Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: +99NELhK/rJ1XV+/nq1XaE4u4tuX7Xb+poCLJnNTsr8=
Subject key identifier: F6:71:2D:1A:D8:65:48:D1:07:9D:35:B6:02:36:4F:8A:6E:C5:61:A7
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019A71B79641BDD6510F04663C74E3295C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: Wl1sHRx/gPbDNrjU9v7GEQ7k0Y6fuN5JiDXEuDz4GlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:96:41:bd:d6:51:0f:04:66:3c:74:e3:29:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=f6712d1ad86548d1079d35b602364f8a6ec561a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:7a:e0:3d:55:65:f3:b9:02:56:52:72:c6:
50:8e:46:09:71:c2:7a:94:c3:36:fa:a4:ff:e7:73:
0e:8b:f4:ee:05:70:b6:4b:69:69:bd:f6:ff:45:f6:
e6:30:5b:a8:8f:a6:49:96:2d:59:41:e7:bb:b3:6b:
84:7d:fb:3b:61:59:c4:20:c6:a8:d6:db:40:69:95:
9f:49:be:32:e6:16:a0:2a:8b:e7:4e:5d:84:9d:f8:
8d:17:1c:91:7b:52:3c:fb:dc:eb:6e:58:49:26:59:
20:c2:2a:fa:f8:77:4a:ea:c0:5d:64:8a:9f:91:a5:
b3:eb:f7:24:cc:ac:86:d8:b3:5b:2d:6d:01:53:ec:
10:70:c1:62:03:15:09:62:c3:3f:44:76:d6:06:39:
8e:84:ad:2f:f8:d0:0f:c1:0d:f2:ad:34:b2:43:9d:
f0:00:3f:8b:d6:1c:db:7a:c3:55:9e:53:b2:a5:0a:
4f:3a:33:bb:29:7f:a4:a3:c7:1a:d4:ff:24:19:43:
3e:9f:8a:05:72:04:7a:d9:6c:46:12:ab:58:eb:fe:
d4:dc:97:fd:fe:b1:38:8d:5d:cb:7f:e2:e1:e7:0d:
73:fb:de:df:0a:33:3b:c0:dd:67:84:ea:64:6f:f7:
db:f3:52:9d:20:75:8b:5e:67:7a:ee:4b:03:01:29:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:2D:1A:D8:65:48:D1:07:9D:35:B6:02:36:4F:8A:6E:C5:61:A7
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:73:44:7a:7d:2d:70:ec:fb:c6:51:8b:4e:2c:50:45:ed:
d5:e4:95:57:da:61:d4:05:8e:47:08:cd:e2:d0:d7:34:52:91:
ed:1a:e7:a3:98:fa:94:9d:87:a1:6c:f6:fc:87:b7:4b:f8:e4:
63:d8:af:f9:70:15:ee:43:cd:ae:2b:7f:58:68:c6:a5:9c:a3:
5a:3e:8c:89:21:bb:aa:d3:55:89:7e:1e:90:2b:5c:87:4b:6b:
39:11:54:4b:41:47:7c:0f:12:e2:b3:21:9c:bd:49:f5:8b:14:
c2:90:0b:6e:fc:9b:98:a9:cc:65:88:61:11:1a:0d:9c:93:87:
51:f5:b3:29:c0:d8:34:1b:6a:e9:b0:96:b4:03:46:c1:79:02:
e4:0e:a1:b0:e5:8a:57:e7:43:7d:0f:76:68:16:a3:c7:42:a1:
10:ca:15:81:b9:ca:f4:62:9a:88:96:9b:7b:a7:90:fa:ac:c1:
b2:67:23:e6:fb:1b:f3:36:b9:2d:34:dc:74:a9:b9:ee:33:c4:
f6:5e:8e:63:89:fa:06:d7:12:4c:6f:c7:3a:b6:02:cc:2a:ac:
7a:26:2a:f3:0b:17:b5:08:3f:e8:56:78:78:77:79:bb:11:ee:
8b:14:bf:9f:fe:fe:38:4d:73:0e:8b:e9:aa:92:91:b7:8d:eb:
9d:af:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client