Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File: AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier: l6aEq21hpxx61L0l8w/GxwLarlvnPzgfWsVnSHKZxEs=
Subject key identifier: A5:83:D9:82:7E:CD:9B:18:35:26:FD:CB:07:71:47:63:D5:94:E8:44
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial: 0199FCFD8C74DCB877C976EDD254B2AD0BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: XJ3dkXWtbi02soDPOkgiiABhhVJxit2h5gsTdhBDLQE=)
2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8c:74:dc:b8:77:c9:76:ed:d2:54:b2:ad:0b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=a583d9827ecd9b183526fdcb07714763d594e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:9b:aa:91:a7:00:0d:db:7a:d4:41:b7:cf:
bf:e2:43:27:0d:ed:db:6d:de:22:22:f0:e4:7d:76:
31:15:11:d0:7b:8f:d0:a5:0b:08:2b:89:35:bc:2a:
b5:ac:87:53:9f:4a:2d:d0:02:6d:84:48:0a:46:4b:
1b:63:75:49:89:bd:28:d5:ca:66:a3:b4:72:29:c9:
79:f4:0b:13:6d:a0:9c:15:42:fd:de:97:82:42:c2:
d8:fe:a7:3f:19:ab:30:46:96:b1:3d:ed:68:8f:b3:
cd:f2:63:cc:27:a2:70:92:10:27:58:83:bd:40:9b:
10:26:16:ef:29:b8:3b:65:32:1d:ea:c3:8e:82:63:
73:ea:af:92:36:93:b2:41:6f:2f:96:5f:d6:30:e0:
a4:52:14:a9:cd:18:31:ea:fd:a0:33:07:7f:80:47:
18:d1:46:13:c5:be:54:14:f3:41:7b:42:6c:7d:23:
9a:0f:89:9c:64:72:43:d2:16:2e:5f:ef:c8:e9:a1:
42:d5:3d:19:cb:29:81:04:03:a6:82:60:6e:05:f2:
32:3b:41:12:3c:d7:91:83:34:8d:58:f8:f0:ec:27:
77:f8:57:90:93:c8:0c:4b:e6:84:37:31:e7:d6:49:
0e:20:e2:8c:2a:8a:19:49:cd:75:f3:4c:29:fc:18:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:83:D9:82:7E:CD:9B:18:35:26:FD:CB:07:71:47:63:D5:94:E8:44
X509v3 Authority Key Identifier:
keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:03:19:1c:9e:62:5e:96:4f:8d:7f:89:e4:14:af:6a:f7:80:
9d:88:40:fd:17:77:e2:6a:b2:21:ff:17:50:e7:7d:5b:ae:7e:
12:cf:b6:d3:fa:f8:b2:66:b8:6e:c0:2d:7b:cc:f1:b4:c0:54:
45:da:b1:dd:2f:17:dd:cd:35:c7:e9:2c:ab:3c:51:28:50:ab:
71:64:d6:58:3d:d7:3a:21:e9:e5:8d:8a:59:f8:4c:d9:f6:93:
9d:a8:6c:9b:1c:36:bc:0b:5d:38:8f:d9:6f:fd:40:c6:38:ee:
e7:d2:1b:a1:08:4f:e4:b5:2e:9a:ba:4d:c1:47:dc:db:85:96:
a3:36:f5:a7:92:c0:4b:99:4e:2d:3b:99:55:c3:59:14:13:d2:
e3:49:55:36:6e:fc:31:2e:1b:cf:7c:88:47:56:a8:59:78:d6:
38:86:2b:3d:3d:f8:ce:2e:4b:7e:c6:a8:3a:d9:52:8b:69:e8:
2f:d9:88:63:ba:24:16:9a:4c:2c:4a:17:c7:ca:5f:c0:66:3e:
5e:2b:2b:9e:3f:01:0e:58:79:ae:2f:22:f4:53:f0:b1:e1:53:
6b:6d:8e:d3:52:a5:7d:b9:28:53:ad:82:7f:27:39:46:1a:b0:
6e:a3:bf:f4:bc:8d:ee:68:a3:c9:eb:31:ab:e8:b2:4f:9c:4a:
e3:99:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:42 2025 by rpki-client