Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
File: a49xoY3OxDR8x7TQK8h4TorCewA.mft (raw, json)
Hash identifier: 5A7hQ7Jk3ikTfoGl6C+AO3HYw4NAvCe3/CRQDaXRJP4=
Subject key identifier: 7C:78:50:07:3B:31:8F:2B:73:51:45:53:B0:3F:B8:C3:0E:79:64:0C
Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Certificate serial: 019A718080D8C0B9AC83450320B877C754E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
Manifest number: 24
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: Uh4Rva54OMWP9lIMiHUduMBT0F4.roa (hash: zWB3J362I22mC7rMVfMDBzhAD2wL6BzjJJTX54CcK0o=)
2: a49xoY3OxDR8x7TQK8h4TorCewA.crl (hash: Swkra0ewNMeUOihrW3SlwxwsquP2wKR+vqsmI7FEFI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:80:d8:c0:b9:ac:83:45:03:20:b8:77:c7:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=7c7850073b318f2b73514553b03fb8c30e79640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:80:62:3d:43:0e:95:51:3c:9a:1a:16:52:
c3:17:f8:2f:99:af:a1:d0:30:44:b6:d6:e2:6f:87:
ed:50:71:4a:5b:8c:6b:65:76:cf:74:b2:8a:5d:d0:
aa:8c:91:e2:71:cb:a3:0c:b9:2e:dc:58:11:88:8b:
4e:8c:8c:9c:ad:16:cb:82:01:83:27:19:7a:44:36:
04:a6:a0:7d:96:8f:d5:34:a2:d9:49:83:8a:c5:a6:
4f:d1:d5:92:df:cf:cd:92:ff:9f:1d:b7:1c:7d:d2:
35:a4:cd:3a:62:cf:fb:b5:98:5a:8c:10:eb:f4:10:
12:f3:cc:6e:a3:37:e5:b8:00:46:6c:42:a0:b0:d6:
22:37:f1:c1:10:21:7f:3e:c3:4e:6e:ab:ae:52:d2:
6e:b7:45:b1:ed:12:18:13:0d:9a:3b:ce:1c:22:df:
17:a7:61:33:92:38:41:4d:e4:ae:e9:d4:f5:aa:c9:
1d:84:ab:b2:39:9a:bb:a7:77:bc:90:5c:00:c0:b3:
ae:3d:89:36:c4:92:df:85:fe:0e:9a:a8:c9:f7:48:
c6:9d:ed:fe:6f:0b:e6:fd:e2:38:cb:c6:ed:d5:4e:
e2:ab:b0:08:5d:c0:9d:06:be:8f:99:f2:4f:52:54:
ac:3a:5c:1c:77:89:58:46:64:ea:0e:95:5e:eb:7d:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:50:07:3B:31:8F:2B:73:51:45:53:B0:3F:B8:C3:0E:79:64:0C
X509v3 Authority Key Identifier:
keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:f9:e2:3e:e5:30:ec:b9:cd:ce:80:7e:3a:53:78:b2:b7:
27:31:7e:5e:e3:8a:c2:23:72:95:82:ab:9c:ec:00:27:b9:72:
72:a2:8b:71:42:5e:88:b0:c7:ee:7e:bd:49:ba:45:68:d6:e8:
bf:80:27:c0:27:74:4a:b0:f5:8a:e8:5f:46:e4:3e:8d:2c:e3:
68:7a:86:42:44:65:01:2b:97:c1:ed:f8:ca:d8:98:21:a8:7b:
fc:77:22:c5:1c:c9:53:fa:70:a0:2c:18:ed:6d:4f:6a:7a:95:
85:41:87:56:67:63:3e:ff:a4:69:3f:cb:b3:02:51:5c:f1:fd:
7e:a5:ac:6d:ab:0f:5c:e2:20:9c:64:bc:24:0b:00:80:be:a8:
4c:79:41:b0:6d:45:87:24:b4:24:f0:b6:7e:63:1b:e4:02:78:
c0:fd:f9:02:ec:b8:15:8b:96:8e:24:8a:a9:51:b4:cc:a2:24:
fb:d5:2d:5f:a7:5d:15:bb:dc:bc:eb:92:3c:21:99:76:98:c2:
72:5c:02:99:a2:e5:07:e4:f9:30:fc:14:11:4c:24:5e:fe:31:
2f:0d:78:38:7b:80:95:c9:71:c7:45:8a:cf:fa:1a:ba:0f:be:
72:a7:9b:e3:d1:ba:26:1e:c9:e8:ae:64:85:e4:b1:22:ed:a1:
35:fc:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:38 2025 by rpki-client