Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: FNdcFWk6voRdwIUiFpn5TjEmm9Pkwf6a3Hil8w5TTZ4=
Subject key identifier: 3A:93:7F:66:91:39:C4:7F:FC:57:B4:2C:09:6F:8F:31:27:D1:70:97
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019A2A44772E0FCFB1128B0FC28D10D5EA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 10:02:01 +0000
Manifest this update: Tue 28 Oct 2025 10:02:01 +0000
Manifest next update: Wed 29 Oct 2025 10:02:01 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: HZ1TBpMJ5gY8NslrhlaBbWgUDRazzu1VUnFF+7QDPU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:77:2e:0f:cf:b1:12:8b:0f:c2:8d:10:d5:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Oct 28 10:02:01 2025 GMT
Not After : Oct 29 10:02:01 2025 GMT
Subject: CN=3a937f669139c47ffc57b42c096f8f3127d17097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:f5:b8:d9:57:92:6e:b7:4d:a8:23:b4:15:
de:2d:8c:60:1c:aa:0e:0b:00:70:6c:86:f8:1e:87:
9c:6d:ce:a3:24:38:d7:44:49:58:9f:25:d9:81:c2:
b3:b1:ad:42:3b:94:b6:32:52:4f:03:ee:c4:79:62:
2a:47:60:01:54:3c:a2:6d:8b:3b:eb:33:18:12:07:
5c:c7:4c:0a:ef:8b:29:f4:0f:9f:4c:15:1c:2c:30:
a2:b7:8f:94:92:86:df:58:e2:7b:9d:13:ab:d3:8e:
1d:be:71:3b:50:0f:23:89:12:4c:4e:97:b6:9e:e6:
b1:18:54:bf:09:f3:01:ee:94:f2:3f:9a:25:71:6a:
21:c0:7f:87:d5:74:d6:69:96:d3:23:b9:63:6f:83:
19:45:ff:e2:58:c7:a7:b2:fa:7e:d2:a6:a9:05:22:
f4:d8:1a:1f:91:48:41:b3:c0:58:83:28:2a:a5:89:
0d:e6:78:93:2b:43:b9:ae:a5:91:10:90:4d:6a:f4:
30:69:61:40:17:76:77:36:b3:7f:d6:70:3d:28:1f:
94:3a:be:25:bc:42:ed:e3:c2:0d:6d:b7:eb:51:91:
41:81:2f:7e:51:0d:25:98:29:22:6e:fa:80:2e:2d:
0f:46:05:eb:c6:89:b1:5a:f2:2f:2e:3e:da:7e:75:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:7F:66:91:39:C4:7F:FC:57:B4:2C:09:6F:8F:31:27:D1:70:97
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0c:02:48:47:66:50:43:fe:4e:b5:70:c3:79:12:3a:a6:91:
73:1b:e9:ac:5f:62:9c:99:d5:25:04:8f:b5:ba:5f:95:53:11:
0d:84:3f:04:10:f5:75:c9:fe:bd:29:69:81:2a:12:67:c4:61:
d7:5c:9c:23:49:f8:8b:6f:c9:ad:a6:8a:a9:c5:19:c9:d2:c5:
e5:01:df:25:54:ae:42:af:21:95:8a:2d:d5:12:8e:69:68:67:
7c:0e:53:c0:c0:c5:5b:a8:96:35:5c:24:23:e3:db:24:9c:91:
f8:1d:e8:aa:bc:a4:94:b8:fc:2c:d8:2c:e0:45:76:8e:b3:03:
bd:d8:a3:ab:d8:88:99:1f:66:b1:ff:0f:e9:70:bf:ad:b6:1b:
3b:fd:1a:2e:29:1e:a5:90:34:3d:50:ed:dc:50:f6:5b:5c:5f:
7f:08:e4:5f:05:50:63:53:56:bb:31:a8:07:3d:41:28:76:c9:
c6:e8:a7:47:f2:fa:63:5c:aa:bc:41:dc:0a:68:78:11:fc:b8:
b3:55:c4:af:14:fb:8a:2c:31:29:65:e0:eb:62:ea:cd:8b:4c:
a3:b4:44:b2:c9:b0:e8:bd:da:ee:bf:25:ce:46:84:d3:af:5f:
9c:ea:0c:51:8a:7f:00:be:0f:10:ec:c3:7b:5f:1d:e7:0e:ba:
de:5f:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:17:51 2025 by rpki-client