Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: RT9s9GeJXpNDkOKckyaCLycfxT7GWp7GMzacrTvquwE=
Subject key identifier: 56:56:83:16:EF:9F:7A:1C:39:6C:88:D9:49:BA:04:4D:4D:DC:BD:8A
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 0199FD6B4EEF11EE5919897E5B138A7B4550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 09D4
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: TCJPiS0FRr8f8m5wEMyDRyDpQEcMVaFslhqLKmf5w5c=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4e:ef:11:ee:59:19:89:7e:5b:13:8a:7b:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=56568316ef9f7a1c396c88d949ba044d4ddcbd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:6d:d3:df:cc:4d:a6:80:2c:aa:a1:9a:29:
eb:5a:7c:0a:fb:3f:38:23:d3:9e:4b:a6:ae:b8:28:
de:f5:1c:e4:cc:f6:cb:eb:e6:d4:66:a1:09:88:83:
27:fc:bb:04:b4:08:41:ed:4b:dc:ad:5f:cf:08:4f:
2f:2f:7b:bd:98:f3:16:5c:e9:cc:10:c6:f3:c0:ee:
22:17:a4:c0:95:48:e6:60:08:a9:be:33:ca:be:44:
e9:b4:24:e8:aa:1c:06:fb:97:0e:37:a2:82:80:86:
41:e9:d8:39:a6:12:b8:43:8f:a5:85:a2:85:7b:50:
ee:79:2a:89:42:c0:77:c5:08:7d:a3:be:cd:99:34:
55:5a:5f:67:eb:b4:3c:26:32:71:3b:39:3f:7b:1a:
38:b9:85:dd:fc:eb:64:79:bc:39:ca:42:f9:b9:62:
28:40:cf:35:76:a0:8e:1a:1d:43:82:d4:02:1b:ba:
e1:b3:b0:b0:75:86:7d:2c:55:07:19:7b:f8:28:01:
95:a8:54:4b:0a:a2:31:81:e9:94:30:f2:ca:d5:91:
92:f4:a1:31:d5:bb:2b:f4:5a:fc:31:f3:b7:95:65:
ef:09:2d:b3:0f:34:ce:e1:2b:47:71:e8:c4:ec:e9:
10:ec:4b:bd:f7:f3:bb:a5:a4:9f:42:e6:31:70:6d:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:83:16:EF:9F:7A:1C:39:6C:88:D9:49:BA:04:4D:4D:DC:BD:8A
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ac:d2:d5:9f:44:4e:45:cd:c4:26:1a:12:51:64:75:31:95:
72:d1:53:d5:05:03:f4:81:cd:85:3b:d6:d2:b8:01:5e:b1:78:
60:3d:c4:9c:be:df:08:03:08:6c:11:5d:65:23:49:1c:b0:60:
e9:08:05:87:4a:17:28:81:bd:86:6b:55:80:39:c9:74:89:4e:
e0:ab:8e:e8:e5:85:ab:62:33:75:a4:3e:f2:87:6b:5e:15:a3:
9f:e7:36:8b:05:05:ac:90:a8:64:c6:63:ff:8e:52:eb:40:b7:
5b:74:96:45:b0:f9:5c:80:98:c4:3a:a5:aa:f8:cb:e9:2b:39:
bc:58:18:07:7d:33:da:3a:76:c6:c2:d4:48:5e:56:e4:c3:46:
f4:3c:51:9d:27:d6:97:90:56:61:c9:b3:42:b5:a0:60:7d:ca:
70:67:f2:ee:00:03:28:8e:b0:e9:a0:83:1a:3b:c6:57:ea:b7:
10:aa:4e:87:61:bc:3b:a4:96:e3:16:c6:9d:0b:6f:c9:d8:26:
ae:04:e3:ef:85:d8:32:1b:0e:0e:fe:79:a0:df:40:ca:e0:2c:
7f:3d:4f:be:b6:b5:35:a1:9b:5d:12:3a:5d:0c:99:9d:e8:3a:
4c:76:7a:15:4c:50:d4:47:02:20:20:97:90:b1:2b:2e:8e:c2:
7c:d9:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:38 2025 by rpki-client