Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: 2iONnLV+ntuYAjKHYEX7kU++aRAvsIbqZwNxX7YS/xs=
Subject key identifier: F4:E8:E7:DA:40:FE:73:66:7D:98:D5:57:D8:4E:61:F4:B3:67:71:BC
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 019A71B79C4C8B9C66EF2D9BEFED7A41EEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: Vjjs5cCUG2iLjivPLnzqPZx2lzLupCXB86JoMvqZvig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9c:4c:8b:9c:66:ef:2d:9b:ef:ed:7a:41:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=f4e8e7da40fe73667d98d557d84e61f4b36771bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:b1:af:45:28:28:19:14:7f:e6:27:11:ff:
1a:e9:eb:40:84:2b:1a:21:03:31:dc:a0:08:aa:3c:
6b:af:2c:f8:08:12:ce:cd:5a:70:bd:42:47:4b:d3:
bb:c7:50:7c:cc:02:54:0b:9f:b2:97:86:54:81:1e:
51:25:98:ec:bc:54:06:48:37:9d:af:5f:01:36:da:
cf:96:bc:d7:6f:09:e4:2b:e0:70:de:75:b8:0e:58:
93:57:e9:b2:86:28:f2:d7:8f:de:92:5b:95:25:e4:
a8:e6:8b:70:b9:47:70:ef:66:28:0d:16:49:46:a1:
af:7f:15:95:4a:3e:92:90:24:93:33:e0:1e:7c:b2:
73:34:b4:c8:7b:03:06:45:f9:9a:87:43:6d:20:68:
ac:ed:33:92:e8:76:ed:57:fc:84:da:28:f8:f4:29:
7f:72:3b:19:e2:d3:a8:68:65:d5:40:16:7d:45:9d:
7d:53:4f:df:57:be:35:c0:d1:aa:02:51:c4:45:31:
cf:5e:24:e9:a8:b9:96:5d:00:60:26:a7:df:41:8a:
32:22:78:58:62:bf:78:39:b3:9a:f3:34:0b:c0:0d:
71:3b:1f:b9:94:25:48:4b:90:7e:1c:4e:42:55:a2:
6c:b2:86:e1:34:de:ef:15:11:ae:c0:14:f3:6d:d7:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:E7:DA:40:FE:73:66:7D:98:D5:57:D8:4E:61:F4:B3:67:71:BC
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:72:70:df:f8:a1:ac:78:28:26:f7:a4:63:24:0a:84:8c:
d9:55:af:4d:f1:a2:ee:df:02:f0:1b:29:a4:df:8a:1f:35:57:
e1:09:23:4a:1d:28:43:09:48:8c:e4:b6:80:34:24:05:30:9d:
2c:5a:2e:27:2c:2e:c3:bf:e4:42:4e:0e:3a:64:85:a6:97:cb:
12:b8:30:36:60:57:a7:7f:92:e0:e1:92:fe:87:98:22:7d:27:
c6:3b:be:f1:35:6d:db:fa:50:50:b9:67:aa:cf:b1:57:34:04:
6c:92:81:7e:99:e5:51:56:a5:13:b4:56:72:30:fc:7b:58:60:
a4:5a:c7:0c:20:62:de:82:c8:25:c7:f6:8b:b2:f6:64:8d:6d:
97:92:d4:8f:b1:85:b3:29:a6:a0:83:de:c5:61:23:02:1f:47:
18:85:18:63:f2:6f:04:9a:32:0d:ac:f4:91:18:de:e0:24:0b:
e8:3d:03:bb:23:e5:12:fc:17:34:a0:61:99:ce:51:9d:0e:82:
56:cd:3f:ad:77:ab:82:38:a0:32:1f:cd:23:b0:31:30:b6:97:
68:31:14:bf:a1:dc:e9:3d:0a:67:b3:e3:d6:89:a5:13:75:50:
06:2b:1b:49:87:65:02:26:b4:ce:11:07:80:c7:2b:71:ec:33:
80:bb:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:18 2025 by rpki-client