Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: iJo1AxIGU3kL7sJVRAHF3jcsO84dEZLNSeNRP+KzjNw=
Subject key identifier: 0C:EF:AA:2F:F8:53:17:44:52:CE:08:E2:73:5B:CB:B3:76:9B:42:13
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 019A7112B96F482A7F2807C491DBF93157BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: 7ly/ImzI+yk1elNSN32TT6oflHCYGalYIdaE4QPVhSA=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b9:6f:48:2a:7f:28:07:c4:91:db:f9:31:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=0cefaa2ff853174452ce08e2735bcbb3769b4213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:0c:45:f2:44:56:b6:d2:f1:10:90:c3:93:
7d:e5:a2:6f:cd:6e:c9:98:74:0c:21:ee:b4:f6:83:
dc:37:6a:f3:b7:61:6b:02:b0:ac:7d:46:c5:30:93:
3b:48:79:db:5f:df:80:fe:92:25:70:16:48:16:a5:
60:47:6b:4b:2e:50:dd:4d:81:7c:7c:b8:94:bd:f8:
39:86:f4:a8:cc:34:d1:9f:b0:93:9c:ed:32:0f:90:
b7:2c:ec:aa:30:5f:55:1f:ca:ac:01:96:3f:75:3b:
d8:c8:ca:22:56:39:31:c8:bf:da:b7:a9:a7:02:c1:
9c:c9:4a:b9:1f:1b:ea:19:91:5f:a5:f9:00:b4:0d:
bf:bb:29:77:c3:31:b1:aa:ab:38:76:19:d8:05:52:
d2:9f:bc:69:27:eb:66:80:ac:81:e7:ab:8b:73:04:
10:2f:db:73:d4:74:f7:d9:cb:73:c6:6a:6f:c1:c0:
8f:4a:34:f8:cb:db:8f:09:b6:fc:23:c2:b0:b7:24:
a0:30:28:8f:21:db:d2:d0:3b:5f:f8:74:f1:5b:9c:
d2:1e:74:d4:5e:db:79:4c:08:f3:d2:57:ef:15:a2:
7c:ce:95:46:d1:0e:f7:ad:cb:b7:2c:e4:be:1e:7e:
bc:57:07:71:02:6d:45:74:8d:4d:63:79:c2:eb:4d:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:AA:2F:F8:53:17:44:52:CE:08:E2:73:5B:CB:B3:76:9B:42:13
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:78:60:44:6b:5d:d8:e5:17:d7:66:59:a7:5c:a1:fb:89:
4f:25:4a:b9:fc:1f:e9:1d:07:e6:88:34:ca:bf:c4:bc:da:d4:
2b:c3:68:73:4a:18:6b:f0:6e:19:c4:f0:44:e2:af:dc:88:93:
fe:d2:36:64:11:dd:f3:cc:d0:c9:c9:c2:1c:66:48:66:eb:37:
58:f7:7a:96:51:c2:8b:b0:fd:d6:2b:86:ef:c0:03:26:22:0d:
ee:a9:33:2e:70:9e:c5:45:a9:81:0c:e4:11:80:df:15:e4:2e:
43:9a:77:3c:97:87:05:bb:0c:ef:fe:83:50:01:5c:ef:a0:25:
00:de:3c:69:f9:70:bf:8c:73:74:d1:7d:31:db:74:ad:e5:e1:
5e:02:4f:db:12:13:2e:da:68:03:9c:92:23:23:dd:50:57:7f:
27:3f:61:d9:5c:de:a7:04:d2:db:74:6b:d8:d2:43:7d:91:1f:
37:90:31:43:25:a9:7e:fa:e7:b4:da:43:a8:6e:77:7a:d3:6f:
b3:b4:81:cf:7f:9e:91:59:ba:c7:02:a3:18:96:5f:44:97:6b:
12:e0:48:83:be:d3:f5:b1:b6:f9:56:c0:7b:18:15:7f:a6:87:
86:e4:1a:1a:26:90:17:2a:66:dd:9e:09:8f:86:32:46:8c:03:
de:1c:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client