Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: 16ks0Cs260smCA4AcdsF/jnn325m1Vf2kN2gKiVF03c=
Subject key identifier: 89:FB:11:A9:63:43:6A:B0:E2:C0:90:6D:2E:64:25:47:EF:B3:94:4F
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 0199FD6B36C7DA69AED25A91F2374CF66A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 068E
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: zcKQoHiKcpO0p4aUxu0UU8zDmQpP2fyEqxhmzDa4vao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:36:c7:da:69:ae:d2:5a:91:f2:37:4c:f6:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=89fb11a963436ab0e2c0906d2e642547efb3944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:58:34:3a:11:aa:e8:0a:1e:df:77:b4:55:
c2:f6:c3:93:d0:c1:c6:b5:53:f4:f5:6c:6f:97:a1:
f7:36:fd:25:56:7b:f3:39:ec:53:b1:97:18:b3:e6:
b4:49:e3:b6:98:f9:90:aa:73:6b:e7:b9:8b:83:f8:
d4:ee:af:44:3a:33:a4:5e:1e:5a:65:e0:29:31:67:
19:1d:22:8b:7e:52:00:15:82:a2:4c:a8:f7:0c:b6:
52:fb:81:e4:97:8c:f7:af:e7:99:85:c2:7b:a5:5d:
ea:55:ba:23:f7:28:ab:32:30:5b:b4:f1:e9:be:68:
db:f3:5f:7d:34:2c:2b:8e:95:bd:dd:7f:f2:75:55:
2a:81:10:59:fc:26:75:a0:48:c4:89:d2:ea:97:7d:
a8:55:c6:d6:ce:37:a8:74:a9:6f:47:cf:44:b6:ea:
56:b7:5b:6f:60:d2:bf:f9:41:1b:31:71:fa:0c:18:
cf:c5:8f:f0:8f:41:c5:8e:cb:eb:42:e2:39:69:e1:
38:9a:4b:01:d3:d0:5a:ee:26:d7:bf:53:00:8a:93:
68:5a:db:bf:66:e3:43:0c:2d:cd:2e:35:68:f1:8b:
32:e0:e4:c2:1e:80:25:4f:76:d8:b0:3c:c2:bd:4e:
84:2e:71:0d:8f:0a:8c:62:05:a2:d6:65:a6:bf:d2:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:11:A9:63:43:6A:B0:E2:C0:90:6D:2E:64:25:47:EF:B3:94:4F
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:25:fb:39:af:3b:13:7b:9d:4f:a3:ec:fb:46:79:28:23:c1:
9c:58:a4:10:35:a5:51:a3:1a:bf:84:3a:89:24:fc:1a:c3:38:
82:5d:d6:ff:73:75:8c:3c:c5:d7:aa:f1:1a:16:d3:83:c9:cb:
f1:09:ab:64:68:54:d0:ff:19:64:9b:a6:e8:b7:67:57:65:f3:
56:6e:bd:f2:50:21:da:ad:b6:df:54:48:76:9d:7c:36:41:87:
75:2b:58:de:a7:47:72:79:ac:cf:0b:5e:22:ba:88:78:48:2e:
92:22:c3:15:45:bc:02:f4:eb:68:57:89:bc:4d:87:c3:6f:52:
66:b1:ae:dd:90:bd:f1:78:f9:30:67:a9:26:38:12:c4:2a:39:
61:b2:98:68:6c:f0:70:dc:79:23:4a:da:0c:e2:92:f7:06:4e:
d1:50:da:e4:d2:fa:71:8b:1e:9b:fb:46:84:de:b6:11:78:05:
63:ca:5d:2b:5f:75:f8:0c:60:16:60:30:a6:7a:57:7b:81:38:
35:91:d1:94:30:03:98:a4:81:6c:48:be:27:3b:56:cc:13:48:
9e:d4:c1:d4:3e:11:0d:20:e0:15:b0:0c:a4:81:50:0b:ba:c8:
c4:49:9d:74:e6:3e:3d:eb:aa:80:1f:86:30:ec:c7:f5:a6:0a:
d8:03:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:14 2025 by rpki-client