Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: 5FBzNAMyy7CN300xn5BgWGYe0CkU2KProy6BYN9gviM=
Subject key identifier: 9A:87:5B:00:C6:67:1D:90:20:FB:03:B9:0F:BA:25:16:1F:9D:6D:22
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 0199FB46398F824A6B786FB630248B594B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0C1D
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: Bhc6ivo9uGQbz6rYaZtcvbAw3NBizFFWIALepfz3JN4=)
2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:39:8f:82:4a:6b:78:6f:b6:30:24:8b:59:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=9a875b00c6671d9020fb03b90fba25161f9d6d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:75:8e:4d:80:26:c9:33:23:6f:7d:bc:23:
10:3b:df:db:27:bd:b3:fc:2e:5c:37:aa:b6:5d:97:
6f:2a:0d:a3:04:2a:c0:52:c0:17:76:0b:4a:52:76:
64:76:95:a3:c8:95:af:c0:4e:e9:64:b9:09:77:f1:
a0:ac:8f:4e:a9:39:1a:b2:c2:5c:e9:54:57:e3:7d:
f7:88:25:f0:cc:a3:1a:a9:cf:39:8b:38:b8:15:ae:
14:b8:53:87:27:52:a1:49:ea:a0:cc:41:b7:d7:ac:
58:57:6a:f7:ea:b0:56:64:0b:5b:f3:95:2f:ec:fe:
76:8b:e5:5a:af:13:20:7a:e6:2b:ce:57:06:73:9c:
cc:4e:98:7b:f5:bf:3c:d5:87:25:ca:6f:24:32:6d:
0f:97:f6:dc:f2:7d:ef:a9:59:6c:e5:49:8f:4a:b9:
f8:d9:d1:31:fa:f5:55:91:13:77:e6:72:2b:11:09:
f4:5c:e1:5a:ca:92:00:35:ec:c3:84:8d:ce:98:50:
2d:93:19:76:29:d0:e0:db:f0:da:54:a9:31:7f:e4:
2d:fb:98:90:94:2c:58:aa:16:98:cb:75:34:ab:96:
06:d8:6c:ad:ec:b9:e5:aa:b3:b1:6d:db:f5:bb:8c:
4b:1d:c7:d0:6e:60:38:1b:06:4b:9e:23:69:ce:36:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:5B:00:C6:67:1D:90:20:FB:03:B9:0F:BA:25:16:1F:9D:6D:22
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:e0:35:0a:44:d1:f3:53:ab:1d:ed:22:34:b5:c2:d8:74:
4c:28:f1:a4:8f:fe:5a:c8:69:5a:c0:c2:4c:e1:11:e7:68:2c:
44:98:9f:ab:7b:51:a9:f0:29:cc:04:ea:64:e2:44:ad:aa:40:
b6:ef:02:f3:5f:2f:35:73:fa:d1:0b:3b:28:3b:f4:eb:c1:eb:
8a:02:80:16:a0:1e:53:ff:44:16:0d:17:65:1f:e0:bc:b4:44:
b0:cf:63:f0:a6:50:5d:12:bc:98:0d:56:ce:1d:fe:f8:14:92:
12:5b:4e:d3:4d:43:c4:94:4a:a2:9c:8c:40:66:26:72:ca:6d:
55:eb:a8:01:71:9f:94:71:1b:c1:f6:53:81:f5:fa:fe:57:3d:
5b:42:c9:45:8c:bb:3d:ed:a4:39:e4:d6:b8:40:2a:cb:e2:55:
cb:c7:98:b4:73:aa:49:f4:5c:26:3f:0c:36:ea:4f:e1:ff:c7:
ea:fc:b6:35:9d:34:3a:c5:49:ab:eb:55:0e:30:0b:cd:49:2a:
20:4c:af:4f:e0:af:fd:9e:cf:96:e1:da:d6:c9:51:aa:8c:01:
a0:4f:6c:2a:5e:4a:3b:ab:85:44:c9:ad:56:aa:1b:27:16:f5:
ec:43:92:d1:a8:db:d0:02:53:dd:bf:07:d9:5b:28:6f:e8:20:
b2:02:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:21 2025 by rpki-client