Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: stmXVfcI4oIZgcTapzgiFCeNJDB7WjmhEJnxjiPK9Ss=
Subject key identifier: 5A:38:67:B0:D1:C1:EE:6A:55:BB:50:FC:09:6A:24:68:9D:B3:98:AB
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0199FAA158AD50B3CA1BC7FEC3737DB4888E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 04:01:41 +0000
Manifest this update: Sun 19 Oct 2025 04:01:41 +0000
Manifest next update: Mon 20 Oct 2025 04:01:41 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: Eiy/4hUx/D9qePIcLEmQ9nm4/7Uqbe5lRwYM2Ed30uU=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:58:ad:50:b3:ca:1b:c7:fe:c3:73:7d:b4:88:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Oct 19 04:01:41 2025 GMT
Not After : Oct 20 04:01:41 2025 GMT
Subject: CN=5a3867b0d1c1ee6a55bb50fc096a24689db398ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:05:3b:b5:91:5c:c7:cc:ce:da:3b:8c:07:
ba:20:22:4d:61:d4:99:ca:8f:90:38:d1:56:41:20:
df:ce:cc:57:c5:ed:cf:6f:91:90:aa:b3:c4:4c:bb:
8c:4c:56:2d:aa:21:4b:e8:16:cd:bd:e4:2a:1e:e0:
6b:67:83:57:c3:7b:d7:71:cd:44:ea:1a:4b:e7:2c:
43:58:d1:7f:7b:31:ba:40:cb:fa:f4:57:c3:33:17:
4f:d9:9a:24:2f:8a:3f:b1:f1:ab:c1:9f:c3:ed:70:
7e:9c:ad:ce:a3:6e:80:2d:45:07:ed:7b:12:11:3a:
f0:07:05:b4:ba:ba:17:77:29:ce:57:07:cc:e9:58:
67:fa:cc:d4:49:6b:af:18:e5:70:5a:2d:dd:0f:56:
5a:e8:02:4d:c0:f0:37:28:71:a2:4d:81:1f:68:d2:
8d:b3:b9:87:4e:2e:10:a8:64:c9:e5:42:bb:46:91:
d4:a0:9c:2c:1d:1e:3a:71:ac:03:7e:1d:59:d1:1c:
49:2a:55:bb:05:88:07:2d:76:6d:e2:2e:ef:1d:f8:
fd:2d:4d:3f:1b:2b:8e:ff:44:bd:bb:6c:31:cc:2d:
84:4b:23:5d:46:f4:0d:5b:6f:70:9b:e9:25:dd:94:
06:77:11:66:8d:1d:a5:38:47:4f:0c:27:fe:04:74:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:67:B0:D1:C1:EE:6A:55:BB:50:FC:09:6A:24:68:9D:B3:98:AB
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:84:3e:a8:8a:9e:a2:75:db:97:62:b4:b9:40:8c:a0:d9:
a3:0d:38:4e:ba:91:ae:91:45:90:f4:5c:ac:7b:33:3c:3e:32:
75:55:a8:46:4c:cb:d8:8e:b1:f5:59:a4:c5:97:00:7a:08:f9:
18:5d:28:99:37:8c:04:37:45:4c:de:57:98:97:d8:93:2c:52:
5f:71:1f:5c:79:c3:32:d1:66:18:cd:9b:2a:40:96:17:0a:a3:
db:2f:0e:58:ca:c5:4b:02:3c:b2:d9:a6:06:ef:06:ea:1f:ea:
51:cf:d2:99:52:50:9b:f1:fb:45:cd:fb:68:c6:bf:11:73:cf:
35:b9:4f:2b:63:f7:62:45:08:84:9c:b8:4c:c6:87:24:2d:21:
b3:82:b9:fd:37:58:4f:a3:c8:10:68:07:5d:db:60:73:1d:15:
d5:15:44:67:f6:fe:52:68:bf:a7:6b:31:b7:0d:a5:ee:4f:62:
be:3f:69:45:93:b4:2e:ed:c4:bc:19:81:6b:a8:d8:64:b4:fb:
a4:84:5c:13:63:ed:01:ca:9c:f1:98:97:23:c0:90:ef:28:5b:
24:b5:35:f7:6f:05:7d:fd:58:82:01:e9:2c:24:e9:83:44:74:
4b:d0:12:e2:ae:25:19:2f:b6:72:70:02:57:2d:66:0a:3a:89:
ef:5b:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:06 2025 by rpki-client