Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: AIwoH6f/NnKe0UcxlHKn43G6Bqctua7Ltb1cq1GfGlU=
Subject key identifier: 56:AA:1D:8A:24:DD:8E:A1:4A:AF:ED:DB:B2:24:86:A9:7A:E3:1E:49
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019A725C73EC0421E610918F74408E01CC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 080C
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: A97hY1XYv57uxyNTp5DCCzCdgt1jB/wGlCmwkIGz9YY=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:73:ec:04:21:e6:10:91:8f:74:40:8e:01:cc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=56aa1d8a24dd8ea14aafeddbb22486a97ae31e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:7f:ec:04:b6:d8:13:cd:36:51:06:6f:24:
17:b9:f6:47:a7:9c:d5:ca:75:84:e9:fd:0e:72:91:
70:0c:00:88:20:0b:f3:24:12:83:73:25:03:77:36:
56:e3:4c:f9:ff:96:fc:4a:41:37:31:c8:51:ac:79:
7e:55:3b:4c:58:4e:1d:8f:7f:75:cc:25:af:a4:81:
86:de:f7:cd:c3:34:60:2d:b9:d2:5a:4b:23:a8:18:
5c:7c:e6:df:76:aa:78:6e:85:3f:b0:8c:87:74:2e:
cc:da:8f:2a:d2:76:db:ea:83:ce:20:73:b2:e7:2f:
53:46:4b:c3:d0:96:ba:7a:f5:70:3f:77:b8:e5:50:
f6:dc:a7:36:fc:f6:a1:56:1f:28:5e:55:21:19:a6:
a4:a8:25:2f:0f:2e:57:81:dd:53:27:78:c0:f7:99:
97:48:f3:e3:63:c5:75:07:d5:12:1a:3e:cd:d9:87:
69:d2:cb:dd:5b:1a:97:22:10:47:a5:d8:28:45:c8:
f5:7e:bf:00:72:13:bc:10:08:ab:41:fa:a2:ed:8a:
0a:1c:e9:cd:29:19:da:32:ac:b2:98:b9:6b:3a:80:
ce:47:c3:24:ff:7c:53:64:3e:6d:a4:54:6a:3c:52:
42:91:ea:f0:29:9c:13:a9:8f:ab:36:89:e8:bf:0b:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:1D:8A:24:DD:8E:A1:4A:AF:ED:DB:B2:24:86:A9:7A:E3:1E:49
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:9c:6c:9b:bf:f3:88:86:14:de:bd:14:9e:92:a4:de:95:
6f:7c:6a:67:22:57:5a:8f:00:f9:d2:7a:d2:c8:76:9a:68:ea:
e4:5d:54:43:87:c2:ca:16:bf:41:52:f0:38:2e:cd:f8:7a:a4:
e4:a8:09:9e:b9:dc:ca:77:88:23:f9:bc:ac:37:37:2e:37:a2:
fc:44:3f:d5:c6:7d:c3:ed:60:57:c9:25:38:07:e9:1d:d2:43:
fa:d4:27:8a:57:da:8f:e7:cd:65:18:4c:b5:f2:64:ec:49:ff:
75:0e:e3:03:85:b9:fd:ad:14:48:c8:7d:bd:12:5d:11:2c:57:
68:83:56:54:51:ba:a2:60:1a:59:26:e3:3f:97:46:88:3a:f8:
c3:53:ad:c3:7c:a8:59:75:be:a5:20:23:65:40:ca:52:84:57:
0a:7d:7b:d2:8a:84:95:4c:f0:85:7d:b4:c9:7f:8d:54:21:67:
4e:f1:2c:0b:fa:86:a8:4a:5f:bf:49:37:b3:4f:b1:c8:95:2c:
55:8c:fe:83:11:7d:7d:ee:b8:21:0e:2c:fe:e8:13:af:e4:88:
18:b2:57:06:09:1a:a4:a7:34:38:8b:bc:f5:8a:c1:98:34:af:
1f:cc:fb:ad:a7:79:05:86:79:94:16:0e:a8:5c:b1:ff:fc:c5:
b7:ac:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:53 2025 by rpki-client