Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: kskQyVyMzFrS3mR1DtLXzirVJwMYKlylYn2R9S1Q7/Y=
Subject key identifier: 14:C0:75:B4:A0:53:97:85:A9:DD:9F:29:78:B0:05:3D:26:30:A9:D4
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 0199FFC7D0284116DADFFAF317BCD8A496F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0F79
Signing time: Mon 20 Oct 2025 04:01:49 +0000
Manifest this update: Mon 20 Oct 2025 04:01:49 +0000
Manifest next update: Tue 21 Oct 2025 04:01:49 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: 8f4ZI/W4CC+Xp1ObT/k9jmPo7vBlMooSoGUku3BsxJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d0:28:41:16:da:df:fa:f3:17:bc:d8:a4:96:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Oct 20 04:01:49 2025 GMT
Not After : Oct 21 04:01:49 2025 GMT
Subject: CN=14c075b4a0539785a9dd9f2978b0053d2630a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:a9:0e:98:2d:c4:1f:d4:62:59:e3:d3:0b:
25:ea:ad:4f:b1:5d:83:be:37:36:ce:d5:1f:41:a9:
e5:4f:08:28:dc:54:56:ea:83:3b:ed:e7:71:f1:4b:
8d:72:b2:cf:93:c3:e6:5e:17:76:38:3f:87:b6:f2:
96:88:73:49:96:04:36:f9:57:7d:ac:b1:c8:41:1b:
33:4f:27:2f:6b:d2:7d:dd:72:5d:38:01:82:57:98:
f7:a7:8d:e1:bf:4d:a5:b6:9f:e5:95:0c:e3:03:bb:
e4:80:2c:4a:23:a8:3a:c9:d9:26:2a:b9:72:52:ee:
fe:93:99:3e:42:8e:2f:55:85:d0:a3:82:5d:e8:c0:
43:5d:67:fe:f9:42:69:48:f6:62:c6:b9:9d:22:49:
be:c3:44:5e:6e:7d:cf:43:33:c2:0b:98:05:cc:c9:
9a:bb:ab:33:07:e4:62:8f:2d:2b:9c:f7:e5:c7:ff:
ba:0f:2e:63:fe:ad:3c:c9:50:26:ba:d0:1c:87:0d:
43:67:19:15:96:d7:c9:b5:d0:6b:ad:36:27:af:af:
dd:4b:7b:1b:3f:eb:ef:4e:a7:dc:38:9c:4a:af:4e:
4a:be:6b:5e:67:db:8e:32:e3:20:2c:77:e3:fa:76:
4c:36:db:ab:e5:d8:0f:5a:b6:02:73:af:3c:d3:a1:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:75:B4:A0:53:97:85:A9:DD:9F:29:78:B0:05:3D:26:30:A9:D4
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:9d:ea:7b:de:01:ac:c4:ac:09:f2:c1:65:86:32:fe:13:
92:af:8c:cd:80:6f:ee:4a:0a:17:9c:1d:db:9b:53:a2:a5:a2:
cc:26:17:37:d0:5a:89:bd:12:bd:67:22:00:30:ff:07:6d:a8:
ce:ff:fa:7d:81:49:7e:eb:d9:07:fb:17:1c:ad:9e:6a:4a:f8:
47:35:07:41:5a:41:81:9c:51:06:90:41:65:89:20:f1:98:71:
42:6e:5d:ec:f2:5a:3c:e7:71:0f:a6:05:5a:32:cd:ac:37:fb:
19:d4:37:c0:7d:d4:f3:71:70:e7:da:36:5d:32:41:b0:c9:42:
0f:7c:aa:6b:7f:58:70:e2:cc:54:49:dd:6a:09:05:e8:6f:d3:
58:d2:b2:fa:d2:43:c3:75:7b:e0:62:8a:b7:f0:4d:4b:be:fe:
17:cb:72:09:5f:9a:6a:fe:b3:45:ac:52:4d:85:12:cd:d3:08:
97:e0:e5:0b:12:1d:70:1d:a6:6f:97:ea:9e:d5:bc:99:ef:01:
26:5b:a7:b1:0b:3c:e0:8d:b2:94:46:49:19:d4:ee:b0:7f:44:
78:26:71:34:17:ff:d5:70:3a:d0:f3:26:28:a4:56:52:c2:f2:
87:05:2e:3f:67:ca:bc:80:98:da:3c:9d:76:4d:b4:e7:9f:60:
7e:91:cd:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x9AoQRba3/rzF7zYpJbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjUxMDIwMDQwMTQ5WhcNMjUxMDIxMDQwMTQ5WjAzMTEwLwYDVQQD
EygxNGMwNzViNGEwNTM5Nzg1YTlkZDlmMjk3OGIwMDUzZDI2MzBhOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWpDpgtxB/UYlnj0wsl6q1PsV2D
vjc2ztUfQanlTwgo3FRW6oM77edx8UuNcrLPk8PmXhd2OD+HtvKWiHNJlgQ2+Vd9
rLHIQRszTycva9J93XJdOAGCV5j3p43hv02ltp/llQzjA7vkgCxKI6g6ydkmKrly
Uu7+k5k+Qo4vVYXQo4Jd6MBDXWf++UJpSPZixrmdIkm+w0Rebn3PQzPCC5gFzMma
u6szB+Rijy0rnPflx/+6Dy5j/q08yVAmutAchw1DZxkVltfJtdBrrTYnr6/dS3sb
P+vvTqfcOJxKr05KvmteZ9uOMuMgLHfj+nZMNtur5dgPWrYCc68806FiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTAdbSgU5eFqd2fKXiwBT0mMKnUMB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR+d6nve
AazErAnywWWGMv4Tkq+MzYBv7koKF5wd25tToqWizCYXN9Baib0SvWciADD/B22o
zv/6fYFJfuvZB/sXHK2eakr4RzUHQVpBgZxRBpBBZYkg8ZhxQm5d7PJaPOdxD6YF
WjLNrDf7GdQ3wH3U83Fw59o2XTJBsMlCD3yqa39YcOLMVEndagkF6G/TWNKy+tJD
w3V74GKKt/BNS77+F8tyCV+aav6zRaxSTYUSzdMIl+DlCxIdcB2mb5fqntW8me8B
JlunsQs84I2ylEZJGdTusH9EeCZxNBf/1XA60PMmKKRWUsLyhwUuP2fKvICY2jyd
dk20559gfpHNVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:29 2025 by rpki-client