Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: 8Dkvjb9rEUI2KlDUEwkNtt1IE56DI84yXKWBttfN7FU=
Subject key identifier: 4C:B0:E1:B8:2E:EB:E5:D3:05:39:9F:17:59:0E:84:79:DA:61:E2:03
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019A71B807CE95C7E5228909C3330872D508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: kZRr7yrv6M1v/607uYRw4Z9L2o5W8rKHN0EGQeFAfHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:ce:95:c7:e5:22:89:09:c3:33:08:72:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=4cb0e1b82eebe5d305399f17590e8479da61e203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:1b:44:5d:f8:8e:7c:73:e4:c3:87:6d:06:
67:34:3d:bf:6b:08:bf:3a:f2:d8:19:cd:f8:88:c4:
8a:df:39:aa:cb:0e:e5:ee:c6:53:be:b9:3e:4d:f0:
37:d3:e3:00:bd:57:75:c6:02:92:85:b0:5b:39:69:
5d:fe:cc:bf:77:2b:78:e6:f8:68:c6:eb:63:25:9d:
1f:49:4b:2d:36:80:82:dd:d3:78:3b:c9:c0:8c:d6:
14:ac:96:b2:64:fb:5c:8c:40:6a:61:92:19:2d:16:
21:db:64:e6:3b:09:4c:46:b4:f5:03:9e:18:4b:d3:
35:da:bc:cb:1d:6a:71:b7:e7:e7:ea:cc:33:20:82:
ae:54:23:79:25:0b:b7:53:5f:b1:12:fe:95:6a:bf:
3c:8f:ef:c8:87:43:31:90:16:ee:35:53:c7:fb:bb:
3c:09:32:c7:63:9e:9a:f3:54:70:94:c9:ea:eb:0b:
b2:88:20:c0:7a:4b:44:f4:6d:3b:99:c8:c1:91:64:
34:8a:af:d2:68:a6:3b:b1:bb:d9:8a:88:d3:15:90:
82:24:3d:12:3e:e4:aa:8d:cc:06:bf:6d:77:93:59:
6b:fa:25:7a:f8:bd:ba:fc:c8:a4:d4:1d:de:51:20:
b2:08:06:14:4a:3d:5e:f0:21:63:6e:af:1a:46:2b:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:E1:B8:2E:EB:E5:D3:05:39:9F:17:59:0E:84:79:DA:61:E2:03
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:59:45:0f:42:a8:df:d8:e0:56:15:1b:e4:7b:21:2b:0a:74:
ae:12:ee:c5:8d:c5:35:82:ca:f4:6b:00:2e:79:f0:d6:0e:61:
2b:6a:b5:d1:7a:19:36:b5:2a:ef:89:c2:80:41:00:71:5d:81:
87:e4:11:24:36:3f:31:e5:a9:ef:dd:68:e3:f1:4f:2b:77:5e:
45:1f:ef:f5:fb:11:a1:68:7a:5b:f0:21:1d:4e:26:6c:82:d1:
0e:1f:f7:61:6f:77:33:36:ea:9d:5f:be:96:18:69:1c:29:04:
88:27:8e:80:c5:59:30:1c:88:90:3d:da:0b:4c:51:47:6b:88:
39:38:9d:3e:62:18:04:10:cb:a2:82:35:25:b3:5e:4e:2b:d4:
c2:0e:87:4b:90:5f:3d:2c:08:35:98:b5:7a:ec:76:63:0e:16:
68:0a:28:02:ea:8d:18:37:ef:47:4f:66:3d:7e:d5:d3:88:26:
76:35:55:86:f1:df:85:23:ea:f7:2a:54:2d:30:18:1e:34:2e:
dc:b0:ab:28:0e:3c:b5:24:59:43:c5:18:c7:dc:f8:fe:7c:87:
da:8e:6d:43:c8:02:21:dd:74:3a:2e:32:eb:8e:85:a9:bb:b9:
3d:e7:89:ca:24:32:79:2c:37:e9:10:63:28:ab:f6:dc:1f:2c:
c2:b2:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client