Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier: QTBw7EJy5JgTdB2Pp7luBeVEP3cqGGcEgVEaP55RCjg=
Subject key identifier: B6:1C:E8:7E:BD:50:89:68:92:7D:FE:98:27:DF:5A:D4:FF:36:7A:27
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial: 019A5119A3909C9A0485B252CEE362E61137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: bN7IxolWlRUBMx4Tnoau07u8zIbT6vHMwsTRXra0m+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a3:90:9c:9a:04:85:b2:52:ce:e3:62:e6:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=b61ce87ebd508968927dfe9827df5ad4ff367a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:aa:fc:a8:7d:8c:e3:4d:8d:c0:e8:a0:c9:
ee:d2:5c:40:bc:ee:43:28:84:3d:34:76:8a:3d:1a:
f8:00:fd:65:36:fc:ef:c0:91:a9:67:5f:96:ea:7e:
a0:d7:25:4f:aa:40:0e:e9:24:dc:02:78:a1:e4:d7:
c9:7d:88:ff:ca:b6:09:22:26:b3:e6:9d:07:73:04:
a8:5f:50:ac:29:73:5c:a9:0d:85:1a:60:4b:b2:06:
81:1d:5b:32:9d:f8:29:c1:e6:09:77:a2:19:a4:6b:
bf:d8:d2:01:af:d3:77:89:2f:a8:f7:d5:49:0e:8b:
9e:ae:c4:a1:64:e4:54:e9:c5:54:82:e7:41:9c:6a:
89:05:3d:44:a0:f7:82:44:16:dd:d4:57:59:a5:a0:
47:d2:0e:ed:12:7b:62:c2:fd:48:96:d6:ae:f6:1b:
b6:15:97:4e:d5:d1:be:d8:cf:45:f3:d9:75:05:5a:
4a:b7:ef:58:a9:b9:c1:41:84:1f:94:d3:54:eb:5e:
1e:c0:00:99:c6:7b:ba:41:48:77:b5:64:fc:a4:f9:
ed:97:78:5c:5d:09:a3:cd:18:d0:50:fa:63:1f:e8:
8b:55:ca:85:ab:c2:3d:ef:86:73:d5:d4:33:fa:be:
20:3f:a9:b4:ab:5d:0b:2d:b2:ac:f1:9b:3c:bb:95:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1C:E8:7E:BD:50:89:68:92:7D:FE:98:27:DF:5A:D4:FF:36:7A:27
X509v3 Authority Key Identifier:
keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ed:fd:44:ec:85:8c:ca:da:dc:9c:b5:e1:33:45:fb:d2:0a:
aa:46:d9:33:f7:e4:e7:da:dc:db:c3:3f:bb:c8:74:75:28:d3:
6e:9b:3c:10:64:a9:ad:b2:76:ca:6b:9d:23:bd:f8:48:77:05:
20:31:fa:8a:92:94:92:c1:f3:bd:be:37:df:c9:f1:10:08:c9:
0c:5b:a2:08:99:a8:ef:09:c9:7a:ee:6f:fc:e6:8b:bf:8f:d1:
71:de:e2:64:d3:1c:41:f5:e1:9f:35:cb:45:38:e2:07:67:48:
59:0a:55:99:0b:e0:2e:03:40:0a:3a:0d:f5:01:9f:c9:63:52:
e6:98:9f:9a:f0:4d:d5:af:db:72:d6:b9:96:79:1e:c8:78:5a:
a6:78:b3:af:c5:21:f9:e0:de:35:71:e6:38:36:b3:f8:59:11:
34:04:a1:97:6d:12:cf:e1:a3:3d:7e:d6:9a:70:db:f0:8f:56:
76:27:eb:6d:65:16:ec:aa:01:19:94:18:f7:66:b5:c2:9c:f6:
0d:49:57:e8:13:5c:b0:a4:28:5c:27:03:6b:ab:04:09:a6:a2:
ed:d9:e2:db:a0:30:86:cd:3f:b5:8f:bc:0f:ef:22:3e:72:9c:
54:3d:4d:07:7d:cd:77:d7:c6:8d:80:d5:c4:96:89:e4:ef:8e:
87:c2:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:32 2025 by rpki-client