Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: dGe5d+y6098qLJ+YcNKx8I4s/sAAqg+EekOk/Su1paI=
Subject key identifier: 09:BC:7E:A4:18:AD:27:78:A0:6B:7D:67:4F:E0:4C:89:9F:40:81:34
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 019A7149CD0F6E2EADF9D643DBD1AB5C4C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0D6D
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: uTMt4d3gwhssqBiEuGTutqPQpiytX6AqDtZGlpjkvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cd:0f:6e:2e:ad:f9:d6:43:db:d1:ab:5c:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=09bc7ea418ad2778a06b7d674fe04c899f408134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:6d:e8:0b:a6:7c:35:a9:14:82:ab:1c:b5:
1b:0f:c9:69:7e:14:41:26:9c:eb:08:29:7b:48:99:
b3:60:0f:65:35:0e:20:95:a9:28:9a:7e:e8:4c:08:
7a:28:a3:fa:d6:43:6f:b5:5c:50:bf:de:75:28:06:
a3:9e:77:75:ba:2b:a8:87:14:9f:db:c1:74:78:f0:
f1:aa:e8:95:cc:eb:c3:17:27:b0:9e:da:62:92:b8:
97:26:57:5a:f8:ea:29:42:fc:17:87:82:91:fa:4c:
9f:32:a5:0e:ca:7d:83:51:8e:45:e1:f9:cd:02:56:
1a:25:f3:81:c6:e8:57:f4:d8:3c:26:ae:1a:14:cc:
e5:24:22:d0:25:b2:bc:13:0d:22:2a:23:1c:3b:d7:
74:03:e2:59:ca:af:93:7c:b2:de:de:89:7b:47:d6:
e6:cc:5b:0e:c1:cf:eb:02:0e:52:09:29:c8:8d:b1:
3f:05:09:ca:d0:a1:4d:e7:1c:c1:94:03:b4:56:3d:
dd:de:56:3b:30:2c:f3:0e:22:0d:45:36:4a:4b:70:
8d:97:ab:84:25:de:e2:fe:bf:db:1a:a2:29:73:80:
f8:04:32:8c:f4:fc:80:43:5e:bf:62:23:60:e7:28:
74:62:c3:2e:10:54:c0:13:b6:ca:f2:21:87:2c:19:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:7E:A4:18:AD:27:78:A0:6B:7D:67:4F:E0:4C:89:9F:40:81:34
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:52:c8:13:cb:56:25:bf:21:d1:39:4a:27:d6:1d:9e:ec:4e:
61:8e:67:d9:68:ad:76:b6:a4:e2:ee:15:fb:b6:56:9e:35:7d:
9f:29:9f:eb:c4:be:38:7b:ac:cf:ed:d6:c1:90:80:66:9e:5b:
88:0f:b0:b4:23:9d:5f:8e:5f:fc:f4:00:4a:26:83:d5:ae:f0:
8a:14:57:a3:8b:22:4c:4c:fb:2f:34:1e:bb:a3:ec:b8:bf:d5:
b1:41:27:95:b6:4a:ae:1c:cb:4b:c0:9b:0f:c2:7e:98:b7:04:
ba:55:01:be:ce:c0:db:f6:85:b5:06:d3:cb:1c:38:40:2e:35:
16:b6:1a:e3:22:0c:ee:7f:56:4c:e6:59:9b:0e:44:a6:02:31:
25:3c:01:d6:ae:39:0a:ed:b8:ee:d7:c3:2a:9f:e2:02:ca:4d:
38:71:55:7b:c4:c8:ec:7c:4c:17:bd:f6:c3:fb:5c:58:3a:12:
ac:cb:f9:0a:6f:b1:e4:e7:b0:44:0f:61:c2:6f:36:11:11:48:
17:24:84:8b:92:d1:fa:7f:72:d1:53:82:c0:fa:5e:36:64:fc:
77:8e:b9:1c:79:68:89:81:f3:98:cc:98:0e:dc:34:f3:e8:40:
53:72:26:cb:bc:c9:c5:a9:17:be:48:5a:24:ff:2b:c7:3c:50:
98:93:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:17 2025 by rpki-client