
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: sI/6fttS9WZX3SsRNfjmfDTZqwWbEJkjB7CneeB0I+4=
Subject key identifier: 1F:91:F6:8C:14:56:1A:29:98:F2:B0:93:DA:91:EC:85:8B:8B:0D:8F
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 0199FC591733CA739418A152F619D97565AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0A46
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: 3Ti0VRFQXYG5OETL6H3xqGURx7g.roa (hash: wOZdgFUImj0qeOyuyvxGEJ5Ru8WQDiyIL/ijF462qBo=)
2: 7XozsJg8cESPgPLOlnZdDHuIIkA.roa (hash: NkHcRJjWveOKr/3lsnLotWjQFQWLhxVwR81b0kSFErE=)
3: 9K541zTwKzkXQVxivY6RtgnMtfc.roa (hash: 2IzU5yJObIbCyE/+ehHr5lv63aMpYtOrcZkh+bZRUaU=)
4: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: EIavKMHhuC67RvdFbxKK88qs2IPKZVsvdj0zDFCZsSU=)
5: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (hash: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=)
6: GqF55OK8p88k_RA7XjSbJsgeScE.roa (hash: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=)
7: K00tT5cZnNVXDF_Or6n_nc_0xRo.roa (hash: s/PaO+NasRBZLSycpt6mJjPENaMQFjfT/5hMIEO7t08=)
8: p0H-UvlbJAxkRpZM50LM0HMaTh4.roa (hash: eqbVXmLmRGS+69kMEz9SPkK3Rw5wmLRM/rZ2KSdZI3s=)
9: zOfa10bmz5mA01whN-vRAcpYyD0.roa (hash: ZjeDW/sMSDaC9yWADq68Sh8uF/rcU0PJexnNWW9mYAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:17:33:ca:73:94:18:a1:52:f6:19:d9:75:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=1f91f68c14561a2998f2b093da91ec858b8b0d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:03:21:98:a3:e5:14:a0:9a:c7:f5:46:4f:
15:d4:4a:41:89:de:3d:b1:68:61:8d:9f:6a:c2:13:
38:0f:2e:45:02:a2:cc:03:9b:97:ee:0c:a4:ad:b1:
69:66:ff:0d:c2:7c:46:75:6a:08:5a:27:94:28:cc:
56:00:70:b6:9f:f2:5b:a6:23:da:8b:48:59:cf:79:
1e:67:cb:00:36:5d:29:fc:80:85:b1:23:1c:e9:19:
2a:9c:51:aa:95:b1:ca:06:b8:13:b1:72:1b:c3:d0:
81:3d:4f:3c:27:47:ba:70:f2:1d:ef:0d:27:2d:8d:
9f:3b:52:04:23:0e:7c:7f:41:49:c6:28:13:11:a6:
91:62:25:9c:62:f5:ba:7f:54:ed:30:01:51:06:bb:
e2:0d:cc:6c:ed:b4:96:c1:61:ff:0f:f2:8c:7e:61:
d4:71:b5:c0:43:22:d7:ef:e1:01:28:e2:d5:d2:52:
d0:e6:c3:36:ff:22:cd:6a:39:eb:1c:fe:0a:4f:49:
90:c5:57:4d:a3:96:33:23:42:d0:7b:a0:de:b8:29:
f9:ad:ba:49:29:b3:d5:06:b8:58:6f:a8:6a:c9:b4:
cc:bb:f2:16:01:37:d8:45:9f:34:2f:e0:5c:69:b5:
5c:d0:47:cf:a4:de:8e:79:00:fe:ec:a8:d2:5c:ee:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:F6:8C:14:56:1A:29:98:F2:B0:93:DA:91:EC:85:8B:8B:0D:8F
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:40:da:c7:29:80:2d:4c:a5:d6:fa:3f:f4:33:73:0a:88:
f0:f1:e6:bb:1e:ad:42:c9:20:e7:50:4b:06:63:b2:1c:6c:9c:
5a:a1:ff:4e:a5:ec:e7:f9:75:1a:29:cd:a4:75:b4:8c:a3:f8:
d5:5e:2c:f0:6d:b4:77:b9:a6:24:ad:9f:71:63:01:8c:33:b5:
9e:47:8e:6b:b5:ed:b1:bf:93:9b:87:a8:48:5b:b1:3e:22:29:
88:44:eb:a1:c6:70:2d:06:b2:ba:ba:b4:d6:85:13:fa:ee:8e:
fa:ce:c2:9d:51:f9:64:f6:0f:ef:6a:3f:ad:34:14:68:d9:fe:
97:63:d1:af:ac:19:a8:b0:e5:61:19:0c:2f:0f:f8:70:ea:2a:
fb:96:00:87:a5:04:67:3b:4d:74:ea:29:72:cd:d4:56:be:53:
77:59:71:67:a8:fc:c1:23:d8:0a:89:64:1e:d8:aa:f4:27:7d:
36:a3:80:5e:ea:2b:3a:da:42:56:80:2a:db:a2:e6:dc:40:f6:
05:a3:e9:33:9f:53:37:27:eb:9f:7d:c1:9d:87:45:77:ce:1b:
ca:73:f3:7b:d9:bf:13:ca:f3:cf:51:6f:bc:17:5e:d0:e0:61:
de:b4:ed:a8:da:0b:da:e3:1f:36:ed:e4:49:3e:63:eb:2d:15:
69:c3:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:43 2025 by rpki-client