
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: O59Nm+Srtp9J/Xg3uXeBoJ194qDdaT6Vuru/pSovQ3o=
Subject key identifier: DD:DC:03:6B:15:6A:DC:0A:08:28:F0:AE:B7:EE:E6:DC:27:BA:D8:0F
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019A0222FFC12BA0A2FF10573E54398F6A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 082C
Signing time: Mon 20 Oct 2025 15:00:39 +0000
Manifest this update: Mon 20 Oct 2025 15:00:39 +0000
Manifest next update: Tue 21 Oct 2025 15:00:39 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: pvZh5KT+HgFZFTE4Nu5Dvd82ajIbwzB932XWZXPRAJI=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:ff:c1:2b:a0:a2:ff:10:57:3e:54:39:8f:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Oct 20 15:00:39 2025 GMT
Not After : Oct 21 15:00:39 2025 GMT
Subject: CN=dddc036b156adc0a0828f0aeb7eee6dc27bad80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:da:36:54:cf:dc:12:98:da:e2:d5:cf:b1:
7f:b1:36:d6:e0:58:c8:c7:b0:99:8e:a2:90:86:cb:
a2:55:cf:d0:63:78:64:8c:93:f3:59:74:32:92:e0:
95:62:c0:99:53:0c:97:07:20:d2:5f:70:39:6b:3b:
4f:3a:b8:9a:09:f9:88:e1:27:09:16:43:04:de:4c:
70:d8:2b:e4:7e:8b:c3:e8:ac:96:d8:ef:78:00:c9:
14:db:ef:21:b2:cd:c0:62:1b:ce:c2:0b:69:3a:8e:
a2:31:5f:9a:d5:fe:b7:2c:89:21:f0:7a:d4:4d:13:
58:7c:d8:69:ba:d7:04:58:9d:ee:42:2a:e6:27:7c:
c9:58:12:ec:bb:bc:f0:54:50:03:d2:63:6e:8e:dd:
95:4e:c9:c3:01:2f:a4:08:85:8f:23:76:29:76:c5:
19:51:89:d8:5c:ba:aa:27:58:22:46:99:f5:e2:ff:
16:18:91:0a:c2:15:35:7b:8c:39:43:56:d4:93:dc:
0a:60:05:35:d2:e0:83:08:76:9e:49:8d:8e:24:4d:
64:a3:eb:d1:22:0e:22:99:9a:54:17:49:1a:15:2d:
30:56:b1:0f:a4:0f:9c:b5:0b:5a:c6:6e:4f:cf:fa:
de:df:ae:e4:f1:9d:cf:10:9d:17:a8:c1:03:78:bc:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:03:6B:15:6A:DC:0A:08:28:F0:AE:B7:EE:E6:DC:27:BA:D8:0F
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:a3:1f:0f:37:e9:72:c7:0d:90:c3:be:63:aa:76:f3:16:
ae:a9:ae:e8:c6:67:ff:e0:5e:f6:e5:95:9c:64:36:d1:59:3d:
5b:6e:19:5f:3a:e0:81:0c:d4:e1:a0:99:e2:2c:ac:e4:c4:68:
f1:1c:ca:cc:f6:97:65:f2:e2:d8:0e:4d:37:70:c4:91:19:0e:
80:24:c1:e5:4b:ec:04:1e:09:33:cc:69:75:60:42:a9:59:04:
42:e8:74:3c:29:e1:15:b0:b7:dc:dd:35:63:52:5d:5b:eb:21:
84:c7:ae:d1:45:6b:65:ae:0b:4a:03:4d:da:3c:95:46:c9:a6:
03:3d:55:cc:87:4b:09:93:fb:b8:e0:71:d9:6b:3a:da:4e:e4:
68:09:11:e2:26:d0:0d:e3:41:35:6f:04:b7:ea:5f:89:40:12:
b8:3a:cd:56:71:12:89:ca:94:d6:14:fb:8e:82:68:33:9e:e6:
b2:f1:c9:fe:62:1a:65:be:25:6f:9b:37:75:bf:4a:79:17:da:
c9:d4:95:c8:35:6c:83:f3:1a:03:6e:94:c2:9f:b2:cd:a5:2c:
66:30:37:74:62:b2:0b:28:9e:61:83:49:0e:b1:14:48:e9:59:
d1:3f:b7:ae:d6:3a:4b:db:68:a8:74:0b:90:d1:dd:4b:d3:a6:
e2:ce:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:37 2025 by rpki-client