Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: 84QVHYlKWgW3D8jE4dvq0EbZ4GT/0hK1EFDXts8LqHU=
Subject key identifier: 70:7B:21:13:D4:93:61:5E:DC:88:7A:A3:32:6F:82:4C:AA:A2:F7:90
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019A72259B134FB29BBEE4CDCDA549BD71EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: pdUrc9jMA3Ckk5NlH+Sq0Koq+n5Iu+7ECdFqp/92blY=)
2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9b:13:4f:b2:9b:be:e4:cd:cd:a5:49:bd:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=707b2113d493615edc887aa3326f824caaa2f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:f5:62:43:5f:6a:f9:70:4b:b4:6e:b9:ef:
cb:13:98:d3:45:14:1a:62:07:9c:9a:40:c7:5a:17:
d6:dd:5b:1c:e4:9b:dc:26:a2:c1:4a:2e:81:0a:63:
d5:e3:6b:bc:4d:21:e8:da:1e:d7:81:a3:f8:06:26:
79:be:4a:dc:1a:dc:85:c4:40:1c:3b:62:c5:32:a6:
11:b9:a5:c8:7a:28:32:ab:82:88:91:c5:a3:47:91:
b1:df:54:cc:cc:5b:a7:24:01:99:e1:58:59:dc:a3:
2b:98:e1:ce:ca:9c:6a:ca:4c:12:ad:fc:ea:eb:84:
ba:0c:18:b3:76:61:d9:b8:2d:05:90:f0:85:2e:94:
90:41:6c:c4:f4:e4:1e:2a:2b:65:6f:24:87:7f:5a:
7b:09:8b:f1:8e:3f:11:30:0b:db:38:79:7c:19:41:
6e:a2:8e:17:70:ef:a4:c9:94:d3:95:48:74:01:ff:
28:86:34:2d:ae:4d:28:ae:ac:61:3a:7f:c3:35:b4:
2f:22:34:84:66:13:61:fe:74:e4:e5:d1:15:6c:24:
60:22:fc:f8:91:0d:c9:9a:9f:5f:0c:88:9a:07:00:
c9:8a:68:e7:8f:ab:a3:f5:5f:e9:22:a2:a1:b9:ab:
4b:d5:07:69:75:36:e2:f3:e0:40:25:59:45:7e:d3:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:21:13:D4:93:61:5E:DC:88:7A:A3:32:6F:82:4C:AA:A2:F7:90
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:e9:c3:5e:4a:4c:18:d0:07:8f:23:f4:06:b2:fc:76:f2:
5b:29:47:41:16:a0:02:97:bd:80:6f:79:57:09:a4:fb:75:77:
8d:8d:7e:7d:3f:1b:bd:4c:59:c8:03:54:1e:bb:20:fb:c1:96:
5e:99:ac:91:fb:dd:ec:12:d4:23:01:52:a7:8b:81:db:01:31:
0b:a6:a3:98:16:a8:9c:ee:5a:9e:14:b8:49:01:09:a3:c4:09:
ea:0b:ea:65:d9:99:71:e6:26:f2:65:d9:b4:43:0f:eb:9f:d2:
88:5e:2b:e3:a4:46:76:a0:56:da:b7:3b:82:e7:67:ba:a9:5c:
cf:5a:82:da:24:8b:f5:5e:ee:5d:f0:2d:bf:fb:84:71:52:69:
b7:9b:dc:ca:38:8d:f2:e6:6c:9d:e2:5e:b0:9b:f6:8d:5d:4e:
fc:86:4f:27:81:36:48:b2:b5:93:9a:3f:4a:08:a8:1b:47:26:
bf:0f:66:18:4f:a5:61:10:d3:a2:6a:71:6e:8d:08:aa:57:51:
a7:da:41:56:a8:dd:05:ec:f3:ee:c2:91:8e:39:2b:42:53:10:
65:0a:a7:0d:a8:19:8f:0a:46:7e:0d:42:92:33:94:8f:41:a9:
ec:bd:fd:64:c8:ef:1e:e5:01:38:f8:2e:fd:9a:d6:ec:5b:c9:
df:f2:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client