Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: iLSbVbnddKZVQjVwuj3VuHxgiV/oLvPZX5cvTE0osHU=
Subject key identifier: 09:88:42:AE:8B:71:3B:B5:AC:2D:AA:CD:9C:0D:5B:E8:29:03:19:7E
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 0199FCC6202419A6F92D5F1A36042867988A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 07DB
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: 4qo1fzVoq2dWS4lEf+DdkonSVKhotFg0Scla/sPFGEg=)
2: XbRIFdQP_RXO6IV-cEyYaj6kxNs.roa (hash: 3o+QHeiT4KUONTiQxPqZMl4amlORzK8bXLG3POsUfAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:20:24:19:a6:f9:2d:5f:1a:36:04:28:67:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=098842ae8b713bb5ac2daacd9c0d5be82903197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:26:19:b2:35:44:6b:61:ff:04:4d:59:42:
e1:ff:2a:11:a1:50:05:28:96:d0:2b:2a:ed:b5:05:
86:b8:43:6a:7c:1f:b4:a5:b8:30:70:97:25:90:b8:
3f:4d:ed:e4:54:7e:38:47:ff:65:c3:74:c8:6a:5e:
0e:82:76:fb:41:4d:6a:ef:f0:ad:90:c2:26:7f:ff:
e2:09:10:13:25:5f:bc:cd:4c:c4:5f:0b:7c:bc:d2:
8d:54:79:a3:5f:4b:6a:94:23:ff:4f:ff:61:48:d4:
1c:1f:94:63:9e:ca:41:82:f1:50:61:3a:3f:93:36:
ed:98:5f:da:0f:33:01:84:f2:19:6f:df:be:da:ed:
e3:dc:81:fb:1a:6e:67:d5:6d:1d:72:62:00:29:e8:
45:b0:b6:28:10:a1:99:5a:d7:f1:87:a8:4a:0d:45:
0b:53:e1:92:91:a6:c2:52:d8:7e:b2:8a:55:eb:bb:
6c:cb:b3:b8:b7:dc:81:68:8a:12:41:ba:0f:a8:a4:
64:3e:18:13:64:bd:94:51:f7:34:6e:50:52:e6:97:
1f:a2:17:0e:4c:d1:19:d3:18:e7:63:8e:7c:c2:c0:
89:e5:5e:a2:18:bc:de:44:cb:b5:46:31:2e:cb:c4:
52:fa:27:a1:6b:23:01:d3:ef:ec:b6:85:35:20:3d:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:42:AE:8B:71:3B:B5:AC:2D:AA:CD:9C:0D:5B:E8:29:03:19:7E
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:53:aa:a9:d5:eb:e4:d6:d9:35:07:5c:ea:b7:1e:3c:f7:ec:
07:f6:8f:a6:ab:0c:b9:74:46:86:7c:4e:e4:5f:47:ad:e8:59:
e7:e7:97:5f:e5:28:b1:04:e5:82:cd:65:51:9c:2c:d6:4a:92:
22:7c:69:82:c6:64:01:fe:6f:01:2f:4d:53:2e:2d:ea:39:ab:
7c:ae:d1:66:3c:56:20:6a:93:3a:a9:64:2c:9a:b6:da:2a:b9:
30:68:b4:c1:aa:a7:b4:a4:5c:6b:87:6e:ab:bc:f1:36:d4:bd:
ce:2d:40:b3:7c:f6:9b:d1:f3:a6:97:46:6e:05:05:a2:d6:3a:
e9:2b:6a:44:a4:77:64:d8:0e:21:7e:ef:3e:1c:7d:3b:9e:ef:
b0:97:bf:c5:6e:84:16:b4:91:33:12:17:4e:53:1c:86:8a:35:
19:46:e6:ec:aa:a4:79:50:11:38:08:b1:b6:0e:cd:93:5a:e6:
f1:4a:f8:3a:6e:44:01:ba:8c:ad:73:a1:b1:be:57:8c:88:4d:
17:ff:d3:16:44:70:b4:2f:2d:db:4c:18:18:67:9b:be:59:62:
b2:b4:fa:6c:6a:0b:7e:22:6f:bd:7a:a2:4a:88:f4:cd:6c:c2:
15:b4:b6:62:e8:b3:9a:43:e0:21:65:59:2a:8c:2f:f3:8b:9a:
96:7f:41:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiAkGab5LV8aNgQoZ5iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj
OGE2N2YwHhcNMjUxMDE5MTQwMTA2WhcNMjUxMDIwMTQwMTA2WjAzMTEwLwYDVQQD
EygwOTg4NDJhZThiNzEzYmI1YWMyZGFhY2Q5YzBkNWJlODI5MDMxOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupMmGbI1RGth/wRNWULh/yoRoVAF
KJbQKyrttQWGuENqfB+0pbgwcJclkLg/Te3kVH44R/9lw3TIal4Ognb7QU1q7/Ct
kMImf//iCRATJV+8zUzEXwt8vNKNVHmjX0tqlCP/T/9hSNQcH5RjnspBgvFQYTo/
kzbtmF/aDzMBhPIZb9++2u3j3IH7Gm5n1W0dcmIAKehFsLYoEKGZWtfxh6hKDUUL
U+GSkabCUth+sopV67tsy7O4t9yBaIoSQboPqKRkPhgTZL2UUfc0blBS5pcfohcO
TNEZ0xjnY458wsCJ5V6iGLzeRMu1RjEuy8RS+iehayMB0+/stoU1ID0oDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmIQq6LcTu1rC2qzZwNW+gpAxl+MB8GA1UdIwQY
MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt
Y2IzODYzNThkMTUxLzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx
LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1OqqdXr
5NbZNQdc6rcePPfsB/aPpqsMuXRGhnxO5F9HrehZ5+eXX+UosQTlgs1lUZws1kqS
InxpgsZkAf5vAS9NUy4t6jmrfK7RZjxWIGqTOqlkLJq22iq5MGi0waqntKRca4du
q7zxNtS9zi1As3z2m9HzppdGbgUFotY66StqRKR3ZNgOIX7vPhx9O57vsJe/xW6E
FrSRMxIXTlMchoo1GUbm7KqkeVAROAixtg7Nk1rm8Ur4Om5EAbqMrXOhsb5XjIhN
F//TFkRwtC8t20wYGGebvllisrT6bGoLfiJvvXqiSoj0zWzCFbS2YuizmkPgIWVZ
Kowv84ualn9Bmw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:56 2025 by rpki-client