Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: IvSCOxOIG2Jo/BC3D50+/UGyUTLuFa6VG+10YXassJM=
Subject key identifier: 42:03:8C:E7:FC:CD:F8:38:EE:5F:D1:A2:F8:22:62:27:1A:B3:40:14
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019A72937B9069C2538FCAFD24C31F697F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 05EB
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: m9lmUldmA5J9bdHclwMK/yHRDStulkj58A3v70STXqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7b:90:69:c2:53:8f:ca:fd:24:c3:1f:69:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=42038ce7fccdf838ee5fd1a2f82262271ab34014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:6e:24:a6:63:dc:15:72:c6:ee:d5:2c:25:
ee:8e:75:0e:c2:88:0a:ad:60:d1:af:79:6d:22:a1:
5b:70:44:13:cd:e3:e2:64:cb:12:64:8f:6c:80:bc:
74:19:d6:36:4c:a1:ef:0b:76:2d:5f:c6:f2:40:bf:
13:55:c2:8c:17:d2:a5:3d:43:cf:47:1c:fe:5c:3e:
32:ed:93:a7:78:c4:e1:12:36:41:fe:e6:3c:e7:98:
ae:bf:95:a4:7c:f2:1a:78:2f:17:c1:ae:ee:33:63:
3f:af:86:90:1b:61:28:6b:e4:df:d6:6c:fb:68:3f:
1d:ea:6c:c1:11:b7:20:c2:b9:18:d3:68:e4:25:4e:
f9:94:f3:03:5b:5d:32:66:52:0d:b4:2e:2b:8c:39:
41:35:02:e2:a2:fc:f1:19:a6:e8:12:f0:ed:6a:d0:
46:09:5a:b9:9c:30:f3:31:e3:0f:c9:9f:bb:1c:a0:
8f:4c:f7:b5:63:2e:3b:ee:e0:15:c5:88:da:71:68:
7d:d9:b8:a2:c1:d1:b4:59:31:98:4b:9f:e9:97:0b:
21:29:24:f8:1e:1b:d7:8d:d6:c9:03:1f:6b:32:57:
32:b5:3f:ca:9d:16:39:3f:fa:a2:13:fd:df:a4:81:
9f:d1:09:a5:91:68:4e:83:a8:5b:35:8d:e9:e3:6c:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:8C:E7:FC:CD:F8:38:EE:5F:D1:A2:F8:22:62:27:1A:B3:40:14
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a3:72:3c:66:cf:44:15:21:97:8c:3a:2e:3a:26:6d:2f:c4:
a8:71:f8:84:7f:f3:61:e3:4d:26:10:d6:20:0c:3b:d2:19:8a:
39:fa:0a:42:63:31:44:af:68:19:3c:74:06:a0:0a:46:8a:11:
bb:9e:f5:64:aa:00:18:d6:7b:a4:2a:eb:57:b1:21:dd:b1:73:
26:68:54:d8:16:4c:f3:46:53:79:14:8f:41:e6:8a:f1:0d:32:
07:85:6c:e7:ee:9c:98:49:16:51:74:a0:7a:23:7b:85:2e:ed:
62:ed:47:07:50:ef:59:1a:6e:77:db:2a:b4:70:c6:f9:40:ea:
26:f7:70:05:3d:fd:f4:eb:65:03:df:8d:0c:4f:04:9f:11:47:
16:12:40:0c:bc:65:8a:28:15:c0:55:ec:f7:18:52:a5:7e:9b:
bb:11:37:0a:47:cc:1f:0d:65:7c:82:57:01:84:27:0c:16:c8:
37:1e:6e:6f:67:6d:86:12:06:ac:75:c1:b3:31:0a:b7:4a:19:
b9:de:8c:bd:1a:c1:2b:50:a9:aa:d4:1a:0c:47:55:a2:76:7a:
77:8b:22:aa:59:f8:9c:25:a8:40:de:86:5a:db:6f:ee:7a:b9:
a7:9e:af:e4:a7:d8:67:1b:bd:dd:48:3e:e8:0c:cb:cb:4d:27:
84:4f:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:55 2025 by rpki-client