Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: 7I+AJ5KoIZ50p/fyhC7rHUVhKDkNSjbqMVcIwCJAdj4=
Subject key identifier: 58:71:DB:0A:72:69:F7:19:7D:C8:7D:57:4A:48:9A:E5:4A:FA:26:46
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 019A7225E62D5F0A3ADA0F7B1DA9A1B186DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 15F3
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: We462q7/yKBdDnGQ55v7kC6LbgLWVa62hMK/SX+wbSY=)
2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e6:2d:5f:0a:3a:da:0f:7b:1d:a9:a1:b1:86:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=5871db0a7269f7197dc87d574a489ae54afa2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:c1:05:e3:ba:24:84:35:ce:7d:0e:00:c6:
6f:c5:b4:d1:dd:8f:b6:fe:f0:86:22:a2:83:6b:f3:
e1:35:4e:64:9a:f5:84:31:25:e5:30:24:70:20:84:
38:ea:75:fa:96:b4:ba:f1:46:d9:a9:c2:33:ef:62:
1b:67:5c:ed:b1:67:a6:51:8b:49:73:85:f8:ad:39:
74:d4:01:8b:2e:d7:ff:0e:bd:4f:ff:ec:dc:df:5a:
db:48:c1:1d:cf:7a:fc:5a:75:0d:8f:50:86:cc:5e:
c2:da:97:78:63:99:c1:4d:7a:77:e4:9e:4a:8f:ea:
20:f6:74:07:f0:79:0f:17:ac:ee:47:b3:7e:b5:bf:
49:01:37:18:45:49:ce:12:6d:4b:23:48:4d:c8:4d:
8c:8d:e9:6f:b8:aa:d2:8d:a5:69:90:78:8b:f1:33:
d6:6b:10:36:53:d4:a7:17:fb:84:bc:c2:5e:ea:ea:
62:42:e1:ea:17:f1:33:2f:f2:4e:1b:0e:19:48:4a:
db:50:81:f1:8d:72:87:ec:b6:a0:71:e7:83:b6:3a:
08:ac:e2:8b:7d:f7:38:8d:c3:83:f4:45:ef:8f:07:
9c:09:1c:5a:c3:8b:68:c0:b6:07:69:67:4d:ad:c4:
9a:a7:e9:8e:fe:62:03:f2:ef:97:6e:20:12:24:7e:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:DB:0A:72:69:F7:19:7D:C8:7D:57:4A:48:9A:E5:4A:FA:26:46
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:f9:7b:01:72:05:c0:dd:60:b5:bd:e3:14:46:9b:9a:4b:
08:ae:de:03:df:99:b3:7a:6f:6e:3f:75:4c:dc:d1:0d:9c:e4:
3e:fe:d9:ad:87:62:3a:c0:14:ba:b4:bb:b8:f8:d2:db:5a:74:
a2:27:1d:44:6a:d4:3b:87:d7:b8:0c:5a:85:f4:b4:54:61:6e:
bd:5f:2d:bb:32:c9:75:d3:58:43:30:bd:1b:3b:96:0e:f6:b5:
64:81:9a:63:57:b9:b5:3a:92:f7:ef:f8:cb:e3:9d:08:60:8c:
85:2a:45:c2:16:78:94:0e:8d:26:2d:5d:16:6c:a1:61:23:b1:
50:49:90:94:50:8f:b2:e3:ae:c0:d3:9e:20:a4:fa:27:87:e3:
6f:00:a5:05:9c:94:0f:c8:e4:19:8d:b5:12:7c:e3:6d:4a:dd:
0d:c5:b4:03:a5:05:37:e6:3b:ae:8d:14:b9:28:01:f0:7f:ee:
bb:0a:e1:e8:70:bf:25:36:21:a5:f7:cf:57:2d:7d:01:7b:23:
3f:bd:e9:aa:9f:34:cf:46:ac:6a:e9:19:f9:56:07:bf:ce:b9:
8a:96:46:d5:57:03:36:75:b8:57:44:c5:f0:18:1b:26:bd:ab:
cc:19:49:07:57:3b:09:4c:0d:fd:34:04:76:99:05:92:a6:98:
85:7e:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:45 2025 by rpki-client