Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: EN75XAokUciXVDDTiLGOsEwR/UDAovgNmgN314EGxik=
Subject key identifier: 8E:8D:4C:1B:3F:72:98:27:12:B4:68:16:D0:3F:8B:A1:80:FA:CD:73
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 0199FFC8D4BC60AA5AF7AF9527698EC0B856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 04:02:55 +0000
Manifest this update: Mon 20 Oct 2025 04:02:55 +0000
Manifest next update: Tue 21 Oct 2025 04:02:55 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: 8e3nzb33R1lW4546G33p3NbB7pXIikSAsfJ23TT96GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d4:bc:60:aa:5a:f7:af:95:27:69:8e:c0:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Oct 20 04:02:55 2025 GMT
Not After : Oct 21 04:02:55 2025 GMT
Subject: CN=8e8d4c1b3f72982712b46816d03f8ba180facd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:99:6f:4f:51:3d:3e:a3:a7:82:f4:03:b5:
f1:3a:56:81:96:a4:63:71:ab:9e:f9:58:4f:09:b4:
ca:04:c6:e7:a1:5e:d6:b8:da:81:83:f8:ce:66:00:
fb:fb:ef:23:c0:46:db:16:42:1f:ac:8a:66:09:93:
9c:f3:d0:7f:75:9f:60:3e:e4:d9:0e:97:e1:86:47:
e4:cb:d3:5b:49:23:7d:0b:da:c3:0e:d7:b5:d2:fb:
8c:c0:5e:30:19:87:36:c7:67:b0:2f:e9:4a:5c:75:
44:7f:c2:e0:77:55:68:67:33:1f:c8:ff:66:2b:02:
a1:d9:d5:38:5c:75:d8:79:0b:3a:14:c4:e9:7f:87:
52:59:80:c1:f9:4e:a4:84:8f:07:ad:e4:0f:df:0c:
08:64:02:75:da:96:a5:81:2a:5e:45:cf:21:36:8d:
41:ed:68:6f:d8:2e:77:b0:15:f8:3b:3f:29:ae:33:
44:15:52:2a:19:33:fe:dc:3f:38:94:da:0d:90:85:
44:1c:52:15:29:e5:8b:ef:8b:3d:3d:bf:d5:58:58:
05:b4:7f:8b:93:4d:88:7b:68:7f:cd:74:9f:e6:ed:
24:99:8c:6e:99:c6:34:af:14:f5:e9:37:23:40:cd:
00:5a:f6:46:6f:fe:34:5b:ff:30:d2:19:9b:2f:0a:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:4C:1B:3F:72:98:27:12:B4:68:16:D0:3F:8B:A1:80:FA:CD:73
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:e2:9f:55:95:c0:33:73:95:38:91:67:42:66:0b:be:da:
17:01:6d:86:6c:b4:d0:46:6a:ee:24:3e:6a:e1:6b:9f:e0:57:
38:14:1b:12:37:91:93:95:98:05:12:4d:ad:96:6d:78:10:8c:
c0:bc:e2:4d:75:db:62:e2:01:02:ac:58:62:1a:4a:ad:58:e4:
fe:72:93:f3:a2:f9:68:56:9a:1c:12:9b:46:f8:15:24:80:52:
6d:e9:7b:4e:60:5e:36:47:ac:44:72:95:e2:ec:f0:bd:25:ea:
11:f8:a9:ea:0b:c5:8e:61:59:b5:5e:8e:a1:87:b9:ea:10:60:
19:04:15:fd:b8:46:4a:af:4e:ef:e7:e3:34:4b:b7:d4:37:9a:
b0:12:6b:23:6c:ba:72:54:76:79:89:5e:ee:74:c9:a4:98:06:
62:4b:3d:a0:8f:f6:47:5b:e4:4c:2f:a5:fc:3c:c1:c7:01:5c:
fb:eb:34:9f:21:d2:c1:e7:dd:ba:03:ac:3a:89:d6:34:07:0e:
96:ef:0e:aa:c2:e5:d5:d2:f8:77:3b:1a:29:66:a3:ef:6d:3c:
0f:7d:81:62:59:a4:97:81:81:23:dc:93:7c:d2:d6:2b:11:f0:
a1:6c:14:26:94:80:dd:61:50:53:82:b8:10:8f:cb:2e:68:aa:
99:a1:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:10 2025 by rpki-client