Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: XOG5vKmfUkYfUKrmiFQ6fHw22Q8LFYnyilybseIc4dg=
Subject key identifier: 88:4E:81:77:AA:71:EC:C9:49:C0:D8:4C:61:EE:63:C3:0F:D7:51:F4
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 0199FF59616FD49E72D80444E948F9062BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 01E0
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: zhjbSfsV5hFDfM/4kg+XymnjNJK326sceMjBc6LIhek=)
2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:61:6f:d4:9e:72:d8:04:44:e9:48:f9:06:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=884e8177aa71ecc949c0d84c61ee63c30fd751f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:a9:4b:67:78:7b:26:d6:26:66:a5:80:5a:
93:fc:fe:82:47:54:32:29:5f:ba:69:01:13:96:b5:
1f:22:2d:3c:e3:50:a0:12:80:e0:ff:95:55:2a:6d:
80:cb:ef:ed:37:ff:26:2e:a5:3c:59:1e:c3:bc:a6:
a3:f7:ab:17:ef:47:ed:f6:9e:eb:d8:ce:93:3c:f4:
8f:b8:8d:0c:ad:80:8b:cd:0d:38:54:04:37:fc:56:
44:ad:2c:77:83:bb:a9:c2:f8:ad:a6:59:a0:cb:c5:
7c:b4:9a:36:be:33:db:2a:84:ee:8a:ee:b8:e2:fb:
28:5b:ad:a6:a0:28:4c:8f:67:43:e9:47:2a:1e:32:
7e:cf:1d:51:4d:ed:b6:c4:27:e1:b5:4b:c9:fc:f6:
4a:73:70:49:29:ae:9b:b4:80:ab:74:0d:be:b4:a6:
dc:98:07:0c:2d:4c:88:1f:de:26:d8:03:64:01:1a:
41:8d:36:72:86:3e:c9:db:d7:07:eb:5c:72:04:ed:
2c:b2:6d:fd:25:c2:85:94:c1:ea:7e:36:21:d2:d6:
f8:6c:db:64:4d:53:d5:d4:48:fd:06:47:4f:da:35:
79:db:15:e1:da:c7:17:11:95:5e:63:36:bb:32:ea:
99:21:b0:1d:a5:94:99:b5:89:4b:6f:c4:ac:a0:9b:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:81:77:AA:71:EC:C9:49:C0:D8:4C:61:EE:63:C3:0F:D7:51:F4
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:43:e3:e4:c7:4d:84:4e:0f:51:ae:5c:70:4e:45:1e:1a:
d6:a3:16:48:f2:64:17:67:e3:ff:16:e5:c7:33:45:d6:02:c6:
00:77:49:6d:19:5c:fb:35:49:5f:a3:f0:cb:6a:9c:37:cb:05:
2d:4a:74:c0:57:08:c2:b4:fd:2c:8b:a0:97:b0:ae:a8:42:87:
0c:7c:8c:05:f7:22:50:c2:d6:c2:b9:7c:4b:20:6f:42:29:0a:
4e:cd:c5:dd:33:15:6f:66:0f:af:41:41:49:49:53:bf:ab:3b:
6a:44:e1:0f:5d:27:cb:f6:a6:aa:cb:0a:46:68:60:e5:0b:21:
22:74:c3:94:9f:fd:e7:c0:a9:a0:3d:20:c1:ff:dd:70:20:c5:
c3:d4:41:ce:52:87:b3:33:16:b2:2f:2a:a1:a2:5f:96:1f:37:
9b:75:a6:23:d4:d9:9a:12:c6:2a:71:25:95:b3:9c:79:b2:66:
1c:a1:8a:b5:e7:17:a5:f7:b8:50:02:4e:1b:92:18:66:6f:e9:
13:aa:7b:9c:3e:ba:1a:e0:30:b5:f3:3c:1c:2d:55:2b:7c:b4:
7a:e6:e7:a1:bf:87:cf:be:0d:f3:7e:17:54:86:9c:97:80:fc:
8c:7f:73:04:e0:2e:fc:fe:75:c8:f4:db:c1:be:4a:06:02:bb:
3a:b9:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:15 2025 by rpki-client