Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: Q16Nh/U5JPSHinO8iNurM7v0DwB0BylYdkkfCC5UMZo=
Subject key identifier: CB:41:27:67:AE:21:D5:92:F2:1E:58:B3:67:5E:B9:8E:63:71:F7:2D
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019A730129B08FFC97327FBE2680304019E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1393
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: ppvjrS29lTk07jV+8bD/sojTnqYgQP95BfUNHwq4KmA=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:29:b0:8f:fc:97:32:7f:be:26:80:30:40:19:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=cb412767ae21d592f21e58b3675eb98e6371f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:0d:69:3b:6a:52:91:57:38:16:17:d2:00:
f7:ac:64:bc:df:c1:03:4a:a9:58:48:41:60:8d:8f:
b3:f9:8c:8c:b9:52:6f:35:5c:71:74:71:2c:df:37:
f3:db:14:ab:30:d5:61:f1:39:e7:14:e3:3f:0d:03:
e8:bf:e5:25:46:52:1e:5a:68:56:b3:00:bb:73:8f:
fc:e3:e3:36:e4:4a:d5:42:e1:5e:a0:bb:1a:4a:24:
7b:e6:61:7d:18:0d:25:19:75:14:95:8c:19:57:d2:
dd:7b:da:59:35:e0:8a:4c:23:30:43:17:3b:6c:9c:
fa:3e:7d:37:e9:a1:0e:ce:9a:38:0b:13:83:33:6e:
ef:cd:a3:cd:88:cc:13:b3:2b:60:08:6f:56:2c:37:
7e:bf:9a:18:09:a2:83:48:2b:70:8e:5a:c0:43:10:
ca:d0:2e:ee:77:d6:d1:ca:5e:73:c7:46:07:68:8d:
21:89:1c:0d:b6:0e:fc:87:22:5a:49:1c:eb:1a:a2:
c4:67:0e:42:c2:8c:2d:f4:02:97:b8:18:20:6f:30:
fa:55:e4:24:c6:21:bb:ad:e2:e0:bb:f6:09:1c:41:
83:86:c6:4d:a4:78:e1:04:2c:28:79:6d:59:9e:d4:
32:ec:4c:42:b8:ce:b9:e2:de:d8:73:1d:af:2c:14:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:27:67:AE:21:D5:92:F2:1E:58:B3:67:5E:B9:8E:63:71:F7:2D
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:41:32:b1:aa:79:22:3a:a7:75:4a:0d:bc:d0:87:fb:df:c5:
af:11:d3:bc:3a:86:dc:d1:dd:40:d4:a8:8d:e1:46:0d:fe:53:
23:0f:ae:4f:79:e1:7f:31:13:42:d9:c5:54:22:7c:93:6e:c5:
50:5b:cb:f6:15:ef:71:df:df:c2:f3:dd:c6:7b:7b:20:1a:07:
8c:5d:09:14:f0:f6:b3:f5:e8:02:48:ea:fd:79:6a:c5:93:e6:
4a:32:2e:9a:87:77:92:37:4d:12:fd:98:0b:dc:cd:3c:df:bf:
3b:23:82:04:85:2b:ff:b8:7e:1c:73:a4:d1:e8:41:bc:d3:62:
d6:39:ab:71:8e:71:75:c4:08:75:13:d7:06:22:73:31:a5:ee:
11:1c:81:09:77:4c:8e:68:2e:c7:1f:29:78:13:5f:a1:24:c1:
8a:23:84:26:b5:6a:86:33:7c:ea:1d:51:cb:c4:2a:9f:f3:1f:
a0:d5:90:72:41:3a:c7:61:73:ea:99:75:b7:4e:f5:44:67:38:
c5:61:93:78:f1:6f:19:61:16:91:2c:4c:07:72:bc:54:9c:f9:
d4:8c:ba:80:0f:6f:c4:79:47:dd:5a:5e:8e:52:26:b6:74:fd:
d6:48:d8:75:69:22:cb:c4:d2:3f:5f:75:58:05:62:45:2b:f8:
0a:d6:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:54 2025 by rpki-client