Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File: AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier: ql1Z4oP5EXQt6Tioj4srwq7DoBDBeV+MK6MxaFktL+A=
Subject key identifier: 72:30:96:B3:8D:BC:1A:A0:2F:B1:7C:0E:62:16:E3:9A:4D:DA:5E:E9
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer: /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial: 0199FDDA63D41FD1C6E40D0A2C0DD908072E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number: 085E
Signing time: Sun 19 Oct 2025 19:02:52 +0000
Manifest this update: Sun 19 Oct 2025 19:02:52 +0000
Manifest next update: Mon 20 Oct 2025 19:02:52 +0000
Files and hashes: 1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: lquy5sh98s9K9QvZ9NpBho6lhaUBhln7q4w142lrkLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:63:d4:1f:d1:c6:e4:0d:0a:2c:0d:d9:08:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Validity
Not Before: Oct 19 19:02:52 2025 GMT
Not After : Oct 20 19:02:52 2025 GMT
Subject: CN=723096b38dbc1aa02fb17c0e6216e39a4dda5ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:10:90:40:0b:0a:91:39:9a:65:3f:e7:68:
86:45:a9:bf:8f:8a:3c:1f:fa:3b:20:d8:f3:f4:8d:
f9:67:1a:1e:32:bc:d4:ef:35:c5:34:02:22:bf:00:
b0:f1:9f:81:f6:7f:63:55:33:1a:7a:12:63:b6:04:
96:bc:3c:b5:41:84:9b:2d:3d:b0:38:7c:e2:3f:fa:
e7:a6:8f:ef:d8:26:82:75:0b:37:20:fc:e7:dd:09:
34:8d:fd:62:e8:a3:4d:28:9c:70:87:ae:22:e2:af:
65:c9:60:2b:c3:c3:e3:e5:8a:b1:ad:57:8c:06:bc:
e4:56:4f:53:f7:9f:2f:04:06:f2:4e:9f:b9:cf:e5:
a8:53:11:e8:48:70:37:b0:9f:de:54:8e:58:ea:12:
81:01:03:fa:88:49:fa:42:24:35:aa:27:dd:fe:6c:
6e:cf:62:1d:28:cf:c5:bf:13:eb:4e:a0:2b:03:0d:
b8:2b:57:1d:01:0e:7e:64:cb:ae:54:18:47:7b:f5:
6a:68:e8:d3:12:b6:f6:e6:70:bc:a6:3e:05:9a:95:
a2:fb:ca:3b:56:e7:a4:97:ed:43:88:5c:00:9d:e1:
64:37:5d:d9:64:d5:ab:f9:de:2e:56:d0:ed:4a:f9:
f3:54:81:0c:1e:d2:3c:35:8e:ff:15:f1:da:68:19:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:96:B3:8D:BC:1A:A0:2F:B1:7C:0E:62:16:E3:9A:4D:DA:5E:E9
X509v3 Authority Key Identifier:
keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:c7:2a:3c:6b:6f:6d:64:4b:03:ff:c7:01:be:60:5f:63:
ad:33:6e:a6:ff:d1:42:fa:db:36:6c:9e:1c:bd:2d:d6:48:15:
ea:71:68:06:ac:f4:8d:da:12:3a:07:cf:86:b4:ce:9e:c7:c9:
65:e6:ca:60:14:7c:91:23:90:04:46:2d:08:41:c6:fe:da:a6:
f4:4f:ff:39:0d:8b:0a:ba:9d:bc:ee:17:da:9b:f7:88:23:80:
61:6c:c6:02:67:74:d2:52:86:46:d4:7e:02:7e:06:23:f1:4e:
4f:79:24:c8:79:9e:b0:8b:d1:cb:12:5b:3c:bd:43:b4:aa:bd:
a3:88:da:e2:f4:84:ab:6e:5c:81:29:3a:a1:41:3c:46:7c:bc:
ed:79:7d:22:4c:f9:a0:b8:ff:da:22:11:c2:7b:96:91:22:09:
27:7d:7d:ac:0b:47:0c:49:44:32:b6:d2:35:5b:85:bf:46:c4:
39:f0:61:ce:60:66:78:d2:cc:23:f2:03:29:6d:22:34:2f:68:
f3:16:a1:51:d8:c8:9e:c5:c3:58:4c:5d:c4:a2:ba:9b:22:50:
21:6f:6f:c1:43:b5:48:a5:4b:82:b2:cf:e7:87:4a:8e:6a:ab:
2c:5c:c7:5f:68:32:3d:bd:ea:f9:58:86:b0:58:e5:4f:01:b4:
a0:a3:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:51 2025 by rpki-client