Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: 6O4x3wNaRR6fa7NlbXyEufTk21Elh0PVLCcpA/1qyZ4=
Subject key identifier: A0:6B:B3:AA:E2:E5:E1:87:C3:24:A1:C4:FD:E9:DF:8B:92:D2:D5:B8
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019A7225B6F01AF0E8A9059ECD856CEA3C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: GrrJIgoiBTA/5Dn4FrTBsW3Fi82yEocyitYnHPmu8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b6:f0:1a:f0:e8:a9:05:9e:cd:85:6c:ea:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=a06bb3aae2e5e187c324a1c4fde9df8b92d2d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:6f:5e:63:33:0e:4d:b2:e8:35:2b:9a:7c:
81:f7:37:41:43:be:c8:4c:69:1f:f0:3c:03:0d:39:
14:13:8f:70:2c:93:48:04:52:9d:b7:d2:a3:69:54:
e3:0b:59:a7:82:ba:98:11:20:8d:54:d8:af:ef:23:
e1:a0:43:e1:73:35:65:6b:15:d6:6f:59:d8:92:2c:
aa:0b:f8:b2:98:f3:af:2b:82:46:ad:1b:e2:f3:84:
ae:f4:9e:18:39:65:c9:37:d6:7c:7c:69:c4:e8:d2:
91:9f:4d:8a:d1:18:46:bd:a8:3c:58:76:c9:96:6b:
f9:3b:99:26:90:78:c0:34:d5:3f:d4:92:12:4c:43:
12:0b:fd:11:f4:ed:75:93:96:df:04:56:66:9d:1e:
cb:c3:e5:eb:11:d9:18:5d:c2:61:ff:a5:51:46:16:
22:bd:ec:fe:45:73:76:8f:68:82:0c:76:5f:bf:bb:
18:9b:00:e1:d2:d8:98:5e:a0:63:06:32:11:8f:9c:
c6:b3:4b:4f:6e:a2:f6:0f:57:43:c6:5a:26:25:4f:
79:cb:d0:38:8b:12:88:5a:86:de:d0:b9:83:52:8c:
05:ba:b0:0b:f4:8d:30:54:dc:ac:71:26:3a:1a:5d:
b4:2e:e5:53:08:8f:86:fd:3b:f3:a6:bc:1e:31:6d:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:B3:AA:E2:E5:E1:87:C3:24:A1:C4:FD:E9:DF:8B:92:D2:D5:B8
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:4f:93:dd:71:1f:6f:41:85:bb:52:32:50:42:d9:b3:22:
5a:dd:05:5a:8c:a0:4d:c7:f0:7e:d1:b2:7d:5e:7c:53:1c:9c:
35:9a:da:6d:96:72:30:74:40:f6:7c:2f:9b:64:68:04:cb:50:
67:12:ca:e4:b1:c2:11:40:e3:28:5b:c1:7a:bf:78:ed:15:9b:
a5:2d:94:a0:6b:00:58:7c:c9:8b:b1:e5:67:92:57:8b:b3:a7:
20:4b:e7:32:61:34:2b:ff:96:c8:73:0d:cd:c9:23:6c:42:fe:
94:c6:2f:49:f6:2d:41:9d:81:64:41:49:98:89:27:ce:86:6f:
10:7a:d6:af:e6:92:20:e0:a3:d6:ac:73:68:dd:54:a0:ec:b7:
0f:74:15:d3:57:37:dc:ba:14:c4:3a:48:01:0a:2b:5d:62:0f:
0a:94:91:0d:31:c0:85:de:c2:e9:92:b7:6d:ab:54:9c:21:fb:
39:d6:b0:a3:d3:27:61:85:fa:43:84:28:10:96:18:72:89:c1:
d4:d4:7d:0c:6a:4d:c0:0f:18:93:6b:06:28:33:56:28:1a:14:
64:cd:e2:c0:58:78:2d:90:28:85:32:ae:4f:b1:fb:d4:4f:d9:
93:6b:83:0e:bf:a9:db:f3:b3:1f:da:a9:40:32:58:8e:c8:a8:
84:15:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client