Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: 4KvrdPVWVGONleAq4pq5rNZp/LF2Lnp7YnLJg4pf6PI=
Subject key identifier: 4D:4E:5B:46:65:50:9C:1F:6B:4B:D8:31:DD:1A:38:5B:2F:A7:D0:4C
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019A7149B29ECF8620D90077088D67C03923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: +x9KR9qEHCRflZ3+3h/bfYtOYIedlGCQjUzVB+qzSJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b2:9e:cf:86:20:d9:00:77:08:8d:67:c0:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=4d4e5b4665509c1f6b4bd831dd1a385b2fa7d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:b7:63:a2:19:65:23:e8:34:12:3c:73:c2:
77:8d:f0:56:8a:c2:90:c5:1a:22:e3:20:f9:81:b4:
c8:3b:6d:7b:7e:35:fe:17:51:91:14:d1:25:c4:e4:
c9:bc:53:20:24:50:1f:7f:d7:d6:88:ae:1c:d5:46:
cf:c3:ae:3e:17:11:47:e3:84:b8:b1:46:59:0d:dc:
7c:04:57:b4:84:5f:b9:b5:cc:da:7d:fb:0f:62:77:
79:7f:7a:f8:f5:74:dd:c9:eb:a1:d7:31:51:bd:de:
a4:b9:ad:3e:da:b5:e4:60:a0:cb:a5:74:18:aa:86:
9f:f7:54:42:61:71:06:70:9b:25:a7:74:40:dd:08:
da:7d:13:ca:51:02:7b:4f:f5:3f:88:66:72:1b:e9:
0c:cf:bd:49:c3:c3:81:8e:9e:2f:36:16:a3:49:10:
4c:2b:5a:48:1f:b6:6d:68:eb:1f:ed:f2:1a:3c:c9:
fd:77:e4:92:fc:3a:e9:a2:c3:01:15:68:f9:65:6a:
6b:4f:ac:0f:86:81:ec:f4:b5:a6:88:e3:7e:56:60:
b9:f3:f3:7c:33:3c:6f:27:13:ba:7a:34:36:88:7f:
eb:dc:ab:04:77:83:e7:3a:8e:cb:d2:ed:a5:be:f9:
21:45:df:fa:96:e5:25:7f:5c:90:a0:4c:3a:8c:04:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:5B:46:65:50:9C:1F:6B:4B:D8:31:DD:1A:38:5B:2F:A7:D0:4C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:4d:b7:40:96:a5:ad:cb:23:77:bf:ed:2c:be:74:40:62:
03:b9:af:7e:77:83:58:7e:02:9b:f9:72:a8:82:b7:19:8a:43:
42:45:07:f9:d0:87:4d:57:03:f0:d7:08:8d:f5:67:57:00:78:
eb:0a:ab:2a:83:e9:5b:7a:7c:d7:ed:f1:11:8d:e0:5b:05:49:
99:09:b1:51:27:1d:85:e7:5b:4b:c0:53:7a:e6:73:6e:d8:4f:
51:97:26:da:66:6a:b5:ff:42:15:da:91:5f:e3:e1:e6:15:fb:
1f:58:43:90:7f:37:83:44:88:0f:6e:b1:c3:04:17:d6:fe:25:
68:f7:5a:12:07:3f:f2:2a:fd:3e:05:20:14:3a:18:76:ad:88:
7a:9a:a2:b6:7d:39:34:05:0f:51:70:6a:1b:aa:b4:bd:ce:56:
25:f6:81:26:3f:3f:0f:74:21:d3:e5:93:db:22:49:dd:31:7d:
8e:f4:7d:81:26:49:51:f7:b0:7d:b5:3f:a6:da:4a:96:ae:ab:
e0:ea:64:7b:01:0d:e7:a1:92:71:7d:46:b6:fd:4a:92:b8:2e:
bb:7a:35:00:a6:ff:29:cc:d9:f5:5e:b3:5a:82:c6:c7:f9:7a:
2f:f1:d7:ce:90:12:bf:78:75:b2:56:97:0e:b8:12:75:d2:c3:
7c:8b:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:12 2025 by rpki-client