Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: Q5cOqp4ojAhRhVzwI07tRCGpiNtcFQT2RhtrnIp4w5Q=
Subject key identifier: CF:64:4B:70:4B:29:0F:B9:28:C7:FF:6F:B0:5B:69:1D:E8:97:D4:7B
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 0199FC5872249CBA71E288DBEA5A43533AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: W+aJXF6sFduXOp/TzGyggMoLdznbhtnOuNLqX91W5nw=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:24:9c:ba:71:e2:88:db:ea:5a:43:53:3a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=cf644b704b290fb928c7ff6fb05b691de897d47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:09:40:49:b5:bf:29:e4:e1:fa:de:53:0e:
5c:12:e9:5a:8e:58:66:9f:99:a5:71:60:ed:2a:1d:
be:1c:c2:77:4d:59:86:26:9c:8c:92:bf:1a:32:48:
9b:7e:f1:80:76:ce:37:23:7a:d3:16:e9:9e:c6:d9:
28:9a:9a:2e:62:11:d8:86:85:0f:7a:2f:75:8f:f7:
9e:59:46:20:7e:49:99:a4:8e:f2:e2:b7:64:be:25:
25:82:0e:a7:54:aa:aa:b6:fe:16:60:75:5d:e6:de:
6d:3d:cf:c0:58:4e:0f:13:a1:65:0e:ea:a6:05:dd:
c0:b0:84:52:34:15:41:71:79:2b:33:da:96:31:d3:
54:ca:f3:95:76:54:15:06:1a:24:1c:41:32:ef:04:
38:04:07:3e:44:a6:99:48:31:54:63:6b:28:81:b3:
48:d4:cd:c7:ee:6c:82:1d:36:42:d9:bc:93:da:3e:
01:db:3c:97:05:e3:a5:2c:ed:3a:22:fa:4b:5b:04:
cd:44:69:bf:34:d6:5c:7d:87:5a:ca:1d:91:8f:11:
6c:89:b5:a1:18:0d:eb:0a:74:43:be:48:06:92:31:
78:f8:d2:45:71:d1:ca:67:7d:6a:e2:66:e4:27:f4:
8b:03:59:34:a0:62:b0:38:03:06:47:ec:20:43:f2:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:4B:70:4B:29:0F:B9:28:C7:FF:6F:B0:5B:69:1D:E8:97:D4:7B
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:80:ee:e3:b2:85:8f:fb:f3:a5:79:16:47:8c:53:55:3e:
22:08:89:57:85:bf:6a:33:57:f2:75:e3:db:50:06:96:aa:e7:
2c:da:f5:80:38:bb:e6:09:36:fa:2d:ea:07:bc:97:bf:41:b5:
58:cb:85:71:2d:af:a0:1c:6c:e0:b8:60:68:0d:50:20:32:36:
03:5c:49:46:d1:34:55:00:c6:68:9b:6c:ab:5c:33:9c:9c:cc:
85:b0:3f:86:58:34:42:8b:c2:08:c7:0a:7e:c2:ba:84:22:5e:
af:33:43:51:b0:96:e6:96:7c:5a:fa:bf:69:81:36:6e:19:90:
89:61:68:2f:16:4d:9e:e6:d6:75:b3:d9:7c:69:13:c8:bf:bb:
53:a8:bf:5e:60:36:bb:34:d6:5a:8f:39:72:72:78:6c:b9:7d:
32:13:ad:5c:a0:9b:1f:76:e8:7d:57:3e:c4:d6:4d:29:7b:b9:
0d:c0:3c:bd:10:83:35:f8:e4:93:bb:fa:ea:4a:a1:39:68:d1:
ca:bf:ac:18:73:0e:a8:ab:9e:80:54:0b:ec:1e:48:b4:c2:5b:
32:3d:38:88:a5:0f:a5:87:46:dc:c0:79:55:76:04:58:93:e2:
45:10:b7:9d:27:b8:36:f1:5d:d8:e6:9a:1f:f7:51:6f:40:18:
b4:6f:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:27 2025 by rpki-client