Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: frieDdflqIS/38nnIOOrEswhU3plXG5Kh6qQ/wZlQmE=
Subject key identifier: 93:CF:32:B5:9D:3D:10:81:AE:2F:28:3C:A9:53:E0:20:72:1C:3D:A4
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 019A71EE9BDEC891580CB1E9FAA9A758A1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: 03AA
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: ydmhYQ7ZaC9DNIvf6yhaXNvEKChJlKsl5m+jwhUOpY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9b:de:c8:91:58:0c:b1:e9:fa:a9:a7:58:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=93cf32b59d3d1081ae2f283ca953e020721c3da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:7e:f5:92:b9:a9:dc:09:42:f8:5f:a0:50:
17:cc:ec:d6:9e:4b:ce:6e:8b:09:4a:34:0e:16:8e:
18:6a:57:62:0b:99:e3:da:47:b4:3e:92:83:25:0d:
a9:e8:aa:ef:eb:cb:a9:b6:d0:38:35:96:95:21:e2:
1a:9f:f2:62:65:27:49:bc:cd:09:de:ad:d4:0a:ba:
6c:40:80:6e:2d:f3:c9:18:1b:5a:19:84:13:ae:c8:
29:34:61:76:72:f6:df:a2:3a:5c:55:6b:1c:a0:c3:
13:bb:9e:ae:e6:d6:db:cc:b2:a2:d0:56:f0:ab:5e:
d4:6e:b1:ec:13:91:48:13:c4:9a:a6:21:21:1c:b4:
f1:41:a4:9a:d3:48:fa:da:b4:d9:ff:83:28:02:b0:
80:d6:db:2f:8a:c2:6a:0b:ce:32:08:a1:d5:5d:0e:
a4:da:be:2a:3f:d3:9f:8a:b5:bf:2a:6b:77:0e:b1:
0f:ac:b9:a6:1c:14:c4:eb:10:52:fd:f6:51:dd:5f:
15:83:5f:30:a2:76:1d:47:06:d0:07:93:02:aa:c4:
48:41:9f:91:9a:a5:3d:d8:71:36:40:c2:d9:f5:47:
08:39:28:9d:1d:7a:53:b5:4a:d9:06:35:c3:bd:5d:
23:fa:ca:a5:85:74:49:ed:04:a8:68:a4:eb:d8:7f:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:32:B5:9D:3D:10:81:AE:2F:28:3C:A9:53:E0:20:72:1C:3D:A4
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:c4:59:91:0e:cc:4e:6f:7c:5c:42:c5:93:3e:df:47:f9:
93:0f:16:f8:78:5d:b0:31:10:bc:95:87:c9:c5:0f:86:b7:df:
71:55:1f:81:17:26:d3:97:85:19:fc:6c:0b:76:ef:79:45:a5:
e8:d7:dc:e5:9d:0b:d3:29:fe:18:64:72:75:71:7a:93:cb:c3:
89:7e:e0:4f:0f:48:bc:bd:3d:f8:96:a0:97:5d:f7:ae:73:bf:
7e:95:55:d9:ed:97:82:83:03:f3:9b:a1:8d:90:40:69:fa:dd:
a1:65:1c:7c:74:5d:1e:32:8e:ed:b4:ce:af:1e:48:48:15:24:
2b:df:78:62:d2:21:34:6f:02:fe:ef:73:09:2f:81:bd:ba:4a:
69:a5:48:86:c0:d7:27:e2:5d:b0:c5:19:1a:02:75:25:06:d9:
5d:da:a8:b0:bc:ef:25:fc:a2:a1:c8:40:31:21:39:d6:fa:51:
78:f9:2a:24:02:ba:9c:21:27:3b:8d:8a:bc:7d:35:32:ec:8c:
ca:fb:88:0b:41:26:ab:79:d4:95:29:d1:96:3d:4f:49:bd:13:
c6:f0:5d:64:64:f7:5a:33:3d:7b:f8:99:8c:c3:6f:f1:3f:a7:
6c:68:9a:87:3a:9e:ca:0c:3b:c4:55:74:68:eb:67:c0:8f:35:
9c:98:b3:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pveyJFYDLHp+qmnWKHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWY3MjVlNzE5MjQ0MDQxOTY0YTA5MzcwZTE3ZmJlZmJi
YmFhZjYwHhcNMjUxMTExMDgwMDUzWhcNMjUxMTEyMDgwMDUzWjAzMTEwLwYDVQQD
Eyg5M2NmMzJiNTlkM2QxMDgxYWUyZjI4M2NhOTUzZTAyMDcyMWMzZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dl+9ZK5qdwJQvhfoFAXzOzWnkvO
bosJSjQOFo4YaldiC5nj2ke0PpKDJQ2p6Krv68upttA4NZaVIeIan/JiZSdJvM0J
3q3UCrpsQIBuLfPJGBtaGYQTrsgpNGF2cvbfojpcVWscoMMTu56u5tbbzLKi0Fbw
q17UbrHsE5FIE8SapiEhHLTxQaSa00j62rTZ/4MoArCA1tsvisJqC84yCKHVXQ6k
2r4qP9OfirW/Kmt3DrEPrLmmHBTE6xBS/fZR3V8Vg18wonYdRwbQB5MCqsRIQZ+R
mqU92HE2QMLZ9UcIOSidHXpTtUrZBjXDvV0j+sqlhXRJ7QSoaKTr2H/6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPPMrWdPRCBri8oPKlT4CByHD2kMB8GA1UdIwQY
MBaAFGuvcl5xkkQEGWSgk3Dhf777u6r2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEt
MjZjM2ZkYzVlNzE3LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEtMjZjM2ZkYzVlNzE3
LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoDEWZEO
zE5vfFxCxZM+30f5kw8W+HhdsDEQvJWHycUPhrffcVUfgRcm05eFGfxsC3bveUWl
6Nfc5Z0L0yn+GGRydXF6k8vDiX7gTw9IvL09+Jagl133rnO/fpVV2e2XgoMD85uh
jZBAafrdoWUcfHRdHjKO7bTOrx5ISBUkK994YtIhNG8C/u9zCS+BvbpKaaVIhsDX
J+JdsMUZGgJ1JQbZXdqosLzvJfyiochAMSE51vpRePkqJAK6nCEnO42KvH01MuyM
yvuIC0Emq3nUlSnRlj1PSb0TxvBdZGT3WjM9e/iZjMNv8T+nbGiahzqeygw7xFV0
aOtnwI81nJizzA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:30 2025 by rpki-client