Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
File: a0yzzTXvvITyqJovXSwWLD184Vs.mft (raw, json)
Hash identifier: pJiddGLUAEOa2XJ4GwetBEXdiJGaCX3biqGqrAVvBEM=
Subject key identifier: 64:4D:33:64:99:13:7F:72:CF:D8:5C:BB:A5:76:CF:40:C4:05:82:62
Authority key identifier: 6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
Certificate issuer: /CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Certificate serial: 019A71EEF8F9402D70967591573AD1027FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: WW1zYqOtAv6xpztxCe41pJBmBcI.roa (hash: ANkEAvSjUZh7Q55af7iPjLdQ2+UV7wXRW5HhuWBQ4lo=)
2: a0yzzTXvvITyqJovXSwWLD184Vs.crl (hash: 7A6b2LNan0zGu5BB9MQAXvbj7h7VF3t1MWrgKQMcg+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:f9:40:2d:70:96:75:91:57:3a:d1:02:7f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4cb3cd35efbc84f2a89a2f5d2c162c3d7ce15b
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=644d336499137f72cfd85cbba576cf40c4058262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:ec:e4:7b:86:78:7b:9a:d0:3f:45:e5:f3:
0c:71:95:e1:b1:d7:7f:0f:ef:f7:3b:53:f2:ec:4f:
62:36:4f:69:6d:71:d2:a5:fb:78:d0:49:7b:02:2b:
4d:e1:4e:ab:8e:46:a0:ec:b5:d9:e3:25:de:7a:c7:
42:77:17:18:86:56:df:e2:17:80:60:03:86:9a:65:
ca:6e:d0:38:96:66:52:4c:ed:fa:f5:5d:e4:12:05:
e5:7a:f1:0f:05:d5:53:d9:2c:0c:e8:37:54:ef:c7:
90:66:b2:04:79:bf:d7:f1:63:b1:c4:b7:ab:2a:7d:
f1:3d:d8:6c:64:84:88:cd:d3:5e:3f:70:b4:d0:0b:
74:73:54:fa:27:9e:ea:39:ca:3b:32:45:45:bd:03:
35:dc:8e:c4:e5:33:72:d7:2c:8c:c9:90:72:1b:39:
9b:51:58:1e:94:90:19:d3:3e:f9:8a:9c:0d:3d:2e:
5c:9b:84:a6:79:d9:19:95:e7:dd:cc:4c:01:6c:a5:
39:39:25:8e:ab:98:40:2a:f6:9e:14:a7:3e:6a:76:
f4:ac:54:c2:f7:cc:07:81:28:b6:68:86:4e:b9:cf:
b1:d7:15:12:de:58:39:90:9c:2f:0c:6c:87:5a:84:
47:91:0b:46:63:11:df:23:48:b9:c4:89:3e:d2:ec:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:33:64:99:13:7F:72:CF:D8:5C:BB:A5:76:CF:40:C4:05:82:62
X509v3 Authority Key Identifier:
keyid:6B:4C:B3:CD:35:EF:BC:84:F2:A8:9A:2F:5D:2C:16:2C:3D:7C:E1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0yzzTXvvITyqJovXSwWLD184Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c69493-5264-49a4-b4da-63ae74bb203b/1/a0yzzTXvvITyqJovXSwWLD184Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:33:98:4f:7d:0c:81:bc:19:ab:3c:68:d4:1b:b0:92:e9:
84:8f:8f:ae:ee:93:08:5b:b1:cc:69:c2:59:e1:f5:2e:35:5c:
00:56:2f:42:1f:8b:de:39:8a:6d:0b:01:35:51:a7:23:e6:bd:
61:24:8a:dc:9b:62:00:4b:b1:83:38:8c:6c:c8:46:a9:b4:8a:
a1:c5:85:05:5f:93:90:00:31:9a:49:c6:50:ae:90:b5:b3:72:
1a:6e:4b:1d:3e:15:9b:64:40:8a:8e:29:db:54:fe:98:48:c6:
94:67:66:dd:e1:a3:3a:96:24:87:b6:05:ab:1d:61:fa:e4:92:
72:0c:2f:21:21:a7:76:bf:3c:a8:ae:36:75:04:13:03:18:14:
b0:ad:7e:94:55:30:a7:0c:9b:4d:35:bb:71:e2:76:b7:53:6d:
1c:d6:dc:5d:ad:5d:e7:58:73:4a:7e:83:2b:34:26:e5:91:52:
16:90:d7:92:c1:88:d1:bf:e7:d9:06:11:b8:85:f8:b3:21:dd:
17:95:b9:28:9a:09:ef:96:4a:ad:ff:7d:60:3c:d6:62:eb:52:
8b:eb:d0:56:33:5e:6a:cf:9d:4c:d7:72:74:0b:de:48:0f:70:
ef:06:4a:54:14:99:2c:0f:1c:81:92:9b:b2:93:b4:76:9f:f8:
8b:c2:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:03 2025 by rpki-client