Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: 0vPao/3gwZNC9hyd0eUKRsWEcMq9yseNvgeiknECXwU=
Subject key identifier: A1:54:5F:57:52:60:48:70:7A:F9:17:2B:EE:31:6A:5A:5F:68:03:EF
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019A711343BF8412A2E5AE4F901746A30A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 0404
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: A5jZiJkCo8/NYF8TTAS0spMi3HvbNjSG+7BOaGl9f+4=)
2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:43:bf:84:12:a2:e5:ae:4f:90:17:46:a3:0a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=a1545f57526048707af9172bee316a5a5f6803ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:a0:83:5c:6d:83:f5:16:44:92:aa:bd:3b:
f3:bb:55:85:a4:26:17:8a:1a:af:59:28:20:28:a7:
c0:01:07:ab:68:a4:49:0c:6f:d3:92:05:48:5d:bb:
59:f5:ec:01:d7:61:e8:f1:81:1a:5e:3e:c8:ff:ec:
54:e3:33:99:24:e2:ff:42:bf:8b:f5:c8:98:7a:2b:
4f:71:25:2a:ca:73:7b:c2:fd:fe:db:5e:35:a7:ab:
fd:2d:2b:c2:68:bd:3d:45:26:b7:b7:99:9a:eb:fd:
54:84:7a:98:4f:1b:e9:58:2c:7e:0f:0b:99:0a:ed:
e6:a1:f5:9c:7f:19:84:79:4e:56:a5:c4:81:69:03:
b9:a7:c2:29:85:a1:f6:a7:d3:ea:98:b1:24:92:74:
f2:83:e3:cf:9f:23:01:36:ee:47:6e:a0:3f:fd:0b:
7a:72:be:bd:e0:a0:69:38:b8:43:96:9b:24:18:91:
0f:28:06:eb:48:75:c8:84:dc:43:e5:40:34:89:2e:
3b:b6:60:35:cf:82:9b:71:5e:d0:4d:a6:38:82:f3:
f0:db:1c:18:38:8f:9a:62:ee:02:e0:ad:ef:3f:ab:
39:ea:2a:e9:06:ce:7d:e7:7a:bb:de:15:e4:e6:2a:
2c:e9:9c:89:ca:fc:b1:ff:0f:cd:71:0c:8a:79:62:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:5F:57:52:60:48:70:7A:F9:17:2B:EE:31:6A:5A:5F:68:03:EF
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:1f:16:0e:d5:a6:50:ee:e0:5b:27:9d:ea:b5:7a:27:a4:
58:5e:b0:ab:82:bd:ec:61:07:bc:50:3d:18:65:54:43:80:68:
fe:b3:8a:c4:ad:bd:7a:41:bf:96:29:5b:3b:8a:49:fa:c7:9e:
da:54:72:30:a4:14:bf:db:7e:c8:a0:84:6f:5f:14:67:a9:6d:
6d:0f:54:f6:93:c9:eb:f7:b9:26:45:ba:c6:d0:66:fc:25:0b:
3c:35:38:ec:59:ad:07:12:40:db:40:3a:65:f8:e0:a1:e0:07:
07:f8:6c:0f:26:75:76:07:84:6c:ac:e8:8c:fb:57:0c:01:ba:
83:4b:59:95:2e:f4:b4:6b:e5:8e:a3:64:9d:17:21:a3:a7:58:
2d:47:21:a3:1d:e2:9b:72:71:ab:8a:cb:63:28:86:c1:f8:88:
d0:70:c4:d4:89:db:13:f3:44:51:22:26:40:e9:16:1d:47:26:
94:09:e8:2f:bb:18:cc:08:5e:dc:fd:6d:cc:d7:bf:05:79:0d:
2a:72:64:8a:96:24:cf:af:15:57:ae:e6:48:0a:76:ff:ea:74:
35:03:3f:14:e5:ac:2c:ff:7b:73:19:54:5b:41:4d:88:21:f9:
bc:98:00:3f:de:a8:55:4b:97:61:b6:4e:9f:21:5b:62:08:a5:
1d:e8:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client