Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: gFy9ht2OYIhWDZQmzbwQ481ot/m2Fpg+RYd/zWME2gw=
Subject key identifier: 44:93:CC:63:DB:7B:43:E9:7A:7F:6D:B2:41:61:17:4D:75:1C:02:89
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019A210917366F1551713FBF507E9D238C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 09A6
Signing time: Sun 26 Oct 2025 15:00:35 +0000
Manifest this update: Sun 26 Oct 2025 15:00:35 +0000
Manifest next update: Mon 27 Oct 2025 15:00:35 +0000
Files and hashes: 1: GgSeZqBtPbDTA-VVXf9e6AoPvUg.roa (hash: LXq0XhZj1SmNEFSwc+aRkKJHZ0BEOQodJpp7/CVQB0M=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: rtYe206oDquqPkYGNhgHYuhroW2Z3ZbFZBlfeYs9X5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:17:36:6f:15:51:71:3f:bf:50:7e:9d:23:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Oct 26 15:00:35 2025 GMT
Not After : Oct 27 15:00:35 2025 GMT
Subject: CN=4493cc63db7b43e97a7f6db24161174d751c0289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:d5:52:18:06:1e:d3:a3:94:44:4d:66:dc:
40:6a:55:fd:3b:98:97:b7:7a:42:9d:46:5b:53:f7:
fe:94:9f:ab:5f:5b:41:72:57:59:6a:41:32:00:ec:
2e:61:5b:95:59:3f:33:de:de:fb:f2:97:c3:c9:54:
4c:1e:f4:e3:92:fe:ac:bd:30:a1:71:dd:b0:7e:a0:
a5:fc:7b:9a:09:e3:6f:34:c7:17:e3:d7:2b:16:80:
d9:00:cf:a0:5b:ef:74:5a:72:6f:e0:56:f8:0b:ee:
78:1e:ff:0f:e7:a0:df:89:2d:c7:b0:28:a8:07:25:
3d:e7:7b:d5:e4:63:29:82:cf:88:f1:40:ab:38:a3:
4b:2e:0c:a4:8f:26:66:f5:19:99:30:50:bb:33:e5:
77:bd:8b:ac:7d:63:b4:05:b3:22:42:de:bc:96:fe:
ce:be:95:22:d8:09:f1:c7:35:71:b3:fc:98:51:6a:
95:18:c4:27:99:7c:1d:15:e5:ad:c5:b3:07:10:9f:
af:63:2b:7e:ab:64:ed:53:9e:d2:84:84:04:be:39:
41:4d:5d:1b:1b:a3:36:2e:45:07:40:70:e0:c1:ea:
91:79:d2:38:09:5d:53:2c:6d:c1:d0:4a:68:6c:66:
3c:28:c2:f1:79:cb:d5:c8:68:7e:82:68:03:ae:9d:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:CC:63:DB:7B:43:E9:7A:7F:6D:B2:41:61:17:4D:75:1C:02:89
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e4:a0:2a:bd:0f:7e:17:ed:d1:99:43:2b:fe:d6:88:70:78:
1e:95:b2:b9:c0:a9:5a:20:8b:bd:ec:59:2d:1c:91:07:ed:95:
97:6a:ba:c2:38:79:bc:67:81:d0:d4:51:67:5e:ae:bf:ec:0f:
d4:d1:35:06:a6:d3:db:68:5e:c2:5c:9b:48:a8:bc:7f:3b:4c:
76:fe:21:ab:6c:81:b2:48:2c:5a:77:f9:8d:0f:c5:41:29:ee:
72:cb:1a:41:d8:1e:a1:3b:bb:97:94:28:bd:18:7a:7d:72:80:
b3:59:4d:f0:6d:33:65:95:7f:79:e3:98:90:98:01:5a:13:dd:
bf:7a:0b:73:01:59:94:3b:11:f8:89:9a:79:3d:8a:62:d3:3f:
a8:d7:ea:a2:19:8f:40:3a:5b:89:a9:e7:d4:ad:23:9d:f6:4a:
08:58:9e:03:4a:64:e9:11:6a:d8:26:ff:6b:e0:5b:a1:60:02:
06:18:8c:70:64:32:96:da:47:68:ff:aa:19:78:b3:d1:c9:e6:
8c:90:c7:c9:e1:45:93:8d:fd:af:26:9e:d6:d0:a5:2d:e2:0c:
67:2c:a2:70:5d:3f:21:cc:f0:a0:2a:7f:70:b8:a9:93:88:50:
2b:44:e2:39:28:d9:40:a0:aa:73:df:2e:9e:3e:de:a4:f4:2e:
bd:d0:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:38 2025 by rpki-client