Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: PPYFGrJ/0xjEi8/A+e7hak7wp6CSoPt+yaQYinWzqAY=
Subject key identifier: 2A:DF:64:BD:0A:F0:82:70:74:CB:5C:76:32:83:46:21:C2:F2:4B:E6
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019A00DA3706517FC4B2AACC232A0E399A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: NJB65e3SntWv5beY5v+ZN3JaU7aPiHln8XW3G/pPmIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:37:06:51:7f:c4:b2:aa:cc:23:2a:0e:39:9a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=2adf64bd0af0827074cb5c7632834621c2f24be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:da:bc:cf:ef:3f:a7:0b:f2:a0:b3:0f:39:
b2:01:0a:38:8f:51:f7:a5:7e:20:1b:47:16:f1:95:
e2:41:9f:3b:6d:bc:90:bf:30:cb:44:67:4e:57:ba:
66:9d:33:33:92:49:b5:05:57:f2:d6:13:70:55:72:
cd:64:b2:bc:c3:f6:9a:f1:24:fc:33:bc:df:76:f7:
1a:fc:82:97:4a:b9:58:9f:31:06:4c:1f:5f:3f:f6:
d9:02:2f:ea:2f:1f:8e:7e:e5:28:ae:b0:67:fb:5c:
f3:e7:98:d0:a9:08:54:9f:00:47:50:32:1e:44:f4:
ee:ff:d3:46:00:f5:c9:e2:37:c7:37:00:15:a8:7f:
e8:69:13:82:da:1f:dd:3c:e9:a9:15:49:42:01:7b:
4e:40:64:e5:93:cf:12:b5:b1:8b:94:99:68:96:55:
e2:89:63:df:ad:9f:c1:c1:4a:5d:a8:9a:d7:14:b6:
43:c5:a8:dc:e3:63:e4:84:b8:3b:f0:7f:e5:97:e6:
05:9d:b0:60:0b:52:d8:63:04:68:60:5b:26:8e:9f:
7a:72:87:89:41:1a:94:f1:2c:a1:ac:81:f7:0b:3c:
74:27:38:ec:d8:02:ae:21:85:31:92:4f:41:38:3c:
83:be:80:94:cd:0a:d6:26:8d:3b:d2:b6:60:ec:a9:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:64:BD:0A:F0:82:70:74:CB:5C:76:32:83:46:21:C2:F2:4B:E6
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:48:c4:97:ed:64:68:15:e9:65:84:58:4e:17:99:18:b2:
90:32:f5:0c:a6:14:99:b4:e8:4a:bd:51:23:3e:1a:a2:63:35:
b9:9a:55:be:c5:b9:79:6f:d9:bf:ab:0e:50:55:0e:22:9f:ae:
b7:9f:ae:cc:29:4f:bc:dd:25:a3:ac:dc:99:50:50:7a:11:d1:
ea:06:89:6e:4a:ff:5c:6b:6e:e1:05:d6:6a:28:19:69:45:de:
db:63:38:fe:33:41:51:63:a2:7d:0b:35:6e:cf:97:9f:1d:27:
36:64:62:53:58:19:63:35:ef:3f:e8:1b:ca:85:b8:7b:8f:81:
d3:b2:78:be:18:c8:d0:9e:9b:a3:0b:9c:68:9f:55:51:d2:0d:
4b:96:31:e5:fa:da:20:47:4d:e8:b8:02:f7:4b:c6:a3:02:71:
fa:b8:9c:f5:93:36:81:85:05:dc:81:4f:4e:19:63:57:9c:42:
18:56:27:76:ae:38:08:6a:1f:e8:58:f7:4c:75:be:ec:f3:44:
8a:58:58:a6:d1:2a:6e:9a:9b:20:12:f1:d3:49:b6:25:0b:40:
9e:0e:2e:03:76:36:e2:cc:c9:84:91:e9:ab:37:91:ef:95:e4:
43:20:26:52:63:1a:b0:30:9f:de:f9:3e:3d:79:d5:3a:46:48:
b4:a9:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:58 2025 by rpki-client