Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: GA4FliYzb50befLCWkoEpWyW4akyjtjb6l66Ko1dDWo=
Subject key identifier: 85:00:1A:75:AF:16:F9:F9:0A:3A:30:43:16:73:7B:59:BD:A6:04:8A
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 0199FB7C7D4AFC4A731231B980F3633C5482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 0502
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: Az6SOWm27+R3hU6Sb/GdCfubRNwt6Ag4cguj83EmFDs=)
2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7d:4a:fc:4a:73:12:31:b9:80:f3:63:3c:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=85001a75af16f9f90a3a304316737b59bda6048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:7f:7a:2a:80:4e:ad:cb:b2:d7:ca:69:1d:
3d:ff:21:e6:64:14:97:30:41:63:b6:d9:29:b6:0b:
15:37:9e:23:77:fd:72:2d:98:29:27:48:5a:a0:ea:
1e:b3:50:61:d4:0e:e0:37:8f:f1:12:64:0d:7b:31:
de:07:6f:da:96:9b:79:13:e1:22:77:10:a2:85:86:
05:f2:56:fb:83:62:ce:9b:fa:29:d9:2e:d3:bd:97:
e8:e1:e6:14:10:73:53:02:94:37:90:15:de:f7:d7:
ef:da:cf:bd:1f:6c:dc:44:9f:b4:d4:02:88:04:ef:
ed:b8:17:a5:bb:4c:ab:54:db:f9:e3:95:e1:7f:74:
da:b0:cc:12:e4:33:85:df:c4:fb:0c:ef:33:1e:6c:
ef:d7:a0:1c:05:9c:b6:ac:28:dc:46:99:47:2f:5b:
d0:e5:2d:46:eb:dc:ad:06:6e:32:48:9c:f0:32:d5:
fc:6d:12:88:ab:40:a8:12:4f:99:18:1a:b3:a8:76:
e7:f2:63:59:15:49:e6:5c:c8:55:75:39:50:93:70:
60:e2:1f:34:63:53:c3:d6:9b:fa:e3:c4:22:53:2c:
cf:80:d6:3d:3e:85:fd:ce:be:64:fc:69:40:4c:13:
c1:96:56:52:29:49:07:e4:eb:10:28:a8:10:c2:d2:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:1A:75:AF:16:F9:F9:0A:3A:30:43:16:73:7B:59:BD:A6:04:8A
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8f:b8:3e:e4:2e:74:c6:86:21:bd:c4:76:9a:f2:ff:54:dd:
e6:54:49:27:cc:48:8e:e0:cc:59:b7:0e:2d:dd:0a:57:e2:77:
eb:65:40:64:47:96:09:e6:c4:2b:df:ff:96:c2:ad:51:1c:7d:
41:ae:2b:a4:3c:ab:02:2e:07:5e:31:d3:52:5c:9d:4b:7e:81:
31:82:85:a7:a5:f2:73:be:e8:ad:21:63:b7:b8:52:4c:f1:5b:
c8:cc:93:46:ca:a6:3e:21:f1:75:95:a7:18:96:c5:9c:23:68:
60:8d:ba:a7:5e:2a:3a:f5:79:f3:0b:46:95:69:e2:f7:3a:99:
e0:0b:68:ee:ed:11:f8:83:51:be:7d:e4:93:47:73:49:38:45:
64:4e:51:a0:fa:15:d3:d4:2f:92:c1:92:63:b6:a5:a9:c7:34:
dc:86:86:a7:8b:12:25:e2:2f:b0:0f:7a:b2:c6:b5:5e:9f:a8:
5b:ea:2d:6c:31:e1:79:be:af:42:c9:d1:53:00:37:a7:e4:b5:
f0:a6:f6:b2:cb:11:3d:4b:fc:cc:d8:7e:4c:37:e2:c9:db:75:
e0:9c:bb:df:92:a5:32:ce:de:ae:96:0b:b5:fc:f6:13:5e:67:
52:26:ad:62:89:4d:61:7b:ef:a4:84:6a:0e:46:e0:22:4c:a4:
b7:03:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:13 2025 by rpki-client