Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: UK/xbP/9djbX2Ke1RNgy7Q62bWGB57DYuv6WzohWiYI=
Subject key identifier: 83:62:F3:86:8A:90:DE:C6:70:54:E9:C7:72:14:33:ED:D7:83:CC:7C
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019A7301168BE1FEF3DB47CBA991705B50E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:42 +0000
Manifest this update: Tue 11 Nov 2025 13:00:42 +0000
Manifest next update: Wed 12 Nov 2025 13:00:42 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: 1vfI39b+ZGkPHmf4sAa84m92qxZ6PrtBz859sLJd2vY=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:16:8b:e1:fe:f3:db:47:cb:a9:91:70:5b:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Nov 11 13:00:42 2025 GMT
Not After : Nov 12 13:00:42 2025 GMT
Subject: CN=8362f3868a90dec67054e9c7721433edd783cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:09:1e:44:40:45:09:81:2e:1c:ff:e6:c4:
13:99:34:81:98:e2:77:a1:a5:26:3c:d6:3e:c8:74:
66:cd:c0:09:1c:33:06:de:50:45:f6:53:2b:83:1f:
fc:f4:ae:6b:ca:2d:cb:1b:63:57:77:ca:f3:d4:a7:
85:1d:03:5f:5c:79:7e:b8:8a:f3:b7:c6:71:48:85:
ea:77:51:b8:be:f2:63:3c:35:df:47:d1:cc:92:e5:
ad:d0:c2:d7:df:3d:76:23:9b:a4:e5:21:d7:91:18:
c0:ed:b3:9a:6d:70:46:f9:ca:33:d6:5d:01:ab:6e:
fa:34:28:df:f5:cd:b0:f1:b7:df:14:48:0e:c4:51:
db:4c:0d:01:3c:4a:15:94:a3:4a:2f:31:8b:0b:f2:
ab:a7:73:02:fb:09:c7:a9:c6:f2:f6:02:91:72:e4:
48:77:cd:2d:da:39:93:dc:1a:9b:31:26:81:1b:10:
82:b0:67:ec:b6:79:f0:91:32:c7:e2:bd:79:91:73:
f8:45:3e:e1:c4:e1:22:41:aa:07:db:57:15:1c:f6:
fa:54:9b:1a:6b:12:3f:0a:53:ea:2d:29:c8:62:d3:
cc:8b:22:29:77:5c:f7:f1:db:57:66:49:7f:c1:19:
2d:bb:51:28:90:f7:f5:0e:89:cc:0a:56:11:5e:42:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:F3:86:8A:90:DE:C6:70:54:E9:C7:72:14:33:ED:D7:83:CC:7C
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bd:d9:0c:e6:6a:87:a8:e9:36:e1:f6:db:97:f7:6d:18:36:
d8:7d:c4:9c:a9:fd:5a:0c:e6:53:63:44:c9:96:86:9d:03:c4:
5e:91:8f:2c:fa:4c:ac:a3:25:be:1e:95:b5:2f:a3:5d:1e:26:
ee:c7:b2:4a:9e:63:df:06:65:4c:60:72:fe:f8:8e:fe:0e:f6:
b8:8b:ce:0f:ed:54:e4:7f:f4:3f:77:f4:34:78:a1:e5:f2:69:
c6:4e:b7:9a:bb:22:19:76:bd:7e:d6:fc:22:27:59:28:1d:e5:
8a:dd:29:30:17:e7:54:1c:b6:52:97:e3:ce:65:50:0f:37:fa:
89:da:be:67:a5:59:0d:12:3b:28:4e:83:3a:39:ff:9b:9c:ae:
d4:45:89:77:2b:95:a5:44:1a:39:de:30:01:cb:a3:3d:4e:15:
39:a9:7a:f9:59:e0:8a:ad:b9:ec:18:e2:da:9d:1a:5b:ab:43:
2d:39:f6:46:3f:eb:3f:cf:5e:2f:42:25:03:5b:84:50:83:1e:
69:23:1d:99:21:9a:da:57:22:39:ff:25:00:29:f8:06:85:ac:
d2:ca:ae:92:3d:9a:fe:a5:5e:2e:f0:bc:8f:22:4f:16:da:d1:
c7:9c:bf:90:bc:9c:5b:29:a9:f9:df:e7:3f:c9:f5:23:af:5c:
e4:54:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client