Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: 3lSgzyDRPZtQs4t1N81p1FQ3PFfuBNRwxH202X39eXw=
Subject key identifier: 1C:8B:F1:83:DE:FD:E3:DF:FB:92:F6:36:B3:DD:6C:51:ED:34:A3:3B
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 0199FD348265C67F60CC5FAB89441115EDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 07B9
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: pqA9y+lgKX6EzBdvxZy4vvistTxVJ4qmqdXC+KEicjQ=)
2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:82:65:c6:7f:60:cc:5f:ab:89:44:11:15:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=1c8bf183defde3dffb92f636b3dd6c51ed34a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:3b:18:f5:6f:80:14:f0:a2:1c:cf:7c:95:
29:1b:07:4a:3f:44:ab:b3:a5:4a:c1:5e:ac:5f:14:
d1:9e:1a:8f:70:e8:cf:5d:c2:1a:f3:2a:40:ac:70:
a7:1b:7a:81:56:42:6a:c0:0a:20:f2:2b:24:20:e5:
90:50:c8:09:e6:a7:e9:d9:bf:39:f6:03:c9:ab:2e:
ae:9f:88:98:e6:27:6d:c7:5c:9c:5d:65:2f:8a:8e:
6c:03:b7:83:50:5c:92:7b:ff:c5:2d:a6:9d:2e:be:
80:6e:2a:e2:5a:34:9e:cc:50:5a:79:56:82:dc:6d:
06:c3:63:92:84:d3:a4:5b:bb:e0:74:02:c9:96:63:
c0:3d:42:94:d8:a7:4d:34:f8:10:ac:7c:14:c8:79:
07:4a:93:ae:fb:34:e3:db:01:07:b7:ab:b8:aa:aa:
a7:0d:32:30:c5:b4:3f:ae:e7:19:56:b7:74:d0:2b:
ff:b1:86:9b:a0:c5:ea:3a:13:ff:67:0e:ea:fe:38:
01:cc:8e:02:4c:4d:2e:31:e4:eb:2e:5f:79:76:00:
43:82:98:cb:52:22:96:dc:f4:ba:8c:75:88:c7:b2:
fb:0e:a2:42:76:88:aa:49:81:1c:7d:9e:72:23:d3:
a4:37:07:90:97:d4:bd:48:6c:dc:0c:75:46:78:8f:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:F1:83:DE:FD:E3:DF:FB:92:F6:36:B3:DD:6C:51:ED:34:A3:3B
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:37:da:ef:9a:94:cc:36:52:0e:44:7c:c5:3e:18:31:4a:9a:
65:e6:dd:d9:0a:a1:63:3b:ac:30:91:b8:e0:c9:23:8e:36:4d:
ae:ae:90:09:ea:8a:10:cb:db:e8:06:c4:17:3d:94:4e:02:15:
8f:fd:11:06:99:ff:c7:61:64:55:f9:13:af:89:fc:ef:b5:39:
87:ff:f3:3d:f5:c4:6b:e0:b0:d6:ff:8f:19:4f:77:90:51:57:
d7:6b:cb:8e:76:da:d4:89:54:4b:23:1e:39:0d:d7:41:f2:e2:
5d:cb:ef:e8:b7:a7:11:49:0f:c6:a7:1a:d3:0a:11:cd:07:d7:
d1:79:5a:ae:c6:40:cf:2a:85:81:b8:84:c7:a5:03:6d:81:d5:
40:7a:f0:b1:9f:71:61:08:a3:5b:4f:fb:f5:e3:4c:5c:da:b1:
ee:84:bb:f8:4e:69:fb:ee:56:12:16:a4:59:97:32:54:ee:a6:
68:b4:d5:4c:5a:97:dc:8c:64:9b:01:42:4e:1e:37:2f:7f:b9:
10:68:d0:91:12:82:79:84:bc:b8:df:b6:7f:01:f9:1d:0b:48:
0a:d7:e4:0b:e0:e3:91:d8:7d:8f:ed:2a:c8:4b:44:a3:e2:34:
dc:5b:4f:c4:88:89:cd:c8:f5:8b:dc:7b:5f:ec:11:16:95:e1:
8d:fc:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:49 2025 by rpki-client