Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: 1EUfslTpDcKMFpyivJxsgk0JDOdmUgbY3LuatBiejv4=
Subject key identifier: 08:60:BA:3E:43:40:C6:75:69:81:F5:EA:88:1C:F9:DA:2C:22:1C:05
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019A730127F79299676ECE6F4D065241155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 13:00:46 +0000
Manifest this update: Tue 11 Nov 2025 13:00:46 +0000
Manifest next update: Wed 12 Nov 2025 13:00:46 +0000
Files and hashes: 1: 452BEA0tdKMisIOX3pR09wCEwvw.roa (hash: tqsO8JO/R7NIbaOuNFXRS4CxGBuBkZtyreJ5el3Hruo=)
2: P-_Wbi1I2gi8oHX9MAZe3PZXJDQ.roa (hash: SUeXUBRK111gneMQBTIiq0/M2TNceWYd9pFG3OARHRg=)
3: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: ns1psg8P+isxPlwEVYcdKgVbYj54rKbLK/3PrqHUhrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:27:f7:92:99:67:6e:ce:6f:4d:06:52:41:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Nov 11 13:00:46 2025 GMT
Not After : Nov 12 13:00:46 2025 GMT
Subject: CN=0860ba3e4340c6756981f5ea881cf9da2c221c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:10:9e:82:1e:1a:4a:39:15:06:f0:40:7f:
b2:96:f2:38:c3:0b:f7:4c:71:6d:e5:e8:e8:d7:21:
fc:e0:d2:fc:3a:46:a0:3a:45:23:be:f0:78:73:8c:
4c:b3:1d:06:7e:e0:d3:cd:f0:91:c3:a4:0d:ce:d5:
62:ae:ac:bd:41:7c:7d:40:bb:72:88:b2:1f:da:a6:
da:70:3d:17:80:65:64:c6:71:dc:70:1e:78:12:00:
4b:06:57:88:e1:8e:5f:69:1f:6a:86:97:c3:e1:60:
80:d1:08:f7:f8:bf:d8:c5:0d:53:87:c3:07:0b:69:
8e:3e:7c:17:9c:ef:6d:fc:7a:2d:36:5c:88:cd:17:
8d:ca:29:d0:14:fe:99:14:ea:fe:b6:9f:1b:5a:23:
80:01:f2:56:35:13:9e:04:5a:dd:82:8f:8d:a0:98:
38:4f:78:37:70:2f:0b:3d:06:9f:d0:25:dd:cb:44:
a1:fe:de:e6:bf:84:30:15:f7:9a:78:54:1a:20:12:
ec:63:68:0a:4e:dd:f0:2a:b6:ea:0c:42:d3:18:c1:
4b:da:0a:a6:04:ff:01:19:fe:d5:33:1d:fc:93:a4:
51:42:75:7b:c2:96:14:3f:cb:43:ed:3f:06:65:d8:
96:5f:e4:d1:71:14:b1:c4:fa:30:e5:1f:7b:73:19:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:BA:3E:43:40:C6:75:69:81:F5:EA:88:1C:F9:DA:2C:22:1C:05
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:50:7a:8c:38:ca:54:23:f9:12:65:59:83:ad:8d:5a:2a:f2:
42:f0:50:e1:8b:df:af:02:f8:20:31:69:32:56:cf:cb:d9:43:
af:04:9a:4f:27:c2:4d:e3:07:a5:a4:aa:48:7f:37:31:c4:10:
88:aa:35:4b:9c:d3:1b:7e:66:02:75:3a:34:61:b0:69:c9:80:
2c:e8:58:bd:db:1b:6e:00:45:c1:30:9b:f7:b9:78:e3:d6:6d:
0c:54:48:e1:fa:c5:58:01:6b:b7:ce:b0:03:6a:f8:d9:b3:98:
17:6d:db:fd:b2:51:45:06:1f:ff:47:08:94:c8:fb:3a:9d:14:
8b:69:3c:87:5b:b3:38:9c:f0:b6:d2:cb:99:c0:e9:c2:b8:40:
66:04:1c:90:6c:9c:b8:9c:d3:b5:a6:6f:2c:0a:2f:8e:9d:99:
0f:56:03:57:d9:db:f3:bb:f9:af:ac:f5:49:e8:49:f9:9b:3a:
81:71:97:42:da:de:45:85:db:3b:07:6c:39:a2:07:5f:e1:32:
c7:a3:6a:34:7c:fc:89:d8:1a:a5:72:17:2f:5f:e7:b9:f8:8a:
de:c8:06:84:21:72:60:c4:63:52:3c:dd:80:79:66:9b:83:99:
ae:69:ab:5c:64:75:c7:cc:d5:50:fd:61:b4:6c:bc:80:ba:d5:
50:6e:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:10 2025 by rpki-client