Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: BMGbCtKkzuVGJyertiMtyUM0Y+Usavokn43qt90e6OA=
Subject key identifier: 76:63:FF:97:D1:70:7B:F1:9F:8C:2A:16:56:0A:02:5C:ED:F0:C6:3C
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 0199FC58941A62F64503313145338746FB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 12EF
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: BmBKRRgBIRPmYOlA1FODjdhE6099zWhkcqZFSYUO23c=)
2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:94:1a:62:f6:45:03:31:31:45:33:87:46:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=7663ff97d1707bf19f8c2a16560a025cedf0c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:84:89:79:02:97:38:bb:35:71:e7:83:ac:
11:87:1c:9b:00:9d:e8:da:12:a8:98:dc:82:e1:f3:
de:66:32:61:d7:ed:77:16:b1:f5:ac:7f:eb:77:79:
6f:ed:01:5f:0d:92:ef:54:5f:81:78:1c:55:4d:9f:
85:98:93:e9:bf:73:3f:5a:71:53:ee:ef:aa:d9:6b:
4c:f7:2b:11:ba:d3:e9:b6:0c:40:9f:6d:36:1e:d7:
96:1b:b3:02:d3:66:0f:ba:bb:85:17:7c:d9:e6:80:
64:ce:3a:1b:7b:01:6a:75:1b:16:a7:d6:87:a8:74:
0e:c7:33:11:38:35:fe:57:86:e5:6c:e9:9d:16:d1:
e5:04:97:52:67:61:0c:29:6a:0c:a7:41:d7:c3:43:
ed:06:14:51:5d:52:ad:e8:f2:ce:5e:74:e3:c9:1f:
97:59:21:35:0c:24:cb:6d:ec:95:11:be:9e:b2:c2:
af:96:35:59:ca:f9:9e:e4:60:03:0e:c9:c0:0a:02:
2d:b4:14:e9:8b:06:47:f8:2a:38:40:c3:6d:f0:95:
ec:7f:11:ab:8c:b7:b2:81:77:e4:b0:7f:89:ab:89:
05:f0:41:6b:14:05:4a:0e:ba:60:3c:09:53:e9:0b:
f5:eb:5f:82:99:8a:cc:2b:db:75:59:ed:49:20:e7:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:FF:97:D1:70:7B:F1:9F:8C:2A:16:56:0A:02:5C:ED:F0:C6:3C
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:67:ba:aa:d7:07:4b:83:4b:85:cf:a4:ee:f5:61:83:e7:fa:
14:45:80:72:ef:59:1d:80:ab:1f:49:1c:c0:03:f2:24:eb:63:
ec:b4:9a:10:e5:46:65:e3:30:2d:a4:6f:2f:e0:6b:22:e9:c6:
21:58:ca:e5:e2:b6:a4:30:64:c2:d7:ad:9f:de:13:d9:c8:8d:
10:98:63:d9:36:20:44:3a:6a:cb:80:cf:5b:97:cf:0d:62:5a:
d6:a6:15:53:bf:63:ae:be:7d:7b:4e:06:8a:f8:8c:bd:20:01:
89:51:cc:7b:c0:cc:32:44:cb:4b:c0:1f:20:86:ae:6d:08:35:
72:2a:5c:a8:21:df:3e:f6:2f:24:4e:aa:4c:d6:e7:3b:78:90:
ab:b0:d8:af:fe:00:fd:52:00:24:f0:aa:cd:ad:85:12:22:08:
d6:18:11:5e:10:2b:f2:69:d6:01:bc:7b:40:fa:44:a0:37:d7:
3d:46:94:24:27:bd:14:3d:38:93:c4:fd:0a:ba:71:e0:07:a2:
88:fe:78:b8:c4:86:23:85:b4:3f:c6:ba:b8:8d:97:96:99:e7:
12:b5:5a:0d:30:22:0b:c8:00:db:f0:10:ed:82:c8:bf:15:e8:
68:63:15:78:b2:38:c2:cc:b2:29:1e:3f:08:98:b7:5e:c2:35:
e2:94:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:46 2025 by rpki-client