Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: 3fmBRU6vH/Xi1dOnXXvUJAhDEjYOY9fkk9pvvlx2bXg=
Subject key identifier: 23:42:07:7E:49:F7:2D:C4:41:5B:C1:3B:24:0A:9C:0B:16:D5:C5:39
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0199FD3423DC628B45E195356779589E6902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 065A
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: tGKhrfcMcDQTzsF3kdwD/Tpbi4zt52YHY1XqdeDiw90=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:23:dc:62:8b:45:e1:95:35:67:79:58:9e:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=2342077e49f72dc4415bc13b240a9c0b16d5c539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:db:cd:87:f6:03:54:a2:8d:6d:54:4e:bc:
8b:f7:96:56:6c:dc:71:89:c2:a7:5c:25:78:31:76:
9a:96:ac:85:65:32:80:0a:35:8c:7a:57:60:7e:4c:
74:d7:c1:44:5d:0e:f7:84:db:82:55:63:c7:3b:e9:
40:81:dd:bf:96:38:f2:f5:ec:16:cf:d1:9a:5b:e2:
0e:c7:ab:ad:f0:8d:a0:d1:9d:1f:7a:2c:ea:18:be:
c4:89:fe:82:94:18:f0:a1:8f:cd:dc:46:a2:81:db:
c9:47:83:b3:11:fb:45:cb:b4:b3:fa:1b:52:a6:2a:
6c:9b:fa:08:b5:e9:20:f4:2b:33:4c:a5:77:7b:80:
60:30:ff:c3:c9:e6:90:45:a6:88:f6:36:21:37:12:
7b:3e:ba:f0:58:68:a8:ef:02:38:4e:f7:c0:9e:b9:
16:36:0e:82:36:79:92:81:42:50:f3:a1:fa:96:5b:
63:70:20:b5:65:41:a5:d2:ff:ee:0f:fa:4e:63:e3:
20:4c:29:3b:b6:61:68:91:ee:5f:ab:62:bd:ca:39:
e7:b1:df:f3:34:dd:b4:01:03:c4:fc:22:5d:16:1a:
93:ea:fd:54:b0:f5:d1:12:d7:0f:9e:64:10:3f:69:
97:6e:3c:e4:e2:8f:4b:fa:50:a8:37:b5:6b:80:80:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:07:7E:49:F7:2D:C4:41:5B:C1:3B:24:0A:9C:0B:16:D5:C5:39
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7c:46:4b:e8:88:7b:94:c8:a3:30:40:4c:28:75:9d:17:e2:
52:92:ce:5e:bc:e5:a2:48:80:44:d9:b3:2a:1b:1d:fa:a6:03:
87:49:68:1c:9d:d8:8e:3e:2c:ee:c1:63:87:52:7c:7a:f2:c0:
74:cb:3d:5a:1d:27:4d:1b:03:aa:d5:6b:36:13:74:77:d8:01:
95:3d:a8:ea:ed:27:ac:61:7e:09:0d:76:ba:38:ed:f4:72:57:
54:e4:45:45:38:77:89:95:23:1a:e8:ca:64:58:85:17:80:4f:
9c:0d:71:35:4e:5b:c0:65:eb:79:e2:01:e0:3b:bb:60:66:9a:
1b:34:b3:f7:27:6a:fb:16:09:76:7f:d3:23:cf:7b:86:00:40:
df:87:80:5f:5f:6a:c5:e5:27:b6:7b:e4:af:68:3f:6e:17:31:
4f:d1:a7:e6:11:74:af:91:64:c1:c2:d3:79:66:49:36:5c:79:
38:59:65:64:4b:52:34:e2:9d:a4:79:29:5a:97:38:33:5c:eb:
38:ec:9f:47:7f:8b:a0:1d:0c:d1:b4:df:f2:cb:9c:34:74:6f:
c6:89:52:15:e1:5c:37:30:28:2c:55:aa:74:3f:91:e2:6b:1b:
f7:3c:6d:10:7a:2b:df:7f:2e:37:05:7c:cf:73:1c:49:d5:59:
7f:a4:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:53 2025 by rpki-client