Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: ubp1cfVZ/wnzJq8y6b/jKJjCm1LGvW4BGUt+siqkvd0=
Subject key identifier: DD:8F:B8:01:87:71:B6:2D:45:4A:87:BC:E4:F4:F3:BD:53:97:7B:F1
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 019A096EA8C348BE775B22CD0F2EC0EDA98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 04A9
Signing time: Wed 22 Oct 2025 01:00:38 +0000
Manifest this update: Wed 22 Oct 2025 01:00:38 +0000
Manifest next update: Thu 23 Oct 2025 01:00:38 +0000
Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: z1GipEiXOjagYHfokMxYxwo6+YIKNefkOh0fvHDlpdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:a8:c3:48:be:77:5b:22:cd:0f:2e:c0:ed:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Oct 22 01:00:38 2025 GMT
Not After : Oct 23 01:00:38 2025 GMT
Subject: CN=dd8fb8018771b62d454a87bce4f4f3bd53977bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:8c:1c:05:22:7e:63:4d:0a:ae:47:29:8d:
f7:06:90:de:ff:08:07:15:1d:07:54:5d:f7:1d:bb:
0b:70:d8:17:13:19:04:ee:e4:45:e2:a2:fc:2e:99:
6c:22:ee:e6:74:bd:37:b5:a0:ad:23:25:41:37:b0:
1d:f3:f6:30:2b:d0:63:d2:05:e8:a4:a9:46:ba:c1:
1a:78:af:e5:0c:2d:59:8c:3c:9f:6e:50:8f:13:fe:
37:4e:8e:36:17:b9:59:bd:2a:84:f2:81:20:d1:c7:
00:bc:b9:09:be:b7:46:d6:78:75:24:91:da:0d:c8:
d1:2a:95:85:6a:68:9f:e9:2b:59:24:f9:28:44:2d:
7f:07:58:c6:a2:86:23:73:8b:f8:c9:5f:e5:14:51:
59:28:e5:14:ab:ab:44:b0:33:15:b8:bd:df:8a:34:
f6:ba:51:6b:80:f6:d5:7c:a6:2b:8a:d1:4d:42:29:
9f:73:0c:7c:f6:89:7a:68:ab:97:cb:10:9c:d6:30:
16:d5:7a:e9:cb:95:42:e5:4d:ba:6c:c1:eb:5c:c4:
a7:76:ab:4b:6e:18:05:27:cd:e5:90:94:c3:f3:cc:
0c:8d:8d:01:c1:f0:5f:d2:c2:e9:2e:01:4f:03:e2:
ba:7f:ce:e7:d3:d2:46:77:5b:47:b3:b6:05:5c:d5:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:B8:01:87:71:B6:2D:45:4A:87:BC:E4:F4:F3:BD:53:97:7B:F1
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:13:64:24:66:a0:78:1a:7f:45:38:95:48:d7:54:f7:2e:
f7:2b:56:9d:32:5a:29:00:2b:16:55:77:a5:71:bb:fd:80:98:
35:98:f2:61:e8:01:3a:74:e9:3e:c8:dc:74:32:b1:e8:1f:04:
0f:d2:b5:96:c3:82:ea:c2:fd:c6:c3:33:d5:9b:c2:d7:94:9d:
c0:66:65:02:c8:d4:d5:9c:4e:9d:a1:55:8b:54:66:e4:97:8b:
f5:3e:c5:2c:6e:89:0f:fa:9f:90:0c:9d:d2:a5:1c:de:15:6b:
03:f7:42:cf:20:e3:12:b3:44:8a:88:79:6b:c2:a1:a9:b8:a8:
16:43:fe:80:a5:a5:85:7b:58:2b:54:50:4c:8e:f0:07:f3:6c:
d1:7f:3f:da:6b:4d:bd:e1:48:6b:22:ac:82:63:8b:a5:4a:e2:
73:73:32:74:45:8b:23:38:ee:d7:e7:af:a6:01:d6:71:b6:06:
32:55:23:b6:be:28:01:8e:50:af:75:17:4e:40:dd:3a:64:96:
23:1f:19:66:03:5e:89:98:04:c5:74:d6:c5:9a:67:2c:f8:16:
e0:8f:53:22:9b:74:45:ac:55:16:f2:69:fe:2d:46:f8:e9:c4:
09:7d:34:b3:ef:fe:5f:66:d8:bb:b9:12:b0:dc:5e:39:40:90:
0f:ad:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 06:16:04 2025 by rpki-client