Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: I8iK0YotbDEWyLHfK4xUZWE35mKjjg90/KcgfHsIIZc=
Subject key identifier: F7:35:C7:E3:A7:6F:A3:A6:EA:D1:E7:FB:3E:E5:C7:0D:6F:45:96:DD
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019A725CB185A3D8CE532337FAEB86798A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 1324
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: WsRYxoGq/aeEB6Lzpz80k8hOO6iT2KejSBftxflvZcE=)
2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:85:a3:d8:ce:53:23:37:fa:eb:86:79:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=f735c7e3a76fa3a6ead1e7fb3ee5c70d6f4596dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:4a:3b:72:27:d1:2c:82:1b:d4:fb:90:72:
41:cd:37:86:aa:9d:95:71:71:38:9b:58:68:f5:e4:
4c:36:76:e8:97:1b:c0:f6:73:c2:f2:39:79:ce:53:
32:ce:a5:3b:62:b1:4f:6f:29:f9:72:0e:fa:30:c7:
34:0e:76:a2:6d:80:8c:a0:70:78:25:e3:5a:d4:71:
df:22:f9:60:78:1d:8d:b3:f8:36:b6:d2:f7:81:f5:
2a:37:29:df:d2:55:5b:ea:ec:a9:3c:2f:b2:5d:9c:
ce:2c:30:97:ec:b1:fd:3e:ce:84:f1:87:c4:a2:82:
61:c0:ee:e4:06:20:2f:a3:84:0c:e2:52:7c:42:f3:
c1:33:77:6c:27:b2:46:17:69:2c:f0:72:3e:82:b1:
b4:85:02:a0:38:44:6d:b0:1c:9f:c2:44:ee:ab:df:
6d:37:76:6b:3e:76:a7:89:5b:a6:c9:fd:45:b3:d4:
5d:b8:f6:f4:1c:e0:7d:06:96:a6:41:52:a8:9d:7f:
23:3e:98:ec:6b:e4:2b:bb:48:71:a1:c8:72:84:a9:
20:69:87:49:a2:99:5f:77:8b:32:2b:16:7c:5b:40:
50:67:8d:4f:a6:0e:15:34:62:48:87:83:1a:8c:2a:
f0:a9:7f:7f:d5:ea:a9:31:0f:21:11:55:a4:6d:33:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:C7:E3:A7:6F:A3:A6:EA:D1:E7:FB:3E:E5:C7:0D:6F:45:96:DD
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:7f:0f:8f:16:a0:21:c5:76:5c:64:c9:86:86:1a:08:9e:
fa:72:59:15:78:04:f2:24:e1:9a:bb:eb:c3:1f:8e:7b:f5:48:
44:02:59:fa:8d:c8:11:75:81:e9:f3:4f:08:a3:a4:07:60:9d:
c2:a8:2f:47:e4:b5:c1:17:a3:6d:12:9b:02:81:e9:5f:a7:fc:
97:01:4b:8f:8f:aa:d6:3f:ad:2d:67:19:08:e8:c5:e8:8b:7c:
15:9c:32:61:39:17:33:05:c7:80:80:31:86:2b:6c:57:39:65:
71:60:24:15:62:76:13:91:ee:ac:7a:bc:90:08:87:f7:1a:ce:
8a:2f:7c:ac:a2:48:a6:51:96:53:f3:8a:bd:e3:11:53:ea:77:
e2:e3:08:e8:33:32:f4:8b:15:66:e0:8b:e9:5e:ae:1f:19:24:
fd:eb:f9:18:25:d6:de:b0:bc:d4:c3:0e:ad:7f:94:e3:f9:7e:
76:09:85:5b:bb:86:65:3a:70:73:24:53:b8:df:44:16:b8:ab:
41:ad:5e:2d:1f:70:67:a9:f4:a4:d5:7b:87:32:bd:8b:a2:e3:
80:fe:96:d9:94:6c:77:66:a0:0c:41:ed:e7:c7:43:96:79:7f:
0f:44:44:ea:18:f0:85:a3:41:a1:73:19:70:05:92:6c:66:eb:
28:83:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:20 2025 by rpki-client