Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: 81LvskmHYSZsg7dBj9M5yXIhC9W9/0Rlvp9VL8hniO4=
Subject key identifier: 64:71:3D:7D:58:62:BA:E7:47:29:DF:A3:93:3C:1C:AF:06:6C:34:FF
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 019A03A45D4327E81ECDC36971C287070198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 03CC
Signing time: Mon 20 Oct 2025 22:01:34 +0000
Manifest this update: Mon 20 Oct 2025 22:01:34 +0000
Manifest next update: Tue 21 Oct 2025 22:01:34 +0000
Files and hashes: 1: 1ENw1gcCvt1Pmax0p8zhB7SKAEg.roa (hash: 1qhYf9E0Pe4/V/O+LSKzrT8cldjvFnxKyFJ5/QtS500=)
2: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: rsRUnpJGE9mcfn3Rq7T3zCu57t537I/hoC3ANA+SIwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:5d:43:27:e8:1e:cd:c3:69:71:c2:87:07:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Oct 20 22:01:34 2025 GMT
Not After : Oct 21 22:01:34 2025 GMT
Subject: CN=64713d7d5862bae74729dfa3933c1caf066c34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:73:a1:6f:61:9e:65:d0:c6:b7:ec:09:c4:
18:05:e5:40:fe:63:5a:2c:1a:17:58:70:ab:a6:ad:
e2:38:32:25:58:8b:31:d6:b5:61:6a:f6:89:21:ba:
a2:06:b3:8d:f6:5c:b5:c3:1d:8f:65:21:16:47:21:
b4:d6:ba:35:20:be:5f:6a:cc:0f:90:c1:49:e2:5f:
b7:dc:74:68:aa:8a:ae:c3:68:bd:44:e0:0f:15:65:
9b:98:60:7c:a7:ef:7e:1e:56:57:c2:9c:13:67:2d:
9b:b3:fb:f7:0c:d0:7e:76:39:a8:ab:ed:42:81:e3:
2d:76:0d:17:8c:34:b2:2a:4c:21:ab:e3:8a:15:3f:
72:22:00:35:8e:39:62:9c:88:38:26:dc:64:4d:cc:
fd:e7:b8:e1:a1:2a:a9:2c:38:78:bf:83:49:ff:ff:
0e:9d:fc:ca:34:f1:cd:c7:7f:d2:a6:0f:b7:22:a1:
91:5f:82:fe:cb:7c:2e:a1:e6:10:e7:08:18:66:0a:
38:76:43:3d:b8:ee:e7:8b:33:d8:c5:ea:8c:7c:d7:
1b:64:f6:66:7f:b3:98:d1:de:ae:31:be:fc:40:b1:
f3:f2:5e:3e:99:a3:41:71:ee:af:d6:dd:9a:34:67:
e1:ce:53:8e:d9:6a:11:6d:1c:e6:96:16:2f:39:21:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:3D:7D:58:62:BA:E7:47:29:DF:A3:93:3C:1C:AF:06:6C:34:FF
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:84:3c:76:a3:1a:f5:a6:f2:4c:90:7d:1e:dd:d5:27:c1:
66:ef:2a:c7:5b:31:3e:e7:69:5f:e2:90:df:6a:ea:51:c3:58:
f3:bc:20:c9:48:2f:bb:b2:92:ff:75:db:99:b2:53:14:d8:c6:
98:61:de:12:f5:7c:0b:9a:25:9b:34:d1:91:89:8b:dd:eb:05:
1c:7a:5c:81:98:3a:3d:79:09:78:b7:3d:49:50:04:0e:69:9d:
84:82:fb:a7:92:6f:d7:d7:cf:fd:98:0a:c0:89:bd:c1:30:84:
f2:4a:89:95:9d:e6:29:8c:91:ad:39:7a:9d:84:a0:ee:58:5a:
af:63:31:18:71:6d:c5:85:b5:11:ba:ff:bd:5a:fb:b4:3f:26:
f0:5e:6d:44:90:b7:20:86:07:94:59:78:90:f3:a8:ec:a7:f9:
30:7e:ab:5c:85:37:2a:f0:a6:4d:b8:73:b2:00:fa:d1:f8:cd:
9d:68:01:60:60:af:b0:44:34:af:69:b6:f0:ef:4f:49:63:9f:
2b:27:25:b4:0d:41:65:bc:18:d3:cd:74:e4:ac:6b:5f:e4:4a:
b7:b9:be:a5:c0:fa:55:bf:5c:a3:6a:61:18:84:82:b8:bd:49:
68:8e:60:b7:c7:cc:f2:19:46:42:91:91:51:b8:25:ae:b2:90:
b2:a5:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:14 2025 by rpki-client