Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: 8i56hnypvgsNjr2JYr6wqwXfn5nGiQEHEQrpu6zuRqk=
Subject key identifier: C6:94:74:C8:17:8B:91:1C:FF:A1:28:CD:FE:AC:1C:3E:B0:27:5B:E0
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 019A736EFDDF96545C29CED09A04CA061382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 15:00:45 +0000
Manifest this update: Tue 11 Nov 2025 15:00:45 +0000
Manifest next update: Wed 12 Nov 2025 15:00:45 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: Vq+FFfdBxPrDPjuF+9Q21GeUoJJc+v25kyAbsJmYKD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:fd:df:96:54:5c:29:ce:d0:9a:04:ca:06:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Nov 11 15:00:45 2025 GMT
Not After : Nov 12 15:00:45 2025 GMT
Subject: CN=c69474c8178b911cffa128cdfeac1c3eb0275be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:d8:25:a3:42:f6:9c:56:76:35:99:fe:1c:
4e:d2:80:7c:49:38:ba:86:eb:1a:f2:63:c3:04:93:
75:82:a7:98:9a:a3:7c:42:44:4d:ab:f3:87:a2:3f:
a9:94:59:75:0a:67:62:18:bb:50:b0:1e:54:52:2c:
5b:6c:17:bf:15:b0:e9:6f:9d:33:5d:12:d5:21:69:
6d:44:43:37:91:9d:ca:1b:2b:4e:73:6f:74:c0:f8:
34:91:cb:8d:92:bb:26:4a:85:48:86:8a:c1:b2:fb:
24:8a:0c:2a:61:93:72:f0:98:ad:43:33:db:d9:fe:
d8:98:de:e8:6e:fe:6f:a2:2f:41:08:a1:73:ce:d6:
60:57:fc:82:79:19:4c:ca:8d:c9:e7:e6:c3:81:92:
45:fd:8d:40:26:2f:de:cc:a6:45:ba:79:2f:93:c0:
7a:d8:5e:a8:96:3f:39:10:38:d3:28:bb:eb:3b:cd:
14:31:e0:ad:b8:c6:c4:d5:ab:c6:0c:df:da:4b:30:
ee:52:e5:4e:bc:65:27:75:b1:1a:99:53:0b:3e:3f:
84:e3:79:4c:2c:6d:b5:4b:9f:d4:f2:af:9d:e0:98:
fc:5f:b6:11:dd:2a:f8:d2:63:d8:57:3f:5d:95:0d:
e9:95:f9:90:13:f6:56:0e:7a:c7:1c:0d:cd:94:15:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:74:C8:17:8B:91:1C:FF:A1:28:CD:FE:AC:1C:3E:B0:27:5B:E0
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:5b:b5:58:4f:0d:ba:93:9a:e6:70:5c:fa:50:cf:57:14:
63:1e:b2:42:fa:00:88:1d:92:57:1a:6f:34:b3:69:78:89:22:
6c:92:b3:88:5d:9d:4b:0f:97:7f:66:90:aa:da:ee:11:fa:22:
57:fd:03:9c:45:4e:b3:43:66:f3:d9:b4:30:3f:a1:e1:c5:24:
29:49:d3:1f:b1:73:fb:17:33:ba:44:d0:f4:62:24:d7:72:98:
7c:2d:b2:5d:41:0c:b6:46:9d:62:e0:62:47:cb:11:55:9e:31:
93:26:00:49:19:5c:cd:f9:b1:5a:d2:f3:ef:2f:56:0b:8f:f5:
69:36:45:42:4c:bf:7b:dc:4d:be:f1:86:0a:5c:d0:80:75:b8:
3e:cd:a7:b2:80:2e:7f:18:60:aa:db:55:47:9e:a6:fe:55:81:
5b:ce:00:ab:8a:77:3e:9d:e9:1f:30:c4:d8:82:7e:99:29:a1:
d1:37:7d:bb:30:e1:6c:05:d4:fd:e5:47:0c:74:48:47:b1:05:
13:62:36:77:f0:c4:31:33:b2:08:60:e2:19:8c:7c:eb:b1:22:
5a:29:db:7d:78:c2:70:2b:a2:49:43:0b:94:45:55:b9:0b:40:
e0:c0:a4:df:72:9b:55:be:d5:a1:a6:0d:24:30:ed:d9:70:7d:
1e:ba:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:02:02 2025 by rpki-client