Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: s5wkD5QT82beqD/S65/oqfOkllCHs4nXrBCxU/NiQEU=
Subject key identifier: 98:0F:D9:A5:EE:DF:75:8F:11:6E:EC:9F:F3:4A:EE:0B:9E:51:CA:2E
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019A71B79E0BE8609B413934D1B7F2B64E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 145A
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: SFiuc4T7tk2hth6vzIOcGJaI/rebCrpSOw3ag+hIQ5U=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:0b:e8:60:9b:41:39:34:d1:b7:f2:b6:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=980fd9a5eedf758f116eec9ff34aee0b9e51ca2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:86:f4:2e:de:5b:41:43:6c:95:05:df:da:
48:a0:eb:4b:31:f1:13:ad:96:b3:b7:a2:a7:ec:7b:
fd:c7:40:87:1f:11:0b:27:28:b4:74:2b:41:09:c9:
0b:43:6e:ca:55:92:55:64:24:2a:35:4f:09:ab:9c:
0f:49:98:11:cb:51:3d:6d:6d:b5:02:70:45:93:37:
d5:3e:4f:4d:9d:c8:a8:11:76:a1:1f:68:a4:4f:2c:
e9:66:5b:00:b3:5a:a3:83:9f:64:cb:5c:cf:1f:24:
22:e2:1c:b1:be:97:f5:57:8e:aa:63:1f:04:3f:81:
20:08:0a:81:64:70:38:7d:7b:f4:a4:4f:90:fe:cd:
03:c8:b8:98:dc:78:8a:26:ca:70:38:02:5a:c8:ba:
21:8a:7b:7d:15:89:da:2b:24:ac:bd:4e:47:57:eb:
ff:74:08:be:65:b1:c1:91:a4:90:ea:0e:13:69:73:
4c:2e:14:12:b3:22:03:36:65:39:df:1c:4e:30:cd:
a5:cf:15:26:4c:51:83:5e:d6:ba:53:b1:4f:6a:24:
ff:cd:0c:92:b5:08:13:62:c2:5b:8d:97:6a:39:c9:
dc:d6:e6:15:22:68:e2:f6:6a:c4:70:98:6a:ae:a1:
a0:f4:e7:75:13:df:15:c9:14:ec:bb:d7:2e:d3:f5:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:D9:A5:EE:DF:75:8F:11:6E:EC:9F:F3:4A:EE:0B:9E:51:CA:2E
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7e:a9:b5:0e:ad:2c:4b:40:7a:97:65:dd:ef:66:ae:a1:3e:
f9:4d:aa:bf:45:da:fc:87:1f:0e:b5:90:77:19:83:0c:af:fb:
25:7d:d6:ad:f0:3f:4b:2d:76:73:1c:ca:88:a5:75:31:a6:ad:
77:7c:f4:71:44:10:11:da:f8:54:d1:2a:8b:a3:79:ea:ba:1c:
56:1c:32:1f:06:ac:0b:aa:c4:ca:c3:12:72:c2:43:7a:47:4f:
06:9f:a9:70:87:d3:0f:7f:c3:ff:50:3a:f0:a8:30:48:54:24:
b3:29:18:62:ce:7e:f9:5a:d4:4d:22:73:ec:e4:0d:6c:25:29:
76:40:68:e0:16:b6:55:c1:36:11:f8:ef:c2:2c:1a:df:5f:7f:
fc:54:2b:9f:9f:88:b9:64:b7:03:bd:3a:a2:6f:65:5a:c2:66:
71:5d:17:19:6d:e5:a3:9a:12:62:e8:23:e2:c7:a4:c5:ed:67:
33:79:fd:e3:e3:bf:d1:ce:30:69:bf:a4:d0:5b:24:48:84:d3:
09:07:54:e7:ae:13:e7:60:56:ad:bc:80:cf:52:b1:7e:09:7d:
0e:a6:3c:14:39:67:29:3e:b1:2d:55:7a:3b:db:95:a9:e9:74:
d6:2c:f5:9b:48:a8:9f:9f:bc:71:3a:0f:ea:9c:22:dc:2d:f0:
9f:92:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:08 2025 by rpki-client