Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: wtrl7Cx7VyOv1YMoIyR1BudNcZPbWOVkj+JXRbS4Af8=
Subject key identifier: 71:F6:9A:96:C8:0D:C4:FC:C6:03:A2:46:9E:EC:80:E1:33:68:07:51
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0199FB46271414C5784EC9C397E7796F6699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1355
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: 2fSn0agbKDh5WSwTy2QcU9LedpcrHvWqRjLxEjQxq30=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:27:14:14:c5:78:4e:c9:c3:97:e7:79:6f:66:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=71f69a96c80dc4fcc603a2469eec80e133680751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:2f:d1:b0:a5:a1:51:02:89:59:a6:d9:60:
c9:85:56:0c:27:cb:2e:2c:19:67:72:c9:41:d6:3a:
30:25:09:ab:99:5b:73:2b:4e:57:6a:bb:bc:11:88:
ce:b1:e8:8d:77:08:b2:81:9f:fe:6d:87:79:8b:69:
e9:2e:ac:c3:bb:6d:86:da:3a:3d:42:cc:6d:98:be:
94:55:87:ed:60:09:bd:50:06:00:3e:ba:ca:ef:8a:
5d:96:ec:43:ef:bc:8c:f5:6d:65:3c:12:32:65:b7:
ad:d0:70:29:47:40:5f:d4:60:83:e0:34:56:88:ae:
e4:69:cd:f2:1f:35:ec:7e:1f:d1:85:b7:a9:6c:cb:
5f:a2:31:b1:0b:15:4b:e4:a3:84:98:76:24:14:f8:
45:2c:3b:52:32:4e:6e:2f:67:ea:72:3b:a6:1f:3b:
29:d4:3e:fd:00:4e:0a:79:0d:9e:b3:01:87:d8:6c:
c9:dc:d0:29:d0:6c:5a:26:1f:90:d5:10:25:1b:59:
13:59:75:ca:36:56:c7:97:13:f2:8c:45:3e:0b:b9:
93:6b:b9:08:6c:84:ce:43:cd:2c:20:a2:d7:91:6a:
64:d4:fd:09:c9:df:40:fc:49:34:5d:3d:d4:9f:25:
72:5d:e3:7b:5b:da:cd:28:70:49:83:81:18:19:93:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:9A:96:C8:0D:C4:FC:C6:03:A2:46:9E:EC:80:E1:33:68:07:51
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:cb:f2:9d:3a:ff:8c:30:8a:ab:90:96:3e:2c:21:cb:70:
5a:df:46:23:b4:b4:d6:fb:dc:90:ba:de:b3:de:d4:a4:a9:1e:
ff:53:5c:70:54:df:64:c8:f2:a2:d7:09:53:90:d6:0a:60:86:
04:7d:4b:48:67:b5:48:71:1f:e7:9e:d2:4f:b5:32:a8:35:0e:
12:98:84:5c:ff:12:f0:7a:81:1e:47:ad:e1:d1:0c:a4:a4:c3:
cf:50:58:8a:56:ee:24:01:42:13:f8:32:d2:b9:13:81:06:30:
17:66:a4:f5:15:49:89:91:6f:a3:f6:6a:e3:cd:b7:6e:1f:d8:
41:57:33:55:66:4e:75:47:63:a5:92:9f:c2:4c:88:21:07:fb:
09:a1:ce:81:5f:1b:76:7d:8b:45:ee:9d:63:8a:9c:96:a4:03:
6c:91:d4:67:92:77:91:c3:a3:70:45:f9:cd:76:70:6d:72:f4:
af:fc:07:39:12:b5:b2:7b:93:36:7f:c8:b5:5b:9b:8d:76:ad:
94:ea:fd:6b:e9:2e:05:c6:b7:88:90:e3:57:ea:e4:ba:75:00:
5c:9d:57:75:61:72:fb:10:31:b4:ca:42:8d:b9:5c:ae:bd:7f:
72:cf:18:95:7f:52:23:d6:6f:f7:78:67:10:9f:fe:3c:8d:95:
4e:18:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:11 2025 by rpki-client