Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: 6aWb+9YiwgHsBAM4EE4Hhmuzm6BGz294QOLJImFcK60=
Subject key identifier: 69:BC:F2:5E:74:A9:0F:CB:3D:31:28:92:82:B5:46:6F:9B:B2:90:41
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 0199FD3465051C03C8F9627A317B1D47CEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: 3NN+xHHa2vHqkUG4CZn8AIpuNtpIf1wQGB1qCiFqQQo=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:05:1c:03:c8:f9:62:7a:31:7b:1d:47:ce:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=69bcf25e74a90fcb3d31289282b5466f9bb29041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:04:5b:ab:6d:26:2c:7d:57:af:ac:5f:4c:
4d:c2:27:2a:61:22:15:ff:8a:be:bb:05:50:c3:f3:
63:87:02:97:a2:9d:b9:4f:c2:ec:c9:7c:9f:cc:e2:
5e:2f:db:0c:7f:7a:31:e5:1e:28:7a:9d:98:6f:28:
d5:69:17:f2:8a:35:6e:06:c4:c5:c8:50:8c:1b:2d:
f0:0c:4f:67:52:5b:8a:ed:ab:3e:e6:75:01:14:bf:
e5:06:32:48:5b:d2:c9:7a:e7:ec:d8:f9:c0:0a:93:
86:5f:89:c8:63:4c:04:dc:86:3d:92:97:07:c4:c1:
de:0b:bc:cd:8a:75:91:a8:c8:7f:f5:90:8e:b6:d5:
46:da:27:1f:c8:1b:25:f7:c3:31:1d:57:15:c5:68:
1a:bb:4a:ee:77:52:60:d5:5d:55:f9:7c:c4:e2:3f:
31:3c:09:33:29:d8:63:e0:ba:03:d2:31:5e:66:49:
68:77:0f:31:a2:82:bc:23:8b:7f:34:5d:37:a6:6f:
7c:ca:df:35:6f:61:a4:e3:90:37:aa:3e:c0:d4:53:
29:76:6c:da:7d:29:26:0f:98:81:fc:ea:d8:63:a3:
2b:c0:14:93:dc:1c:73:6e:26:85:37:fd:ef:83:42:
5b:9f:83:6a:cb:2c:f1:9f:0d:be:db:e2:65:8d:80:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:F2:5E:74:A9:0F:CB:3D:31:28:92:82:B5:46:6F:9B:B2:90:41
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:18:78:41:36:f5:4e:a6:b5:27:ff:ab:de:6f:7d:b7:dc:6d:
91:9d:83:f2:22:69:02:02:53:07:49:32:2b:7c:74:cb:0a:9a:
a5:31:ed:e7:3b:89:d0:e0:db:de:d1:26:7d:b3:a2:09:78:41:
45:44:13:ce:fb:02:d8:90:d7:5b:ba:ee:63:4a:33:4c:b2:5b:
68:4c:2a:64:aa:cd:23:2b:0f:57:b7:e9:af:71:66:76:e7:61:
e7:da:44:09:a9:df:d5:4e:8d:02:3e:6a:17:af:83:ba:0f:86:
fd:72:7d:16:28:49:45:e1:4a:83:78:cf:94:86:51:a9:47:8d:
1d:77:49:64:5b:7d:de:6c:82:01:9b:8c:83:11:bd:72:09:c3:
b2:6d:c2:7c:c5:42:8f:9b:f2:dc:d3:23:79:54:5f:19:de:8e:
6f:70:36:43:c5:60:73:e2:84:0a:3a:78:1c:d1:54:a0:a9:21:
cf:eb:c7:65:4d:92:e4:53:f3:d8:a7:a2:68:fc:1c:65:ce:24:
5b:47:c5:77:c4:e5:ca:f6:8c:c7:3b:9e:34:e3:68:14:af:99:
03:09:9b:20:0e:ca:46:37:2e:e0:fb:4d:e1:c6:37:74:4e:17:
fe:38:58:35:b1:65:65:b0:79:9f:6f:90:2a:b1:28:b5:5f:bc:
c1:4c:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:40 2025 by rpki-client