Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: RtfeLRqE0XHCGWUIRTb9ci6hzac50LILjqzcYKoJEc8=
Subject key identifier: 7E:79:A7:F7:F6:5E:E7:6C:31:15:42:FE:CB:9D:AF:3B:32:89:86:B5
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 019A2AB181C98E53FB44DB23E152DE0E836E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 0F6F
Signing time: Tue 28 Oct 2025 12:01:07 +0000
Manifest this update: Tue 28 Oct 2025 12:01:07 +0000
Manifest next update: Wed 29 Oct 2025 12:01:07 +0000
Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: MT0e8xIXWJlFFnM+Tkfn8kpTAtpaf5r771YXPyEYx3s=)
2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:81:c9:8e:53:fb:44:db:23:e1:52:de:0e:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Oct 28 12:01:07 2025 GMT
Not After : Oct 29 12:01:07 2025 GMT
Subject: CN=7e79a7f7f65ee76c311542fecb9daf3b328986b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:53:bc:ad:64:b0:32:3a:bf:5c:0e:2e:f2:
84:1d:e2:f9:60:12:ef:c9:3a:ea:a4:86:9f:43:0d:
6f:ed:98:70:16:b6:9e:32:1a:f9:79:68:34:0b:90:
93:e8:bb:14:1d:94:59:a1:99:05:bd:8a:81:93:4e:
f7:b9:b4:26:fc:11:77:4b:66:4e:a5:00:5e:d4:d3:
7c:9b:e8:e0:ee:a3:3d:f6:65:96:2c:41:02:1e:84:
05:c2:f9:36:ba:9c:7a:6f:db:65:5a:c9:23:60:1e:
9d:91:08:79:4f:ef:b6:01:22:cf:13:e3:56:47:12:
9c:36:b7:47:2a:a0:00:2e:68:2c:3c:c0:93:26:46:
a8:88:5c:66:cd:fd:20:48:57:f9:c1:6e:99:c1:fd:
12:98:fb:5a:ac:22:d2:9d:55:10:6e:19:1f:26:55:
a4:30:0b:77:12:39:78:44:82:fd:b5:13:2c:2f:b0:
4e:73:1a:0a:60:19:93:48:2b:80:dd:14:2d:46:4e:
2d:35:7a:1a:e2:49:22:5e:16:4c:6c:67:75:00:06:
32:f5:aa:77:7e:76:e8:9a:30:77:03:4e:d9:bb:bd:
17:ae:9d:db:a6:f1:cc:aa:36:b8:4d:4f:8c:bc:dd:
e7:ce:3a:79:2f:a7:f4:7b:59:d0:82:67:76:c3:39:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:A7:F7:F6:5E:E7:6C:31:15:42:FE:CB:9D:AF:3B:32:89:86:B5
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:98:c7:8b:cd:e4:ae:19:eb:5a:bd:37:38:56:1e:63:d2:
b1:0c:96:5c:76:5f:6c:6e:0d:bf:37:75:32:99:81:99:5b:1c:
58:42:1d:7f:f8:95:82:bc:01:f3:b6:8c:3e:0f:44:cc:9d:ee:
bc:8b:ad:f4:46:8b:f4:c4:ad:d3:46:16:e4:ad:81:aa:22:93:
59:01:aa:90:5f:c5:91:e9:69:60:60:c2:4e:6f:e1:8d:56:a4:
8a:70:ee:e6:bf:24:32:de:80:8c:00:09:8c:45:ab:46:df:25:
43:1c:b3:1f:65:fb:ee:1b:98:fc:75:12:a2:ca:58:03:fb:a0:
40:8f:55:30:8d:1e:4c:de:bb:ab:f2:93:1e:48:8b:20:3d:0e:
fa:e3:fe:4a:ea:03:b9:f2:08:9b:58:2d:4f:46:d6:ed:1b:4c:
79:98:e1:cd:7e:e2:3b:0d:a7:63:71:a3:49:c1:14:b1:ed:8f:
6b:62:36:73:34:ec:28:6d:bd:9e:44:7b:d3:8f:1f:d7:e6:3e:
40:38:ee:61:66:68:28:7d:95:f9:ef:d5:41:8a:d3:71:6f:a5:
df:aa:73:43:fc:55:b2:1d:6a:ef:5f:b0:8c:9d:0c:ec:0d:a1:
9e:de:72:3b:87:3c:26:76:0b:2a:8b:43:5e:1b:81:98:af:75:
ef:02:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:41:20 2025 by rpki-client