Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: J2vg8+A5zyW3rOxFblSnlepu8nOz0hhCG6fu1Va57v0=
Subject key identifier: 03:EF:1E:A9:49:D0:79:49:52:F1:A6:49:48:62:1B:72:7C:BA:2E:69
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 0199FD3401C3B5E0514F19B806B3249EED2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0F4A
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: zpsJwY9LdY6Th9Ceh23dXKqnN0tSC+xzwnlSZkP5J3k=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:01:c3:b5:e0:51:4f:19:b8:06:b3:24:9e:ed:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=03ef1ea949d0794952f1a64948621b727cba2e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:97:20:76:93:60:aa:b9:b7:35:b9:ac:c9:
0c:ab:63:ee:6b:b2:3e:6d:21:d2:88:b6:55:71:95:
07:30:83:1c:27:d2:0c:92:49:2c:8e:71:18:fd:e3:
ad:17:f4:1b:e4:57:f1:e9:07:70:8e:84:78:3a:4e:
02:d0:72:b8:b2:d7:18:5d:f3:bd:a8:72:b5:98:5a:
79:99:76:83:f6:a6:9d:73:ea:b6:8b:82:59:da:35:
19:8a:e8:f7:be:90:04:49:95:e1:23:af:b5:67:0f:
32:a7:cf:cc:5a:6d:77:4e:24:79:22:e8:ee:1d:8b:
d7:49:24:30:55:b7:d3:2a:4c:8f:2f:7e:96:10:d1:
b3:34:bf:75:c9:5f:fc:69:a0:5c:e9:64:d1:84:10:
55:43:d5:df:46:61:7c:2b:8f:e7:1e:df:3a:f4:cb:
31:95:47:a3:93:51:d2:70:78:4e:91:47:a9:46:67:
11:4c:b6:49:e5:5c:47:39:0b:81:38:eb:9e:d7:ef:
f0:9d:0c:9d:dd:47:9a:fb:e8:00:72:4f:24:65:c6:
4e:15:7e:bd:db:ec:a0:28:2b:b7:ed:d4:92:35:38:
ff:c9:0f:a9:6b:c1:12:4d:8c:bc:bd:f6:38:4d:f5:
54:6c:eb:af:0e:23:9c:e2:e6:78:78:8f:cb:5d:04:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:1E:A9:49:D0:79:49:52:F1:A6:49:48:62:1B:72:7C:BA:2E:69
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ae:99:4d:6d:3b:9e:1d:d7:4a:71:30:6d:73:22:f6:e1:af:
de:b7:59:d8:65:1a:df:f6:e3:83:3e:3f:26:e1:3e:d3:ef:df:
6b:cf:37:54:b9:dd:d6:e1:1c:a5:fe:9f:4a:c4:3f:eb:fd:c1:
ae:c6:ea:c1:99:87:a5:ed:23:84:25:85:e8:e1:cc:95:1b:3c:
b2:4f:e0:65:c1:13:25:48:e5:02:43:3b:1b:37:d5:61:b8:ba:
a6:5c:a4:aa:aa:ad:60:6d:ed:e9:db:4a:95:4d:e8:5f:f2:fa:
21:24:4f:03:1d:0c:78:8d:eb:8b:18:16:c0:e5:de:72:1e:8c:
bf:8c:f7:13:3e:ff:06:70:85:6c:77:89:18:72:08:44:fd:c3:
df:a2:a7:aa:75:7b:52:6c:48:45:d8:35:fc:4b:4a:41:0f:e6:
55:0c:1d:94:38:48:35:ef:45:7a:eb:5d:5f:8f:10:e3:9a:af:
87:63:02:56:48:4c:9f:06:9d:a5:95:90:49:86:db:e1:82:52:
e2:f5:a4:12:14:ae:b6:06:51:ff:73:bf:39:c6:e7:68:11:fe:
80:e9:75:62:6c:a5:43:96:92:11:5f:c1:a8:96:1c:53:d1:ed:
6e:36:64:04:ab:b5:99:3f:37:be:b5:26:a0:47:b8:c2:49:80:
58:be:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:53 2025 by rpki-client