Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: mx54jBL78lTWeqwbrlZ4Vi06a/BX5eTnT28JiH+ECVc=
Subject key identifier: F2:5A:B4:67:FD:93:7B:A6:87:A8:C1:8B:2E:EA:0D:FE:79:05:06:F4
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019A725CF26A56BFFEE69DB39EA2984FE96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 13B6
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: g34RYy4IrLsXlL5BuXArCK+R0SmgByK1LFdJKPBb3Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f2:6a:56:bf:fe:e6:9d:b3:9e:a2:98:4f:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=f25ab467fd937ba687a8c18b2eea0dfe790506f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:75:e2:a5:bf:46:e5:ed:8b:61:19:74:8b:e1:
10:1a:f7:c9:86:03:4e:27:ea:a2:41:4b:50:9a:81:
fd:33:ae:b3:43:04:2e:89:16:cf:3f:8e:4e:2d:00:
66:bf:84:e6:48:93:13:44:4c:bd:aa:6a:b1:77:2a:
04:f7:52:ae:0b:cf:f4:a2:48:df:15:9a:26:39:53:
39:4e:06:13:6b:70:10:94:cf:50:22:ca:65:1f:63:
3c:4c:46:98:5e:e4:34:aa:3b:ec:3f:65:35:7e:32:
2f:46:6b:09:03:8a:71:2c:28:8c:84:7a:f5:90:df:
05:51:02:d0:0d:32:64:b9:09:ba:ca:96:ca:07:a8:
6c:6d:33:15:64:a4:bd:20:8a:df:2c:8e:21:52:f5:
be:53:2c:ae:87:23:fc:46:a0:35:81:df:b9:2c:3f:
40:87:92:f7:90:d2:98:2d:11:9f:67:08:53:91:92:
ac:5e:3e:a9:06:0e:3d:5a:63:59:40:a0:e4:98:47:
00:b0:05:9b:0a:b2:16:9a:60:6e:de:71:a7:53:ed:
36:0c:c8:b8:3d:25:64:3d:b4:43:2f:ec:46:e9:8d:
e5:b2:a9:d3:ba:5d:f1:4c:0e:84:1c:59:52:c3:95:
a0:13:57:88:83:7f:9c:ec:1b:58:6b:a5:7d:8a:b5:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:B4:67:FD:93:7B:A6:87:A8:C1:8B:2E:EA:0D:FE:79:05:06:F4
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:a7:62:7e:34:fb:6b:3f:50:d5:26:73:9b:77:d4:c2:7f:
5c:c1:6a:d1:29:82:e8:74:c6:70:17:a4:a3:54:9d:c5:73:2b:
a8:b5:c4:46:f7:c5:07:39:0d:f3:37:de:4f:47:9a:e4:9b:ee:
b5:4a:83:d6:0b:93:28:e7:ab:13:88:4e:58:5c:9c:0f:de:98:
1d:ab:d5:f9:d5:9b:95:28:ec:2a:ee:44:e7:fb:fe:b9:45:9c:
2c:72:f6:cd:18:c4:56:e6:47:27:97:19:cc:f3:af:db:03:07:
19:e9:de:5d:fe:fd:57:a3:c2:c6:ae:01:f8:28:70:e1:38:f7:
72:b3:92:d0:59:1f:fb:ef:83:7e:64:c6:36:c5:0b:23:36:e5:
86:e3:71:18:e4:ee:a7:bc:90:ae:16:26:2e:4b:1b:67:6e:c2:
3e:e5:96:44:14:11:d0:04:76:f8:19:cc:5a:73:4d:db:c9:8c:
6b:67:25:6c:f8:1a:aa:d8:6e:55:05:c1:54:57:b7:5d:a9:1b:
c7:c2:b9:f8:2f:00:66:5a:00:7c:43:c7:79:b3:dd:1b:f7:a5:
9b:44:18:3d:79:74:dc:f6:65:23:46:c7:bd:46:29:d5:62:89:
e4:cb:59:e9:3b:c9:07:9f:9c:b9:30:6f:88:49:5e:8d:87:6b:
ad:ff:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client