Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
File: a8Szt0G7W1thchrTBscRR8TfK8E.mft (raw, json)
Hash identifier: h9Rcqdu/UQ8qugZzDK2DapSEDep5cJk0VBMv9Yveyeo=
Subject key identifier: 50:E9:A7:84:A8:E0:38:B2:29:80:44:11:7C:81:A9:29:E2:6B:CF:54
Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Certificate issuer: /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Certificate serial: 019A71499B8D6660DF59E836EC0864B0D5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:40 +0000
Manifest this update: Tue 11 Nov 2025 05:00:40 +0000
Manifest next update: Wed 12 Nov 2025 05:00:40 +0000
Files and hashes: 1: a8Szt0G7W1thchrTBscRR8TfK8E.crl (hash: SdQHFga2gnMbIAjFGtE9lfNgkP/wve/iwIGtVxCT038=)
2: lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa (hash: WUNdsd7uaJayOlmZESESWmlDWN7XrWQH54c9bPYnQ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9b:8d:66:60:df:59:e8:36:ec:08:64:b0:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Validity
Not Before: Nov 11 05:00:40 2025 GMT
Not After : Nov 12 05:00:40 2025 GMT
Subject: CN=50e9a784a8e038b2298044117c81a929e26bcf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:20:ed:d9:9d:8e:ce:e5:ce:e8:49:df:dc:
20:be:38:b2:31:02:0e:cc:4e:ef:13:b5:95:d2:c4:
23:af:e1:62:e1:7f:77:5a:9f:3f:bc:93:c0:bd:6e:
89:7c:05:8b:2b:05:5f:dd:df:01:5a:fc:a8:a1:2d:
fd:b4:a2:46:4c:6e:a2:f1:01:25:4a:80:76:3f:f4:
03:4a:3b:79:19:9d:66:f5:cd:37:75:75:83:76:1f:
75:81:48:8a:ec:52:1b:d4:61:07:79:d6:77:95:f4:
73:e2:9e:20:dd:85:a8:cb:06:e1:f7:83:28:6f:e5:
dd:c2:64:1e:2f:7f:be:d3:8b:22:56:15:cb:63:a4:
01:53:d7:7f:2e:e9:e9:bf:c8:a9:97:cd:9b:d0:86:
93:e4:6a:11:08:33:57:52:c3:7b:ae:dd:ef:5a:cb:
42:be:82:a6:c8:5e:c7:c5:1c:5a:28:05:02:b0:12:
13:51:27:d0:e9:2e:e3:c7:0b:ba:0f:05:69:6f:77:
60:d7:37:43:16:b0:c4:35:62:3a:9b:87:a8:4b:ea:
7d:ab:4d:5d:74:59:70:81:58:0e:2c:cf:d8:42:3d:
98:56:5f:7e:52:57:fc:92:f7:08:ed:1a:14:63:17:
73:0f:0a:4e:ec:a5:00:91:ac:5d:58:f1:51:fa:5b:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E9:A7:84:A8:E0:38:B2:29:80:44:11:7C:81:A9:29:E2:6B:CF:54
X509v3 Authority Key Identifier:
keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bb:ab:2b:71:ea:3f:cb:b0:f3:6c:df:45:a6:d0:e1:f8:e5:
a1:ae:ab:2e:b7:98:d7:8a:d5:71:c5:23:4c:d8:94:04:fe:28:
c9:08:9b:23:0a:be:31:55:d8:3f:f7:7c:e8:05:31:2d:24:0b:
c3:70:aa:9d:2e:14:31:3d:a0:c9:89:c6:3b:a9:ca:df:6c:66:
cb:a4:38:9c:92:7a:f3:97:e5:61:f0:9c:84:d9:d3:7d:cb:b2:
0c:75:3c:b6:ee:29:04:b7:ca:0c:2b:12:8a:6e:8e:e1:2d:e9:
cc:5e:3c:67:d7:8c:96:73:2f:54:2c:ec:46:c8:08:a6:ca:d3:
9a:46:4d:c3:60:cf:c2:d8:38:07:c8:ae:0e:18:b4:56:a9:0e:
8f:4c:4f:77:6c:11:f0:e7:a3:0d:fb:89:92:63:b9:ab:58:44:
12:52:72:91:49:7c:e1:db:7d:bc:26:26:2a:0a:a5:6a:a7:cc:
01:22:d0:c5:98:86:a7:cc:3f:3a:fa:52:7b:04:09:10:1a:cc:
22:19:8c:c8:00:05:b8:f3:8c:52:5d:8b:ac:d7:33:0c:56:14:
f4:26:cc:e5:06:00:27:6c:93:43:a4:ce:b8:25:04:66:b2:06:
75:1e:da:74:62:3b:9d:1f:b9:bf:ad:28:2d:1f:1d:70:ec:1a:
78:c5:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:43 2025 by rpki-client