Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: veCO1HRTTeKZkwBU+WmengHm1CrAs2Z1TuJvy1pgwZo=
Subject key identifier: 93:79:1E:95:C2:ED:B9:24:66:9A:BA:36:EC:F3:FC:17:5C:83:19:CA
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 0199FBEB301604B9FF118B65514634A97ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: mlRDLqRMh0E3AMLKutuL5yShS3edSDvj389EpGDRjRo=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:30:16:04:b9:ff:11:8b:65:51:46:34:a9:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=93791e95c2edb924669aba36ecf3fc175c8319ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:29:89:6b:ec:c3:3b:07:b4:38:36:c7:f4:
03:c5:24:10:d5:40:6d:d5:38:84:be:22:93:5a:11:
e7:12:02:8c:4e:b7:91:b6:dc:bd:95:67:3a:be:dc:
fb:3f:49:ee:ac:62:7a:d7:34:14:56:0d:55:c7:e3:
52:57:8b:21:d2:f8:47:02:19:7d:b1:e2:19:17:e1:
f9:80:8a:44:4b:09:6c:da:91:c3:30:22:91:64:e0:
95:b9:f4:9d:14:c5:03:f4:8f:2c:dc:5c:84:f6:19:
0b:23:27:a7:d3:55:b7:03:a0:0b:75:e1:46:fb:2a:
27:4d:1b:5e:22:8a:d8:2f:79:c8:20:9e:f0:62:af:
f8:65:fb:66:d1:98:bf:03:b2:38:27:f0:fb:44:7a:
97:0a:e5:18:8d:17:38:e5:13:d5:85:94:4a:ae:de:
de:62:22:a8:08:99:64:00:0f:2f:fc:0b:05:30:74:
43:1e:4e:4d:27:cc:85:fe:ba:ee:78:15:f3:ba:3a:
a9:b9:2f:af:46:3d:b3:a9:33:9e:14:ec:de:ee:36:
d6:a9:80:1e:2c:70:e8:73:06:39:57:6f:d2:3d:8c:
43:b8:05:93:d4:3c:05:00:a7:d3:11:69:f1:96:13:
ce:0a:05:41:78:b6:ba:c7:af:43:91:d5:70:40:1c:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:1E:95:C2:ED:B9:24:66:9A:BA:36:EC:F3:FC:17:5C:83:19:CA
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f6:7d:a9:12:3b:a7:bd:5c:c9:29:d6:72:4d:a3:3d:f6:39:
59:92:ad:ca:85:11:a5:3b:27:ef:f1:34:4e:96:a7:af:f9:bc:
fc:9d:72:7d:16:92:61:86:e5:72:3a:6a:4d:6b:51:6b:04:94:
ba:e7:9d:fe:14:dd:81:dc:c1:54:d8:6a:cc:d4:97:d3:3c:41:
16:73:48:ff:f7:8e:e4:9d:26:82:b4:67:33:ed:2f:60:d9:af:
dd:bb:28:5d:9c:24:40:ad:78:ca:a9:81:fa:96:d2:8e:5f:a2:
c0:d7:0a:77:c1:29:83:30:da:fc:f2:27:5b:37:29:a3:e2:48:
73:17:85:c0:90:6f:64:19:df:57:35:23:be:a8:6d:f3:8c:cc:
c5:65:ca:22:a7:48:c9:a2:ba:02:e1:67:3d:1d:01:46:ff:d5:
d1:5c:33:78:a0:3f:4e:06:24:a6:6b:3b:39:3a:b7:87:1c:57:
0a:d3:f1:5f:9f:fa:5d:f3:4d:88:8b:43:e9:9d:25:e6:ff:24:
e2:ec:24:5d:51:96:37:69:f5:82:60:9f:ba:af:18:06:16:58:
f4:72:44:f8:88:86:f2:0d:75:08:f7:10:ba:8a:5c:49:8c:e0:
f7:0b:02:e4:0e:72:ab:c8:09:fc:98:c7:28:db:53:9a:a3:9e:
c4:9e:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:40 2025 by rpki-client