Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: IOvnYUpeOCfqecq063bz/+LnKiZuK2sgCtRU4kwbYa0=
Subject key identifier: 00:DC:48:B5:34:A2:73:C8:4E:21:5F:60:4A:5D:6B:F1:1D:57:42:F1
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 0199FC219F4DDF8A02F39EAE90F485E21CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 012B
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: CAXSWqNFk91mvrOv4oyyTCLsF6z+zx4Z6Wo+46Pf7oQ=)
2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9f:4d:df:8a:02:f3:9e:ae:90:f4:85:e2:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=00dc48b534a273c84e215f604a5d6bf11d5742f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:14:df:87:69:09:cc:06:39:09:d1:5b:82:
81:1a:27:f3:40:19:08:8f:5c:11:e4:ab:16:5a:ec:
8e:12:5c:b0:95:6a:14:a1:db:5d:7c:e2:81:37:11:
89:48:5b:92:d1:1e:b7:d5:3e:fa:69:8e:8b:40:e4:
8e:7e:5f:e0:e0:c3:36:52:06:85:19:eb:b6:25:72:
9f:a8:81:74:ae:9e:96:73:43:ea:1e:6b:5f:16:e0:
57:31:25:6e:1d:80:28:90:6f:d7:52:7e:ad:ba:09:
24:eb:fa:91:29:d7:8c:4e:a9:22:54:20:f4:7f:21:
a4:5e:a2:47:b6:89:77:85:c4:db:ad:ba:8f:19:5f:
b0:21:a8:f2:5b:15:2d:72:1a:df:83:6b:68:bd:9a:
a3:6f:fb:c9:11:b6:41:88:1c:58:16:3b:4b:5a:68:
95:10:58:37:42:03:0e:34:d0:56:0b:49:0e:f2:40:
f0:4e:fb:8a:24:aa:8e:ce:50:37:93:a3:e2:42:61:
a7:e9:0d:3a:77:cf:eb:ae:e5:ab:18:5b:07:58:20:
63:14:3d:79:da:0f:d1:cb:81:50:d3:9c:9d:fb:8d:
d5:19:0b:bd:b4:3e:8b:6f:f6:a0:62:97:15:e1:25:
71:fd:f4:c2:b1:f5:e6:eb:be:16:18:b1:bf:65:6a:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:48:B5:34:A2:73:C8:4E:21:5F:60:4A:5D:6B:F1:1D:57:42:F1
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fd:43:c1:ef:5e:9e:e2:43:34:f0:db:8d:5a:d0:27:23:2d:
2c:32:d9:dd:bf:52:61:fd:d8:f0:fc:34:b4:a3:f2:a5:99:4c:
98:b4:82:57:59:b3:1b:ac:8f:4b:d8:e9:d7:18:e3:48:8f:87:
0f:d6:9f:88:ed:be:bc:a1:b2:73:14:3e:96:20:6c:a2:04:d6:
65:c3:5b:7c:ab:af:75:fc:d6:72:fe:ca:c4:9d:d2:99:a5:11:
49:3d:4c:e7:8a:9a:c4:3a:0d:32:0f:df:5e:34:a6:fd:1d:8f:
6d:ab:b8:4d:c8:de:de:92:1b:ae:f6:57:13:77:b8:a4:04:9a:
36:5c:59:55:b5:fc:78:af:1e:83:d0:f5:d9:93:e7:77:ae:4c:
73:f1:4e:fd:a3:03:ea:37:21:ff:a6:ed:09:d3:4e:95:fa:52:
18:b0:d9:07:d1:61:67:2d:7d:cd:61:bf:03:4b:ef:fb:2b:03:
d6:c9:80:64:20:6f:27:8b:ab:79:bf:aa:bb:95:30:76:49:97:
d9:8c:39:45:73:8d:c0:30:94:0f:85:16:c5:ce:49:97:d3:3e:
a1:ce:e3:2d:7a:40:22:c5:f3:39:57:79:7a:a6:4c:7c:2a:fb:
a5:5e:ba:19:a7:50:a9:ad:b4:18:1b:4c:cc:d6:a6:af:49:1a:
22:04:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:46 2025 by rpki-client