Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: YIggyUu3gLDwnUvM9aS6ZElzCy21cVMa4dBkP31/SSo=
Subject key identifier: 11:01:A4:D6:6F:5F:56:0F:69:4A:E0:52:DB:A6:0B:3A:50:07:9F:CD
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019A722598932127684BC951DBE4D00A0B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 13B7
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Z52rs7Zgi7XCdX5Q1DjFit4N7Cu0zmRqOuM0zsHADFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:98:93:21:27:68:4b:c9:51:db:e4:d0:0a:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=1101a4d66f5f560f694ae052dba60b3a50079fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:b1:ee:56:1d:b4:c9:92:f5:df:2c:a7:35:
23:25:80:20:bb:23:33:98:53:95:16:8d:5c:8f:f3:
b6:de:45:95:56:63:51:10:c0:b1:a3:3c:d9:b7:c3:
23:2b:e1:21:99:8e:d3:58:ef:6f:f8:69:35:04:7e:
59:00:1b:05:de:8b:16:81:f8:f0:a8:1a:83:24:ca:
7d:cd:d4:12:af:62:e9:69:3a:77:43:16:6f:d5:5c:
3c:ee:67:c8:52:93:4b:08:a6:c5:53:f7:da:b3:c6:
d7:89:5a:e5:63:d6:73:5a:c4:4d:a0:f4:f2:59:9c:
17:1c:4b:7f:e5:de:75:c8:a2:dd:ac:40:11:48:2f:
ea:49:13:b5:af:7d:59:e7:56:48:2c:c9:5d:d4:53:
d9:5f:3e:9f:39:db:af:03:74:b6:78:35:e7:20:fa:
5a:18:26:83:92:c0:19:de:f6:75:aa:e6:b8:9a:9e:
e4:7b:d7:96:75:65:9a:0b:b0:71:cc:9c:5b:f3:66:
30:53:c5:bd:79:f3:a9:a6:92:f2:68:63:35:c1:6a:
c0:1e:07:86:4c:6d:44:29:d1:62:0f:a6:6d:6d:20:
7d:86:ab:af:75:d5:f1:b1:0a:57:8d:f8:0b:35:d6:
ba:91:f4:bf:33:89:e4:be:e2:6a:a5:4e:e4:e7:39:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:A4:D6:6F:5F:56:0F:69:4A:E0:52:DB:A6:0B:3A:50:07:9F:CD
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bb:82:63:6a:5a:06:51:43:0d:2e:33:19:93:06:37:f5:0b:
c9:3e:9e:32:a8:09:d8:ca:69:41:69:b0:a2:ec:e8:04:e0:cd:
e1:9b:bd:7d:43:7e:73:b4:a0:24:1c:d1:2a:b4:3a:bb:64:18:
7f:b3:71:ab:02:e7:61:b8:d2:f9:f8:f8:59:4c:31:e0:2c:48:
57:99:73:8c:29:95:e8:ac:f4:b5:0c:ab:2a:f1:62:9a:fb:87:
8e:8a:40:66:e6:b9:06:bd:ce:8e:80:a5:92:71:d8:28:0a:79:
e8:ca:fe:c4:dd:87:57:3b:6c:de:82:0c:04:68:63:35:2a:0d:
ab:7e:2f:81:26:a3:d0:fb:dd:ff:08:37:1b:83:b2:5f:b1:96:
e4:76:71:d2:89:8a:5c:f2:d1:28:db:da:97:f7:20:78:30:0f:
a8:05:29:a0:27:11:dc:31:f9:93:e7:9b:c2:26:3b:e9:a9:dd:
03:c5:14:1c:77:ef:d9:62:6b:0a:86:9e:df:cc:3e:6e:cf:fc:
a5:af:c1:69:ba:7a:11:87:af:c6:d3:51:eb:39:76:be:f5:a0:
1c:b1:2f:f3:76:04:b7:58:a2:97:0b:fd:03:03:47:53:c7:44:
97:c5:05:28:74:2f:a7:b0:11:2f:63:1a:1e:a7:4a:c7:a3:37:
b7:62:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:19 2025 by rpki-client