Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: 7vuamoNfujF5KqJ//rIxDhOhXt4q7zCMLDD4llpsT2w=
Subject key identifier: FE:95:77:DA:17:C3:55:B8:51:84:E2:55:71:33:BA:62:0F:EE:74:08
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019A71B8A1E8D9604C73FABC2B84E6AB7336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 02B2
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: FZlDRwQNmXCg3_Qh5afXAwCGih4.roa (hash: SoWjx9Et7z/xhRKKbjGE/59bJXf4bvrCWGT22R3gJr8=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: 8pX0h0oF3FhCdEIHJHsHBB20/YuPudhOx6IT9SsYLq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a1:e8:d9:60:4c:73:fa:bc:2b:84:e6:ab:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=fe9577da17c355b85184e2557133ba620fee7408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:61:5d:19:45:06:f4:06:45:06:3a:09:a2:
c2:3c:f5:1a:d8:75:80:be:8f:9a:5c:20:21:52:46:
48:31:e2:71:a6:08:79:06:2d:ab:d5:0a:b1:50:41:
3b:38:5e:42:1b:42:e1:b0:80:a2:f2:90:4b:91:4c:
e9:e2:a7:d7:68:ec:d1:f5:c2:14:b4:49:47:39:0f:
af:16:b6:6d:22:a9:64:9a:51:0b:fd:4a:5f:86:34:
af:63:0c:4e:40:20:ec:8d:c4:de:e9:45:b6:17:42:
b3:3d:b5:5f:5b:3b:87:76:06:f7:f4:41:c5:a1:3d:
91:2a:1c:1b:48:43:fb:99:22:32:b3:69:7c:4b:0d:
96:ad:35:ef:a7:1b:2c:9f:76:98:a6:07:02:41:bb:
d5:ad:b7:ef:92:83:2c:33:07:95:29:28:28:4e:b0:
19:f4:4a:c0:ea:3a:85:32:13:dc:da:b1:93:8c:90:
b5:ba:45:bd:cd:a7:60:14:1f:ea:30:2d:61:3b:6b:
aa:f7:4c:a5:83:08:de:e0:20:cf:37:35:2c:fc:8b:
74:1d:74:6e:d4:f0:0a:9d:82:77:de:1a:ed:79:94:
6b:8f:fa:a8:07:11:51:5a:0d:a4:23:48:f3:94:d9:
5d:36:32:da:49:14:90:12:a0:76:f5:23:c0:db:e7:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:77:DA:17:C3:55:B8:51:84:E2:55:71:33:BA:62:0F:EE:74:08
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d2:d6:29:4d:fa:77:de:c3:a0:aa:b1:e8:e5:62:b5:e0:ba:
6d:16:4e:e5:8d:c6:69:86:42:ca:9b:3c:81:0e:2d:59:11:16:
69:a8:5c:bb:d2:8b:ef:92:83:b8:f0:23:09:0e:04:db:de:e0:
6f:73:0d:a0:ad:a8:e8:fa:6c:71:5a:8c:9a:af:e0:30:5d:ac:
6d:01:fe:42:33:87:4f:3c:7e:b3:70:f3:96:af:c7:0c:2a:2e:
30:0e:3b:c0:87:22:d9:02:32:8e:25:6f:10:16:e4:f0:bd:40:
98:d9:5c:4e:6e:53:53:2c:d4:c0:60:76:e5:e4:a0:a5:b5:50:
74:03:0a:29:f8:a4:63:6f:3c:0c:e2:66:ba:64:79:d2:ab:42:
ae:a1:94:69:2b:3b:9f:f0:d3:11:99:7d:6e:1f:ef:4d:8d:ad:
0a:ff:38:87:40:c5:4c:bb:af:b6:d4:f5:e1:73:a9:e6:cf:57:
41:e2:d7:70:f2:ea:ef:cd:3d:8e:52:e5:ae:8e:8f:81:99:6e:
1c:e0:da:47:14:69:41:db:f6:ca:f2:8d:ad:b8:aa:e7:6e:09:
2e:5e:cd:0c:84:82:02:9e:8f:31:3f:8c:e9:60:55:70:e0:86:
d7:3b:7a:11:d3:09:0d:09:0d:26:10:29:1c:dd:43:b4:f2:7b:
0d:5e:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client