Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File: A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier: PekUWUPkPf6bLZ+atUMElaDiY/GoKBQHqsqNEn7JmVw=
Subject key identifier: F6:BC:DA:B9:A6:13:C7:D6:7F:15:47:FB:43:64:E4:5B:3B:0D:03:2A
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer: /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial: 019A251C5EF2BACBFEEF92071FF1DB37C08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 10:00:07 +0000
Manifest this update: Mon 27 Oct 2025 10:00:07 +0000
Manifest next update: Tue 28 Oct 2025 10:00:07 +0000
Files and hashes: 1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: iXKrRaGW/4GkpEjNjXZejQGMm3gJSY/cvzvOJvsrmPQ=)
2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:5e:f2:ba:cb:fe:ef:92:07:1f:f1:db:37:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Validity
Not Before: Oct 27 10:00:07 2025 GMT
Not After : Oct 28 10:00:07 2025 GMT
Subject: CN=f6bcdab9a613c7d67f1547fb4364e45b3b0d032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:73:a0:a8:3d:95:80:0c:cf:cf:bc:17:be:
18:98:8b:71:3b:1c:96:6c:14:4e:63:df:c2:be:3a:
72:2b:5e:55:03:68:cf:61:53:41:f0:9e:37:b7:fb:
bd:56:24:2f:00:69:b4:34:9e:69:c1:43:2a:ff:a3:
3b:cb:99:eb:38:61:94:74:26:c3:68:33:34:f2:a9:
4e:76:ea:c1:31:fa:4c:b3:a0:66:10:a8:39:c0:38:
72:61:0c:10:0e:17:0e:38:f4:01:7d:58:53:5e:c1:
5a:ec:75:a4:4e:a9:80:bc:6e:a6:f4:f8:c1:bb:2c:
8e:5f:86:57:65:28:d6:b6:ec:7b:01:22:bb:59:fd:
89:01:62:26:44:f0:df:f0:fe:3a:ca:10:83:dd:ed:
84:a3:0b:56:b3:a5:65:4d:bb:04:6e:c2:1f:50:a9:
5f:52:27:ae:cc:6e:b3:94:3f:af:d0:e8:8d:ea:1c:
43:36:f8:9e:fc:7c:f2:1e:c6:0d:de:d4:f0:75:f1:
7d:3e:cb:09:51:e0:63:3a:c1:20:19:13:af:c7:8c:
70:27:47:8c:78:f9:8a:b4:7e:34:34:45:46:3a:02:
93:c3:52:01:11:f4:0f:a2:96:d9:1f:96:e0:d9:32:
ed:15:67:ee:14:45:5f:e4:ab:e1:4d:d4:dc:34:e8:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:DA:B9:A6:13:C7:D6:7F:15:47:FB:43:64:E4:5B:3B:0D:03:2A
X509v3 Authority Key Identifier:
keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:0a:97:a7:dd:05:fa:db:b3:e2:fa:33:45:9e:74:fe:73:
f4:be:54:a7:fa:8b:68:4c:06:1a:be:64:e7:06:c1:83:74:20:
8a:af:2d:65:46:b0:9c:a4:dd:2e:77:7d:08:3a:a5:e5:bf:b4:
1e:e6:18:0e:9b:1d:cc:de:6e:6d:8c:a6:18:fe:04:ec:9e:34:
23:b6:1e:0a:0e:8e:4b:7a:66:2f:4f:bc:33:12:8f:c3:d9:50:
5f:88:72:fa:53:c8:ab:23:da:1d:4d:a1:b7:83:9f:f5:6b:2b:
85:77:7f:58:42:6d:6d:49:e1:b0:71:ee:2a:b5:d6:42:62:12:
d2:5e:6e:e3:50:4e:36:c0:44:02:c2:77:8b:49:95:19:fc:0a:
66:0f:b6:63:3c:ab:6f:df:36:b6:b5:c5:29:8d:a3:11:9b:99:
7f:4c:de:5b:9d:93:fc:98:67:51:f9:1d:c7:8a:01:13:22:19:
83:8d:b8:1a:eb:ec:8e:57:2f:f7:2b:2a:aa:9e:07:8d:50:12:
1d:3b:1c:25:b6:d0:0c:b7:d2:20:89:23:b9:02:3a:2e:04:94:
9a:7f:a0:b1:db:0e:ce:b7:0f:47:90:28:63:4b:5b:ec:1e:ee:
ae:8d:55:30:d2:ca:5d:f7:f5:63:f3:55:18:39:77:66:91:05:
2c:28:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:11 2025 by rpki-client