Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: +jxGFJrzkPnxruYW1F2yX8WHDepNGAaLc6dSmhnomCM=
Subject key identifier: 2D:DA:9B:9E:0A:B6:15:FE:E5:F7:74:2F:DA:84:1E:28:52:24:EB:21
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 0199FC58983EEDCA53D665DB05B06B9B1745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 083C
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: p9I7uIr7nw5A2MXya5cVuti3vHZ+isp3R0vV2yLmIm4=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:98:3e:ed:ca:53:d6:65:db:05:b0:6b:9b:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=2dda9b9e0ab615fee5f7742fda841e285224eb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:ee:04:11:0b:43:70:ce:8c:18:df:b2:3a:
9c:d1:c8:db:f6:e4:01:25:ad:ae:ed:e1:f0:83:8d:
44:d8:f6:f6:f3:64:45:50:b1:0f:f9:d4:c4:7e:35:
91:03:3e:6f:e5:41:7d:e1:24:25:16:ab:0b:bb:17:
40:c0:43:ff:90:25:a6:08:51:e9:29:5f:41:91:ae:
cc:fb:2d:13:d4:2f:f0:0d:70:51:bd:29:80:69:a4:
7b:b0:d6:ed:32:c1:2b:91:66:47:3e:fc:06:ab:4a:
bd:c6:a7:1d:bb:f4:f0:3b:a4:50:b7:9b:a0:42:67:
75:5f:e0:a6:11:df:29:73:8a:2b:70:18:98:f4:fb:
b7:28:f7:a5:85:5b:65:ab:20:d6:28:dc:86:1c:08:
12:d5:53:84:36:a4:21:b0:ef:5d:a4:46:c3:d7:00:
40:76:48:5b:a2:3e:f6:e3:05:da:90:82:79:6b:0d:
04:98:9a:fd:57:73:c3:35:10:94:0f:0f:b1:ed:9e:
5d:b4:f7:1f:c1:da:75:6d:a9:f9:7c:d4:e9:10:a7:
b7:28:d0:4a:f9:a7:75:1b:b7:79:05:c8:74:e9:7e:
dd:a6:aa:ac:98:25:2b:15:ba:58:ba:69:35:85:97:
60:b6:05:59:87:5e:8a:60:25:25:85:fb:62:a1:a1:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:9B:9E:0A:B6:15:FE:E5:F7:74:2F:DA:84:1E:28:52:24:EB:21
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:2a:1b:f2:16:d7:2f:41:e3:77:84:2f:f1:35:fd:ec:93:
24:f5:24:ff:4f:3a:85:dc:45:dd:ce:5b:06:3f:be:cd:97:fb:
ec:6c:15:73:32:69:53:1e:d7:57:25:5e:42:6d:a6:e5:66:a6:
ec:34:5b:18:b5:94:db:df:40:97:0d:6a:8b:00:3d:6e:4e:05:
ce:da:10:5b:1f:73:b1:2e:9a:63:2a:97:7e:8b:57:65:7f:46:
c0:48:63:30:b4:fd:31:32:19:e7:85:7d:1f:b4:52:f3:8a:fb:
9a:d9:75:d5:4e:4b:f7:42:61:1a:07:18:ae:75:cf:c1:05:58:
fa:c7:6d:40:2d:7a:95:ee:0e:b5:08:4e:e7:57:59:8e:43:c7:
07:c2:c9:2d:67:0e:8f:02:3c:f8:1b:4d:bb:5e:83:99:8e:5f:
b1:73:a4:19:6b:ad:38:03:6b:ac:c8:6f:06:81:2d:3e:b5:66:
23:6b:ab:2f:57:d5:82:b2:a4:03:3b:9f:9a:00:95:32:ff:08:
73:3b:58:0d:83:3c:b3:71:42:65:7d:69:79:f8:90:8c:37:ed:
2e:a4:d0:0f:70:92:55:33:09:91:57:e8:5b:81:e5:32:03:6e:
a3:e5:51:da:b7:7e:8e:c2:55:fc:76:d0:13:61:4f:06:15:f4:
d3:f1:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:14 2025 by rpki-client