Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: l3sGDkLhRd7f3A0P/jyCshIQq62dn4LFOdKMsRdI9ZI=
Subject key identifier: D3:52:B4:D2:A7:A1:71:04:E3:AE:5E:E9:17:3F:33:F4:FA:CC:5C:C0
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019A64A0DCA1AC4D198C776B165B0D5226AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0B5B
Signing time: Sat 08 Nov 2025 18:00:55 +0000
Manifest this update: Sat 08 Nov 2025 18:00:55 +0000
Manifest next update: Sun 09 Nov 2025 18:00:55 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: tl3lX2c0gOexGx1bRv+RzNm/FIBJrygUzl3/tvbvA70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:a0:dc:a1:ac:4d:19:8c:77:6b:16:5b:0d:52:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Nov 8 18:00:55 2025 GMT
Not After : Nov 9 18:00:55 2025 GMT
Subject: CN=d352b4d2a7a17104e3ae5ee9173f33f4facc5cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:de:49:f8:e9:ac:8e:db:f7:cd:ca:8f:16:
6c:bb:49:fc:74:69:7e:8e:98:dc:29:b2:4f:ad:86:
7b:df:73:c9:cf:6d:fe:bc:6f:e1:33:53:ac:a1:7d:
6c:9d:29:d7:8a:3b:dd:ac:c2:a0:b6:08:47:2d:8e:
26:ef:b8:44:f6:ce:2f:c1:fe:71:e5:c0:cf:97:d0:
ff:39:f2:38:2d:e5:e4:08:3c:10:5d:1f:c5:1c:b0:
48:f6:81:4a:b8:10:c2:21:dd:06:d7:19:3c:ff:66:
8e:fa:a0:0a:99:0c:b6:37:62:c4:43:1f:f2:4c:42:
e4:ae:0f:16:f9:35:e2:6e:57:58:f3:2e:ce:77:f4:
87:51:92:9f:9c:80:5c:53:2c:38:a8:9c:8c:1f:fe:
1a:66:5f:8d:5e:eb:19:05:7d:6c:ec:e5:e5:66:e6:
43:f5:9f:ae:01:e9:65:51:20:21:16:e9:07:bc:cf:
ba:d7:ac:ea:2e:74:b7:03:2e:f2:f3:b4:1a:b7:94:
99:1c:ea:47:fb:87:2a:fe:c8:a0:d3:3e:16:cf:94:
4e:0c:a5:f7:06:01:fb:58:6c:68:09:09:5f:a0:26:
03:d0:3b:54:c1:3b:a0:d9:ed:3e:ef:8e:4e:fd:43:
75:17:d1:fe:b9:c5:b3:d3:40:a5:b5:4f:7a:7a:b5:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:B4:D2:A7:A1:71:04:E3:AE:5E:E9:17:3F:33:F4:FA:CC:5C:C0
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:6c:fb:90:ff:3e:10:04:be:fd:b6:71:e7:b6:06:a9:9f:
ae:29:8a:24:4b:b4:f5:4f:cc:c1:50:a6:ae:0e:6a:91:71:52:
2a:1b:5b:0a:8b:f1:b1:f4:8c:24:db:ef:97:65:00:86:05:97:
13:f7:3c:2a:38:5e:3b:c2:b8:78:28:56:00:d0:2e:6a:16:b0:
1b:49:ca:02:5f:4c:cd:fe:1f:be:45:64:d6:d4:3d:fa:2b:3b:
ad:76:1a:c2:62:08:98:11:3e:c9:d6:0d:d2:47:1c:18:91:82:
01:ba:db:be:c4:73:33:c7:90:1e:ad:e0:06:d4:a7:b7:1b:37:
99:5e:d0:63:92:d7:58:35:5f:0d:25:79:82:0c:ba:14:7c:c1:
eb:67:db:fa:5e:70:ad:92:db:b7:80:cd:88:7f:0d:a5:24:c1:
7b:7c:44:1a:0d:a7:83:88:2b:32:58:4d:69:f6:9c:e8:78:8d:
19:20:cd:49:b8:52:9c:4e:d8:ae:fa:cb:13:6b:b2:f9:8b:d4:
10:8b:a2:3d:5d:cd:cb:25:eb:57:c1:57:4d:e2:b1:9b:60:c6:
ee:46:ba:bd:43:29:69:6a:e4:ae:e9:23:ba:d7:f1:b8:40:c8:
52:99:08:47:24:27:d4:44:9a:91:b2:56:dd:24:79:cc:86:67:
48:fa:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:48:03 2025 by rpki-client