Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: nwKJ3s5IInbDRATYHZWOZ4gw7sYBtp80WxpKqqDuans=
Subject key identifier: 9A:F6:C0:CD:9A:AE:97:C6:3B:3C:C2:DA:5C:52:35:02:C2:C1:AC:3E
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0199307E9E1B9B9EA4F80842E7AAB7D49A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 05F0
Signing time: Tue 09 Sep 2025 22:00:28 +0000
Manifest this update: Tue 09 Sep 2025 22:00:28 +0000
Manifest next update: Wed 10 Sep 2025 22:00:28 +0000
Files and hashes: 1: 9NrcBYoOJdr1BdxBgzzOEAUeKdo.roa (hash: /ZwEP+MS+NaeETxxOk3x1Xyx7z9RztZFuBBdT3AXCpU=)
2: ETjV-BKWJLPwYpMPREKNFP_t814.roa (hash: FEbx//ip3zOVOOaz/mGYLmuNmaoO9k1UL7AAezYzLxQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: 88+iqg4fptkVOIsi9zsG/QYWPENriI+V9cJ5KbWt7Z8=)
4: gvXnmMos1ZWOxNvH4rF4VZRgqjw.roa (hash: dD0JDKWyz8RttwKsGGrA4bkH6oYAjTjCLaJ4HX942V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:9e:1b:9b:9e:a4:f8:08:42:e7:aa:b7:d4:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Sep 9 22:00:28 2025 GMT
Not After : Sep 10 22:00:28 2025 GMT
Subject: CN=9af6c0cd9aae97c63b3cc2da5c523502c2c1ac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:c9:21:7e:55:4d:47:4d:59:5a:b7:00:d0:
bb:1f:35:4b:6d:e0:79:21:5f:57:de:6b:77:fb:d7:
c8:67:1c:11:b4:35:78:89:c2:87:83:91:53:f1:da:
a5:dc:8e:0e:8e:24:de:7c:45:d6:8e:bb:d3:db:dc:
b6:3a:d9:4b:2c:cc:6c:02:c4:a6:b9:17:28:17:39:
df:26:a9:4c:b3:68:df:fa:9d:3b:0e:9f:3c:cb:4e:
6c:f4:e4:86:22:09:21:59:f0:73:fa:48:67:63:51:
cc:51:39:c2:d1:a7:a2:29:ab:46:84:cf:f3:bb:76:
3c:e1:3c:d9:40:5c:c3:87:f9:8d:d2:29:e9:13:31:
9a:d4:05:b4:42:bb:b2:c0:fe:68:5f:21:b9:09:e5:
fd:3f:8a:86:ec:62:83:ee:e5:f9:dc:ca:51:02:8e:
e4:73:7c:90:ed:16:db:87:bd:ca:01:69:33:b9:19:
d3:32:12:38:c9:e2:08:4e:cf:cc:7f:4f:22:8d:30:
6c:cd:ef:21:a8:22:e7:e5:2c:57:ea:13:e8:77:b7:
a4:88:e3:c8:d8:82:6e:59:f9:0e:91:0d:e9:e0:63:
57:b4:5b:2a:45:d1:3b:ac:db:99:75:ba:ef:64:ab:
38:2d:ff:e4:a0:03:8f:19:14:41:a9:92:cd:65:b3:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:C0:CD:9A:AE:97:C6:3B:3C:C2:DA:5C:52:35:02:C2:C1:AC:3E
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:75:e8:9c:3c:10:4e:d5:d1:9e:91:4d:5c:b4:78:95:23:8a:
70:4d:0b:9b:4b:6b:a6:10:b0:03:a9:e3:37:90:51:78:3f:b5:
bf:f8:af:8d:71:f6:76:ff:dc:cd:57:43:f3:27:19:91:db:47:
c8:0e:5d:fc:ab:75:05:9c:2b:64:e1:21:22:bd:b0:55:73:fc:
d0:cc:a5:2a:6c:11:66:bc:7e:27:98:dd:9f:8d:07:8f:43:33:
15:6e:3e:9d:b3:49:77:3c:6d:3c:87:77:9b:55:9d:94:7f:ad:
36:61:91:5c:c0:71:44:4c:02:58:76:a0:3a:ed:f3:7c:0d:de:
d6:85:09:e1:5b:1f:70:ef:28:15:6f:4d:23:48:4d:4d:c4:35:
53:7a:3b:4f:cd:47:e9:6b:c3:3b:d6:b5:87:ff:10:0d:dc:dc:
3c:23:bb:11:2e:a7:24:49:84:c0:14:9b:b9:78:3b:78:1b:31:
6e:59:d6:79:19:ff:2a:92:f3:f5:af:b0:ed:fc:b0:07:38:2a:
8f:1e:d4:4c:23:8b:ba:bd:49:47:1d:b7:4d:9c:e3:4b:c3:5b:
f7:83:d7:79:e5:04:e0:92:8b:88:83:be:10:51:69:e9:07:77:
4f:b1:33:3c:4d:f3:34:b4:a4:21:08:9d:44:4f:d8:49:1e:4f:
73:24:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:54:52 2025 by rpki-client