Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: hcdl+NZ3+pGTZQczZvumAoaWuvMiBCvvX64670A1LQw=
Subject key identifier: 2A:D5:36:8D:88:4B:C9:83:40:4D:5E:4E:7D:B5:A8:84:BF:1B:13:E3
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 0199FCFD415D2C602561305C3C47F0574744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: ml4rG10zhjX5/WGTNTDStvQjV8a5OCD0n8nGwB1oLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:41:5d:2c:60:25:61:30:5c:3c:47:f0:57:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=2ad5368d884bc983404d5e4e7db5a884bf1b13e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:81:43:19:8d:7f:83:58:c3:cb:d4:f2:7f:
b8:44:5d:e1:3c:cf:25:22:d5:2c:f8:8e:5a:ac:9b:
15:d1:e6:ca:d0:0f:c7:7b:8a:c5:b7:b0:2c:32:91:
51:af:14:86:3d:67:4b:42:a1:82:44:bc:19:ea:f0:
99:10:c4:61:6f:e2:5c:bf:17:0d:77:3c:91:1e:b5:
61:9f:ca:95:46:db:2d:a0:52:de:99:79:4b:21:7e:
03:91:99:25:1b:33:17:7f:51:d7:40:27:50:b1:f2:
0f:d1:35:25:81:7c:5d:9e:b8:2c:db:6a:d4:10:fc:
6a:4e:f0:51:20:2f:4e:18:b3:f2:fd:d8:90:a5:df:
22:d3:fe:ec:f8:08:59:5c:d1:9d:c3:3d:ba:62:66:
14:f9:02:39:bf:8f:d6:2f:ed:78:d2:34:59:9b:88:
91:41:25:95:83:c3:d7:15:93:e7:29:83:df:75:91:
8b:f0:a2:e8:cc:1b:e1:a6:5d:e6:47:f5:08:b4:38:
1f:7c:23:e6:65:f5:28:2c:92:a4:93:2c:f8:b3:91:
fc:a4:93:36:14:c3:99:95:24:3c:3c:25:22:31:25:
fa:55:37:a4:b9:83:8e:9b:8f:e3:91:8e:4c:82:58:
9f:88:74:83:78:5a:c4:44:e0:cd:c2:29:12:4f:4d:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:36:8D:88:4B:C9:83:40:4D:5E:4E:7D:B5:A8:84:BF:1B:13:E3
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:93:6e:12:10:75:8e:61:b0:d4:90:6e:79:97:ff:9a:c4:
07:dd:5c:6c:d6:62:23:3e:f2:72:78:19:11:3a:b3:9b:18:26:
c0:05:1b:39:ae:c4:97:0b:02:40:da:c0:8c:f7:da:3a:2c:f7:
8c:63:b5:3d:97:b3:30:9c:bf:39:e9:e5:a4:b7:3a:c5:02:05:
64:87:f4:ab:a6:3a:9d:49:50:7b:c4:0e:77:7a:24:f0:3f:7b:
36:6a:22:ee:62:00:c8:a5:24:a1:0b:b9:c4:76:91:9a:1f:ac:
c4:87:2a:7d:d6:10:77:c3:82:a0:12:de:fc:4d:88:1e:87:f1:
00:20:5d:d9:34:e1:6c:99:e2:98:4f:dc:fe:57:b1:c7:5f:d0:
d4:20:68:96:18:03:62:c4:1d:8d:9d:b0:f6:99:61:f5:67:fa:
a3:25:b1:96:73:8a:d2:38:9b:8e:eb:11:92:81:7f:ae:ce:65:
f8:6c:e6:69:2c:1f:21:5a:29:5b:63:cd:58:bb:d5:cc:cd:af:
0d:53:83:8d:6c:68:98:e2:ba:02:ab:ec:52:ef:cc:e1:32:0a:
20:9e:6b:25:62:71:1b:d5:38:44:7c:9d:bd:89:60:64:92:c1:
d7:09:82:94:ce:c6:82:27:8d:dc:1f:f2:f8:8e:22:f7:81:9d:
b7:61:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:21 2025 by rpki-client