Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: 3PkuSZTxQ/owR3yYE2nAJ7DUFMi2ZE2U3vdwItz590o=
Subject key identifier: EA:BA:BD:9B:44:AB:3D:1F:D6:27:55:80:5A:30:D4:D1:43:F8:B8:78
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019A72936550D6B3002D5C9897458E8C95CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0E58
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: zXIgLHmrd6XSbZKzHrBtfRykt9fGcTEh418+wryGWPs=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:65:50:d6:b3:00:2d:5c:98:97:45:8e:8c:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=eababd9b44ab3d1fd62755805a30d4d143f8b878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:ae:65:3a:58:fe:04:dc:c2:34:85:4a:75:
38:b2:e1:dd:15:e8:30:6e:67:75:43:84:2b:f4:89:
35:e5:77:d9:bb:3c:23:4f:71:b1:0a:6d:61:2c:43:
53:e2:ae:f1:d1:ff:1d:40:8f:46:97:f8:fd:91:36:
b2:cd:02:fc:9a:c1:a7:74:99:db:b1:d7:ee:7e:3f:
7e:75:49:c0:eb:d0:e3:02:5e:8a:16:d6:75:32:b9:
01:44:3b:59:e7:82:dc:72:e2:63:e2:1d:64:d0:d9:
ea:7e:41:24:59:87:cf:9a:a1:5f:6c:96:e3:9d:8c:
4d:1e:4e:1d:9c:8c:55:3f:50:93:ad:e2:66:f1:53:
5d:bb:6b:05:e6:3c:5f:7a:d6:64:00:cf:61:5d:d1:
72:d6:5a:d7:de:9f:e6:2e:fb:7f:45:5e:11:b9:65:
7c:95:5f:6c:c6:ce:89:83:8d:83:9a:18:80:48:a4:
1d:4f:4f:97:9f:8f:07:a3:ab:f9:3f:11:8d:15:a0:
25:d0:f6:e2:08:2c:d9:e4:95:8c:db:04:b6:d2:f8:
93:95:35:79:c0:8d:54:9e:f9:db:00:74:fb:b4:bd:
df:01:fc:b8:05:1f:d7:86:0b:d4:fd:cc:45:7d:3b:
9a:bc:9f:6d:a3:61:fd:2f:48:f6:a7:16:ec:ce:50:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:BD:9B:44:AB:3D:1F:D6:27:55:80:5A:30:D4:D1:43:F8:B8:78
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:45:ea:1d:39:71:73:a9:5f:11:3a:50:c4:8f:6f:6c:01:d3:
a7:5d:54:67:3b:82:18:48:60:0a:5e:24:85:5a:43:0d:e9:79:
fb:76:61:12:39:93:c0:61:98:41:ad:f2:0e:83:8c:7d:3e:7f:
68:50:d4:05:c1:01:82:2d:8c:0f:75:cf:7a:87:e7:2d:a0:f5:
21:5e:9e:89:98:42:27:2b:fd:c0:e4:d5:28:6c:5c:d0:dd:ed:
e4:27:6f:7e:94:40:8f:5b:d0:5b:ad:9b:3a:ab:e3:c9:c6:43:
d3:52:05:7a:da:5a:c9:5c:03:5c:27:2a:f7:ed:ce:b9:d8:da:
aa:c9:34:f9:da:ce:e4:61:ba:77:1b:a3:0b:0e:7e:05:0e:ee:
89:b1:d3:77:3a:43:af:3e:59:3b:50:54:08:a5:f4:64:0a:20:
c7:05:1d:a0:d1:2d:d4:cf:a8:5f:6d:8c:57:be:8f:15:31:6a:
c7:ae:11:d5:8c:ab:b0:0e:29:62:44:1d:1b:8c:1d:a3:60:dd:
ad:3a:3c:03:32:00:1b:45:f1:17:8e:d9:ff:b3:2e:ad:af:12:
d4:56:1a:1c:c2:20:39:fd:79:82:aa:1f:1e:b5:e3:44:78:c5:
8c:32:f2:46:33:9d:39:18:54:48:53:a5:e0:63:a6:d5:74:68:
8c:20:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:42 2025 by rpki-client