Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: boINq6xHhb8neJNhGTs6ePtyLm3GDo9YEYDdh6Bz2nE=
Subject key identifier: 00:09:DA:E4:DB:38:2D:81:36:63:0B:CC:DB:5F:B9:30:00:AD:8F:62
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 019A71B920D1038FDE77C812A2FCEA06E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0E8C
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: CbFDyfF+Jje4NupvWY4i6HdiUVCjm+GvGtBtqH/tyDs=)
2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:20:d1:03:8f:de:77:c8:12:a2:fc:ea:06:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=0009dae4db382d8136630bccdb5fb93000ad8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:a0:cc:0e:2a:06:22:a9:15:33:94:57:55:
9c:aa:b8:60:c8:0b:92:b9:47:82:bb:13:db:53:39:
09:92:20:aa:ed:99:b5:15:64:22:04:72:c8:68:06:
92:80:3f:9d:99:4a:8e:a2:86:15:e3:96:30:f5:b5:
c2:24:c8:3a:a3:20:aa:7f:3a:70:8a:4b:66:73:e5:
a3:77:2f:8c:0d:f7:e7:5b:21:2a:37:62:d1:c5:f5:
38:07:66:88:83:ae:d1:af:b4:2e:1e:83:40:ca:54:
84:38:f6:cb:28:3a:51:12:83:bb:22:bb:e9:b7:65:
80:cc:79:98:52:e8:4a:09:e5:a7:43:2a:5c:3f:c7:
70:71:45:bd:97:6c:85:05:8f:cc:b7:c1:1f:89:90:
69:54:e0:b7:23:61:32:59:9b:e6:b3:74:f3:6d:9f:
ab:df:31:8b:e4:6f:3f:86:cc:d5:af:86:ce:d6:59:
d3:1a:ec:6b:dc:fc:4d:cf:4f:01:fa:ab:21:b9:87:
73:06:a9:8a:e8:fe:82:bd:d0:42:49:b5:cc:70:6b:
f7:c3:ca:bb:fa:78:b9:7a:f6:62:f6:78:10:74:ca:
95:72:1d:bd:78:43:54:39:30:81:0c:a6:8f:95:ac:
75:39:04:6f:85:10:dd:f7:d4:c6:fc:f9:91:b2:3c:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:DA:E4:DB:38:2D:81:36:63:0B:CC:DB:5F:B9:30:00:AD:8F:62
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ed:a7:fd:37:70:e4:a9:a8:97:3e:8f:67:80:fb:f8:8b:1f:
6b:89:d2:a0:25:0b:e9:76:50:4b:cc:ca:26:07:f5:3f:17:05:
c9:45:d9:26:c6:e2:ae:bf:a5:27:5b:02:0b:73:73:74:98:97:
87:16:26:1c:89:76:94:cf:f8:71:9c:af:d7:12:06:49:b3:62:
6a:02:4a:cd:7f:9e:f8:6b:a8:cf:58:e3:8f:fd:ba:fb:03:e2:
79:ef:25:6d:73:dc:8d:ff:b3:79:a3:88:0d:13:61:a9:ee:8f:
3e:72:60:6c:74:6f:1f:61:1d:77:c7:aa:75:72:d9:f4:e3:3e:
1d:9b:b9:43:48:8a:e1:d8:7f:c7:eb:ce:f4:27:5b:85:af:c6:
2a:5b:8e:08:25:66:b2:84:4b:d9:65:c2:75:79:de:44:a9:46:
6a:67:25:1c:43:a0:90:9f:81:b7:00:ef:5f:a3:db:e2:9a:06:
9b:b2:61:8e:14:3d:5f:40:e3:85:e6:73:7f:07:6d:7c:9c:9c:
e6:f3:47:38:49:38:67:7b:17:cb:15:79:0c:2a:3c:a9:fc:e1:
28:9b:1d:ee:8d:11:b9:18:28:cd:4d:af:4b:7e:1e:89:5a:d2:
12:66:26:51:b7:0d:3a:68:0d:91:86:80:3a:9a:bf:22:81:0d:
a4:78:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:59 2025 by rpki-client