Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: Hzo4YD67ciGtAJTVodpG2MlFASqpzpTflwSSHs6un8c=
Subject key identifier: 1E:E8:31:91:91:7D:06:94:EA:4E:72:23:F0:BE:89:CA:4A:D2:38:F1
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 0199FC8FA58BC04AD2A4ACA1EC6A6436DFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: 46CrIffnQ_Z2VULr2_zq5ycXi_o.roa (hash: woo5CJdBZeqj+spRxywdEIpQkRHqd5niNUiG63o0aik=)
2: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: GURm/0nEBWAK7IPsfA1e6a6oi90uFoT+sTtSePrN/AY=)
3: YFRHntH9AB6J_9p-ec1L6rWDsyc.roa (hash: QWDe2AgrTQml0pWJuJyjoi3nAbxgZlcrSf5Yvm3lXe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a5:8b:c0:4a:d2:a4:ac:a1:ec:6a:64:36:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=1ee83191917d0694ea4e7223f0be89ca4ad238f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:77:3e:6a:cf:4d:f5:4e:87:38:f0:31:ba:
3d:59:f9:e7:6b:e0:64:37:97:1e:46:e7:f6:1f:b5:
eb:8e:60:3e:d9:81:ef:af:ae:50:f1:76:26:f9:9f:
bb:50:6b:8e:dd:44:09:0e:76:16:05:07:67:bf:ca:
71:b5:e8:08:f7:73:91:7e:bc:ce:3c:59:84:5f:11:
86:20:76:2c:99:7c:f3:4e:76:72:b3:55:9f:33:d1:
e2:b0:d1:22:3e:38:72:39:9e:50:db:8d:2c:73:e1:
83:2f:81:a0:91:33:d0:ff:76:75:12:d8:73:a2:1f:
27:9f:45:d9:c4:bb:f1:42:bc:84:be:e1:e1:ef:34:
d9:7a:1a:72:8e:97:20:a2:56:3c:fa:44:35:50:a1:
ff:2f:ea:fe:5a:b4:24:27:3e:f6:e1:94:2d:fb:94:
09:59:50:54:a0:04:ba:44:13:8c:29:59:d3:d9:49:
aa:75:be:61:7d:b6:9b:cc:e2:c3:73:67:54:67:7b:
c7:80:3c:1f:69:94:8b:80:d6:4a:20:ee:95:e6:3e:
ff:58:b4:46:ce:2a:a6:61:62:2b:75:67:3f:1e:bf:
8d:23:24:f5:63:6c:b3:9c:0f:eb:df:83:c8:84:ef:
4d:51:49:a5:ed:fd:a6:3f:f8:93:59:7c:96:f9:e8:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E8:31:91:91:7D:06:94:EA:4E:72:23:F0:BE:89:CA:4A:D2:38:F1
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:81:c1:3e:bc:e1:09:09:1c:80:61:42:54:89:1f:3e:9e:e9:
41:53:ec:b2:ed:e4:50:89:7e:70:ff:f3:27:b6:25:39:2a:6a:
b5:63:a9:4b:52:da:a2:c1:00:b9:98:08:15:b1:04:69:99:8c:
ab:03:14:20:64:dd:87:39:3a:fe:25:6b:a3:e0:69:6c:66:3f:
fe:12:72:df:8a:6d:49:a6:dc:97:3d:6b:50:38:c9:4b:5c:6c:
bd:03:5d:61:9f:13:67:58:ac:d0:85:8e:fe:8b:37:28:43:17:
cb:62:3d:c6:91:b0:8c:8c:89:45:69:e1:f1:3a:c0:e3:09:95:
fb:ae:bc:85:de:cd:9f:c0:74:e7:14:02:f2:d4:47:12:1e:5a:
5c:1c:35:ce:2f:a0:16:6e:85:f5:42:c0:87:e1:08:1b:aa:70:
f5:18:64:bc:f4:2d:b7:5e:72:43:04:3b:9a:2b:d8:ef:25:67:
8f:e4:f2:e3:48:37:02:4c:66:94:7d:cb:1f:52:fd:c7:b6:13:
69:e8:89:23:ea:76:ed:59:f3:0b:8a:cf:7c:70:af:d6:b1:9e:
46:b2:6b:e8:8d:73:d3:32:9f:c6:93:37:f1:94:47:6c:e0:5b:
4a:9c:f6:62:4a:14:01:20:a4:d4:12:23:03:ae:71:1c:32:a9:
0f:33:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:12 2025 by rpki-client