Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: FZr6M302Tjya9upLK/YeTqiUW0CqILasbi/+IZKHztM=
Subject key identifier: 40:DD:F8:84:06:DF:D9:09:D2:FD:F8:FD:D8:EB:B1:D8:FA:A0:0E:B2
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 09757873AF41C485E00B6C9E4927AAD7C11E73BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 054C
Signing time: Fri 24 Oct 2025 19:24:07 +0000
Manifest this update: Fri 24 Oct 2025 19:19:07 +0000
Manifest next update: Sat 25 Oct 2025 22:16:07 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: qPsR5uaYiAU0Fdw13IMsXniFh0wYMwkZwiij6Jp9yuI=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 22:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:75:78:73:af:41:c4:85:e0:0b:6c:9e:49:27:aa:d7:c1:1e:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Oct 24 19:19:07 2025 GMT
Not After : Oct 25 22:16:07 2025 GMT
Subject: CN=40DDF88406DFD909D2FDF8FDD8EBB1D8FAA00EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:71:8d:5b:a1:9d:a1:f8:5f:31:53:14:ca:
6a:94:45:fa:64:0d:0e:1c:2c:84:da:f1:41:0b:b0:
58:7c:ed:48:97:06:6b:8a:c4:0b:cf:fd:5f:a9:47:
1b:e9:87:9c:01:a0:02:ea:0a:28:f5:c5:01:82:51:
f7:9b:db:c0:ec:0f:9f:14:22:53:13:a2:15:90:9e:
1a:78:01:48:3e:5f:65:5e:0b:50:d1:fa:d3:66:e4:
ac:cd:f2:29:c3:5c:09:72:e7:14:0d:29:8f:73:81:
bd:54:87:c4:79:60:0d:11:f5:97:d8:2d:3f:6d:10:
b5:90:11:be:42:9b:25:b4:dd:c5:50:3c:0c:bd:f6:
50:59:99:8a:4d:96:5e:63:c5:39:d4:83:af:ac:07:
b3:a8:b7:4e:b7:6d:36:cd:d5:5e:72:67:3b:96:8e:
76:9f:8d:66:ea:0d:54:c0:8a:88:38:79:35:22:27:
31:e3:ee:cf:48:bd:ee:30:72:d8:6c:19:96:2f:63:
2f:e2:85:b0:c6:4c:c0:50:c1:0c:ba:62:ce:47:44:
09:da:8c:54:59:fb:f0:70:4c:27:5e:ab:37:6c:d0:
27:e2:63:4f:c9:87:34:b5:e1:92:15:20:d8:e2:64:
33:d2:6a:62:47:9c:05:59:c3:9f:9e:37:f8:19:8b:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:F8:84:06:DF:D9:09:D2:FD:F8:FD:D8:EB:B1:D8:FA:A0:0E:B2
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c4:81:2a:9e:90:c8:3e:42:0b:d1:0f:35:f4:2e:9b:02:83:
b8:a7:13:0c:5b:b1:c4:a5:23:8f:c1:fd:f6:e6:d3:1c:8f:ab:
d0:79:fa:da:a7:b2:e9:1c:ba:de:97:16:94:e6:b3:64:10:de:
03:73:5a:f9:d1:e7:4d:9a:41:f2:f0:30:5e:93:c7:7a:c0:3e:
7e:70:38:b5:f3:de:a6:eb:0f:c5:4e:a5:b0:05:8a:f2:68:ef:
40:11:80:58:ca:df:60:54:2d:f5:68:9a:03:be:f9:ab:e5:84:
e4:cb:cb:b6:fe:3e:37:12:4c:6f:a2:e2:70:b3:78:b0:7c:59:
98:77:76:1d:89:05:78:17:45:b5:c2:1d:25:39:d5:2e:e6:7f:
3d:aa:de:4f:8a:12:4d:1b:0e:89:5a:63:10:8b:70:e2:b8:74:
55:7e:1b:4b:a5:41:c1:0e:3f:88:ed:a1:cb:2e:58:ac:74:4f:
3f:b7:a6:b5:d9:f1:67:de:1a:03:62:3e:a9:cc:ab:a8:3c:db:
4c:3e:3e:3c:01:52:6f:4f:86:4b:6c:7b:f8:92:94:8f:e9:51:
6c:b7:66:83:6c:da:2d:9f:56:de:83:3f:b2:38:53:0a:a1:38:
27:8c:59:0a:ef:b3:ce:af:63:b8:a5:ea:22:60:3c:e9:12:62:
08:81:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:21:40 2025 by rpki-client