Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File: A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier: UmdgrA025Xs/8vRVB54ySuCrzr5A14cEUURPoCX3dKk=
Subject key identifier: 26:41:F8:8D:9E:34:E5:72:DE:46:24:B3:08:12:B7:E0:5E:A2:94:96
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial: 019A706DDD446CED36FECEE9B089DD855F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:00:39 +0000
Manifest this update: Tue 11 Nov 2025 01:00:39 +0000
Manifest next update: Wed 12 Nov 2025 01:00:39 +0000
Files and hashes: 1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: NotLrmoyBTSpdVoxeKxgkE20hBpM/h0S0q9m/JC+g2o=)
2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:dd:44:6c:ed:36:fe:ce:e9:b0:89:dd:85:5f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Validity
Not Before: Nov 11 01:00:39 2025 GMT
Not After : Nov 12 01:00:39 2025 GMT
Subject: CN=2641f88d9e34e572de4624b30812b7e05ea29496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:89:92:d7:6b:3a:a1:1a:d5:3f:80:ac:87:
33:ad:8c:ff:56:66:bb:89:28:f1:fd:9e:30:0e:f4:
66:ec:78:d2:e3:b7:04:ac:43:1e:36:3c:1c:12:a0:
8b:67:ba:ca:5b:af:46:da:ee:ab:97:58:2c:3c:3f:
9c:9e:24:ac:67:da:24:01:87:b9:85:b6:9f:23:e0:
53:2a:5e:48:2e:fc:58:84:53:f1:5a:43:48:49:bb:
93:49:58:3c:95:93:77:43:78:ec:b9:71:25:14:3b:
86:19:8d:13:cb:e3:99:34:49:a8:3f:54:03:74:23:
6e:76:86:5c:a4:d2:e1:34:a4:c3:6c:2d:32:41:27:
57:4f:c0:53:60:59:60:05:a7:bd:c3:ea:ff:31:01:
34:b8:2c:0e:fa:be:b9:f3:5c:23:71:72:3b:74:ad:
b4:7c:7d:bd:7c:9f:c9:01:76:72:a0:71:f2:25:f9:
13:be:bc:fd:b7:27:be:10:75:17:36:c8:5b:a4:ec:
e1:98:a6:ac:e6:28:2d:7c:4e:d6:28:ed:6e:63:04:
5c:46:0f:a0:a7:ae:e7:66:47:d4:3a:7d:04:af:f8:
70:9f:84:bc:ac:b7:a4:0c:9e:64:34:91:9d:62:9a:
46:d3:f2:f4:74:40:f0:63:8e:b0:f5:5a:76:d6:17:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:F8:8D:9E:34:E5:72:DE:46:24:B3:08:12:B7:E0:5E:A2:94:96
X509v3 Authority Key Identifier:
keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:22:c7:59:ba:a9:91:c5:19:58:83:f6:f8:d5:08:13:af:09:
27:74:89:ba:92:de:6e:76:72:24:64:cc:8f:67:b5:76:03:5c:
19:cb:23:d8:32:e9:a4:a8:60:35:5f:24:c4:a0:96:78:11:91:
6e:63:8c:b0:65:19:d1:eb:fb:d5:c1:ae:34:7e:d6:90:08:38:
32:a9:0d:ce:0d:d1:a7:24:8d:c4:ce:38:50:95:d2:78:f9:29:
dd:d3:fb:a0:c7:f3:d7:13:d8:3e:47:af:2d:8a:d6:2f:e7:80:
fc:e6:03:d1:21:2a:77:ab:6c:04:61:fe:1d:ba:c9:0e:6a:9b:
55:b9:8e:09:6d:88:9b:21:09:4b:a6:cc:78:be:9e:9e:a1:fb:
e2:ea:60:37:38:bb:3b:a4:cb:77:77:d1:a9:1b:1f:1f:92:35:
e0:0d:4e:5a:41:67:94:67:50:3f:05:1d:35:9d:90:10:19:52:
d4:ad:2d:87:18:25:ba:99:84:53:06:74:d6:08:ae:1b:76:b9:
98:7e:63:66:4f:8c:2c:76:57:94:9d:dd:ab:af:f1:c5:24:dd:
98:23:0b:72:7c:0c:33:6c:7b:24:1e:3e:73:33:e3:d0:0e:ad:
ed:cf:cc:1b:3d:80:80:0e:56:21:e3:c2:69:eb:cb:4d:1a:a4:
85:6d:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client