:03:2b:58:
95:a7:77:91:b0:e0:1b:c8:68:4c:c6:ab:42:a8:e9:
c7:e7:7a:bc:c9:64:6e:ff:f9:bc:08:b0:15:81:5e:
8f:c7:dc:27:d4:95:84:ab:a5:2b:5f:8a:93:e5:3e:
d2:6a:bf:61:bf:b7:6a:4d:59:84:29:15:42:f7:a1:
30:0c:40:e7:b9:ac:77:58:10:6b:32:57:9c:f1:af:
0d:95:1a:ba:c2:da:6a:90:d5:24:bb:f0:61:d2:77:
87:9d:63:4f:90:c0:fa:be:2e:0a:13:64:bd:09:8d:
97:94:16:73:a1:b5:58:9f:34:a3:44:a6:95:9d:66:
03:7a:4d:f6:cd:bb:59:37:a8:a0:b0:3e:89:83:cf:
bc:7c:0d:ed:b3:54:1a:01:5d:5e:4e:4c:38:77:40:
52:86:94:41:f0:fb:8f:8c:a7:20:3b:5a:f6:e7:e0:
58:66:dc:6d:ca:b3:28:a8:4d:4b:48:77:78:bb:c0:
f2:61:d9:c1:21:56:30:fc:60:70:4f:e8:e2:55:69:
74:15:80:b0:f2:a8:f4:e0:97:f6:5a:9a:7c:37:7f:
a6:88:10:9e:6b:73:21:60:52:10:ff:2a:5e:1c:7d:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:FD:E1:18:52:E8:A9:66:E1:C8:CB:AB:B6:17:5B:8C:D8:50:B6
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:53:2e:12:bc:52:1e:46:45:10:11:45:c1:b0:1a:ff:21:21:
69:16:e3:0a:3b:6e:a1:c1:09:42:88:de:cb:db:68:90:52:a7:
63:4c:53:c0:d4:89:aa:c7:32:dd:5f:c0:bc:1f:99:35:30:04:
e2:f2:50:40:53:e1:11:7a:8d:63:5f:14:45:42:23:42:10:ea:
2c:f2:b6:8b:a7:43:c4:a6:f4:3c:9e:f7:42:d2:d3:69:a0:fc:
42:27:fe:21:03:24:9e:fa:3e:db:49:e9:82:5b:4e:5b:7c:27:
b1:e3:62:73:71:ee:85:72:8b:ba:ae:1e:a3:11:e2:47:db:0b:
26:ae:d9:d5:2c:ca:fe:6c:a7:f7:a3:9e:62:43:35:95:e9:48:
a6:3f:1d:a3:06:f9:37:97:d8:67:1d:ad:29:9d:f9:ae:78:04:
25:51:3f:94:22:88:f8:af:df:f8:cb:f9:04:23:d8:96:a4:f4:
91:f9:f0:da:80:8e:ef:2b:29:f5:47:f0:96:8c:d7:a1:72:87:
24:10:79:e2:0b:3e:55:9d:10:15:30:1e:2a:67:10:a6:f2:2e:
7a:a9:5a:dd:87:69:e4:b5:a5:06:e6:fb:de:47:60:27:70:17:
0c:72:b3:94:48:d5:6b:88:48:6e:14:23:57:a2:dd:73:84:89:
98:14:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:18 2025 by rpki-client