Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: Nn/eraR0hLb5ajcq8xkN9jb9MP0/EpjIZ6VlDYwA8ec=
Subject key identifier: C9:02:56:21:42:8D:F0:EE:C9:C0:64:F9:A6:CA:CA:71:98:2E:DF:D3
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 0199FFC84713B6D53E7852CD3BE539F0C82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0CEC
Signing time: Mon 20 Oct 2025 04:02:19 +0000
Manifest this update: Mon 20 Oct 2025 04:02:19 +0000
Manifest next update: Tue 21 Oct 2025 04:02:19 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: wI8sCZtxfcERU38UdGmYDFax+T9SDe0gs7jaYE6T3tA=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:47:13:b6:d5:3e:78:52:cd:3b:e5:39:f0:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Oct 20 04:02:19 2025 GMT
Not After : Oct 21 04:02:19 2025 GMT
Subject: CN=c9025621428df0eec9c064f9a6caca71982edfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:f6:a4:be:ba:a1:e6:b9:58:1d:d6:bf:40:
6c:37:62:91:ee:d1:34:51:2a:d9:27:95:64:c6:ae:
d0:36:0e:b1:67:fe:86:ec:7e:b0:f6:9e:70:9e:5a:
43:cb:d9:96:b9:b8:59:d4:60:f9:6c:15:74:22:34:
37:00:99:b5:47:fc:04:d4:27:ff:97:cd:5e:47:84:
35:6f:4f:47:4e:80:c8:ba:3e:c5:e8:4d:3e:af:aa:
07:ac:59:a2:42:85:a6:83:19:fc:1a:06:8a:9d:05:
e5:24:15:c8:cd:30:02:e2:f0:5a:58:57:38:3b:3e:
3e:bb:ed:13:26:5e:2e:65:14:40:58:57:e8:7a:99:
1c:97:ec:dd:e0:5e:50:92:b8:c2:75:cf:da:f4:0e:
8e:76:b4:e5:40:71:51:19:12:dc:d2:76:c5:f5:f8:
6d:35:1f:de:8a:76:25:4d:99:c6:90:3b:b5:d3:94:
1b:fb:3e:48:7e:98:37:f7:9f:b2:25:6b:e4:a1:67:
e2:3f:f0:c1:bc:d9:9d:8f:76:e0:67:01:53:e8:af:
93:92:a6:13:b7:78:db:ca:91:8f:ce:4b:3e:91:08:
77:64:cf:85:88:86:db:49:2a:7b:24:ce:2f:c1:de:
29:80:40:01:0e:02:98:55:fa:2d:32:91:61:43:b5:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:56:21:42:8D:F0:EE:C9:C0:64:F9:A6:CA:CA:71:98:2E:DF:D3
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:5d:6c:03:87:71:02:63:84:ed:00:3d:63:c6:7a:e4:21:
3f:89:db:16:6f:ef:ac:f2:b2:e6:eb:5b:b2:62:b7:c6:e5:40:
8d:8f:08:50:55:7f:a6:c0:17:8c:21:89:c1:be:d5:75:90:8a:
c9:01:96:c4:13:96:bf:77:d7:cc:65:7e:b2:7f:fd:1c:39:c9:
5f:d8:2e:af:dd:13:21:f0:51:54:0e:fb:4a:7d:1e:69:16:a6:
7d:19:88:6b:49:84:1e:f9:80:06:e6:89:87:26:d6:98:e3:90:
d9:5f:93:f9:5c:67:3d:96:5b:85:19:16:7a:a4:ff:97:42:b9:
9b:51:9c:9a:e5:3c:60:66:59:19:3f:ab:bf:3f:54:70:5a:3d:
4f:38:46:30:7f:e3:aa:1b:e3:34:82:f9:96:9c:78:ee:3a:ff:
23:9f:dc:0a:49:be:10:1a:7d:d9:36:ae:ec:1c:8b:ca:cb:c5:
f9:9c:df:e6:7e:54:86:33:96:24:1c:ce:66:50:68:e0:31:bf:
cb:4e:e2:4c:6c:56:4a:c6:6b:91:9e:49:ba:5b:40:42:a7:2d:
4c:ca:79:4b:54:88:2e:ae:6a:7d:89:7c:79:43:60:75:dc:03:
9e:80:53:42:9b:51:ab:53:5a:d0:ab:26:04:09:07:48:6c:c6:
ba:78:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:06 2025 by rpki-client