Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: /a6dBPEg1x/Mx0QEwF0yVmLozh/Wvwt7CGSN91un6Yo=
Subject key identifier: E4:A0:BA:04:EA:B1:13:F4:9F:72:3E:BE:31:EE:95:0E:71:C2:0A:DB
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 0199FC2197FD262BEE284B24E2780E53400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: 036D
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: emMwJ+3qqYXCNE4Di28Yqw47UoSmhU5+WiodD5rik3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:97:fd:26:2b:ee:28:4b:24:e2:78:0e:53:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=e4a0ba04eab113f49f723ebe31ee950e71c20adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:5c:e4:9a:f1:9a:3e:27:8c:b8:92:d5:06:
2c:7a:bc:b3:8b:51:39:6b:0f:be:80:34:a3:69:e3:
67:3c:f7:14:fb:84:23:04:ff:ab:da:a6:23:06:69:
a6:42:a8:12:db:67:c7:ea:4a:41:6f:a7:8b:6a:dd:
66:22:67:45:a6:e9:df:12:ba:1c:e6:81:35:b2:fe:
dd:ea:21:21:e8:f0:6b:0d:ab:a9:e0:fa:f8:f0:d9:
84:cd:cf:60:6d:f6:4e:55:d1:ff:19:ab:1d:ed:b2:
12:33:e3:71:d4:44:11:05:bb:1e:47:f6:62:5f:95:
0e:94:e9:73:44:7b:05:11:df:d7:9a:16:32:25:25:
99:65:6a:cd:ed:28:99:a3:51:ec:01:9e:e7:f0:8d:
3e:7d:d1:02:35:06:ec:c6:5f:c5:5b:9c:21:9e:8c:
3d:47:1a:f9:94:72:c7:a8:a5:50:f0:38:32:ea:08:
2c:73:3c:db:3b:98:ec:61:1f:87:ac:09:6e:ea:22:
05:f4:de:b6:c1:b2:f6:9c:76:0d:34:61:03:e4:92:
9b:44:02:6d:31:cd:db:fd:94:5f:36:76:dd:fe:15:
f6:3a:80:80:f8:15:4f:23:93:0f:3a:6a:ee:2a:ec:
0a:ca:aa:35:90:49:bf:f8:4a:59:05:0b:5b:8d:8e:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:BA:04:EA:B1:13:F4:9F:72:3E:BE:31:EE:95:0E:71:C2:0A:DB
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e5:ae:7b:d5:27:92:a3:ec:34:2a:58:3d:b7:b5:27:47:cb:
a7:de:ef:b3:ef:87:73:06:43:59:13:5f:34:7a:a8:af:61:4c:
47:6b:99:e4:36:5b:1f:5e:d9:4f:f5:ed:f8:58:8b:38:01:98:
68:da:21:b5:5d:c4:10:69:8d:d5:2a:19:8b:5f:84:52:6b:91:
39:11:af:1e:68:d7:b7:cf:4c:b6:fb:c1:50:0f:c8:f8:f1:1a:
51:5c:54:fe:53:bf:da:df:2a:e0:42:5d:0c:a3:a2:36:83:31:
4f:40:2b:d7:a4:e3:f6:96:99:de:3c:58:b1:2a:ca:8b:6e:02:
51:5e:f7:fe:c4:1f:1c:35:30:0f:bc:68:82:b9:4e:65:e8:26:
5a:35:c9:5f:a1:ba:ae:b6:ed:a1:19:1b:9d:8a:de:0d:af:e5:
34:c5:b1:63:7d:c4:4d:cc:c2:f4:4d:2d:97:72:71:d9:08:04:
fc:66:b3:fd:65:47:05:77:97:ed:9d:9f:e0:b2:26:d6:f9:92:
3c:37:06:cf:a5:d1:d4:54:73:d7:0f:43:08:af:ac:d0:00:e7:
f7:42:94:d0:57:bc:e9:b2:ce:b8:5a:2d:f6:90:bd:2e:52:79:
d0:6a:49:c6:53:b5:21:68:3f:11:e1:76:64:5d:e8:60:e4:5e:
f0:c0:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:26 2025 by rpki-client