Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: JcImdOZF9s0ZIrLokAwh3VOCn1BeO9pG/iV7lWNFc0A=
Subject key identifier: 6B:7D:80:C7:1D:D2:22:B1:87:DA:27:C5:42:B8:79:3F:86:1B:CF:8C
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019A722639FE12530EDB7BC899E378D8F206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 11A7
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: ZLuiEoayLj163P168EhnPSaJCzYq80h9jHWqkeqol9c=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:39:fe:12:53:0e:db:7b:c8:99:e3:78:d8:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=6b7d80c71dd222b187da27c542b8793f861bcf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:e7:8c:1f:75:c2:0b:91:91:cd:0f:b8:49:
4a:c4:b9:a8:56:a6:97:62:bb:64:bc:7b:eb:dd:ca:
55:1d:f1:e0:68:23:60:e4:a5:f5:d5:c4:e4:6f:99:
91:cb:37:20:df:db:ad:23:03:de:80:48:92:20:75:
a2:76:61:55:40:84:e0:81:05:ea:df:9c:c2:71:68:
3a:e3:0b:8d:91:08:ac:66:60:2c:21:46:f0:07:d8:
c1:14:39:64:19:54:83:db:6d:72:0e:05:25:b0:b0:
67:5b:91:88:a7:b8:57:ea:90:80:c7:fc:87:7f:41:
1c:2d:75:4a:ee:99:db:5b:2e:08:cb:51:78:be:d0:
93:b5:ae:9f:54:d0:30:84:4c:c5:c3:95:c3:9c:54:
50:1e:cd:cd:5f:dc:94:6c:36:11:e4:98:59:2a:01:
ca:83:e7:42:1b:2d:cf:91:49:67:29:0d:a9:0f:08:
f2:9d:49:27:b5:f3:bf:b8:21:ac:d6:39:e6:91:5e:
d2:c3:dc:95:45:61:8d:53:82:f9:5b:b1:7f:55:97:
4b:03:3b:77:d4:37:3d:48:e9:ce:23:65:63:97:94:
bb:e8:e4:1d:6a:e3:2f:b8:58:96:29:a4:0a:f6:73:
89:a7:99:0d:6e:ff:2b:6b:86:47:8c:6c:96:bd:3f:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:80:C7:1D:D2:22:B1:87:DA:27:C5:42:B8:79:3F:86:1B:CF:8C
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e7:0f:91:35:26:37:d8:ac:05:24:fa:98:4e:29:3e:e2:18:
ab:2b:4c:0b:2e:a4:7e:c4:32:0b:03:c5:b2:5d:c6:a2:9c:9e:
b9:2c:b9:3b:ce:4f:c8:e9:bf:96:b1:fd:b3:d6:39:f2:ee:6c:
2c:1e:4e:94:3f:1f:21:80:80:9b:1d:e7:2a:48:66:a9:82:81:
c3:75:e2:40:c2:5d:5c:aa:a3:31:37:40:64:25:09:b4:44:1f:
50:14:25:e1:0d:41:17:e6:5d:26:e2:bd:33:9d:ed:85:53:1f:
6c:d1:45:6e:10:73:b7:d6:80:69:86:62:2e:86:d3:ac:d5:ea:
45:a5:2b:a6:b9:c8:04:ee:65:54:57:8b:7c:ef:39:d8:62:d0:
d0:f7:2f:a3:93:dc:81:0a:8c:3c:68:8c:a6:14:79:de:8f:09:
0c:1e:3f:ef:b9:6e:eb:99:c0:0b:0a:01:35:a2:06:b3:42:3b:
98:3f:ed:34:f0:53:77:8d:2c:11:5b:e2:7f:b7:32:0d:04:03:
ea:bc:5d:31:ec:23:0d:12:47:63:a7:45:93:bc:d0:e5:a9:8a:
60:a6:80:31:b5:b4:b7:0d:19:97:d9:e6:9d:4a:1e:07:04:71:
ce:dd:be:0d:38:42:f6:7c:7a:5e:be:89:ea:22:39:a9:67:18:
2f:07:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:39 2025 by rpki-client