Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier: 7lFlUpP2VzWVH3Mg71O/v88t9GLkrBtX8AQvaRqGhJM=
Subject key identifier: AD:17:A4:4D:42:54:FC:35:7E:48:5C:77:C8:25:52:A9:05:18:A7:CD
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 0199CD91A5AFD235C17ADDD109B674B0443D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number: 0D63
Signing time: Fri 10 Oct 2025 10:01:38 +0000
Manifest this update: Fri 10 Oct 2025 10:01:38 +0000
Manifest next update: Sat 11 Oct 2025 10:01:38 +0000
Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: 4gSpDkgpg6pvxBi913ow9BN8FHL9k6oS3t/zi8nlSv4=)
2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:91:a5:af:d2:35:c1:7a:dd:d1:09:b6:74:b0:44:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Oct 10 10:01:38 2025 GMT
Not After : Oct 11 10:01:38 2025 GMT
Subject: CN=ad17a44d4254fc357e485c77c82552a90518a7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:64:33:5d:d7:83:71:d4:17:bd:01:05:17:
6e:77:39:58:c3:0a:47:b9:a0:fe:e3:81:30:0e:ea:
0b:50:e6:13:1f:ca:30:69:1d:6f:61:b7:53:cd:89:
6e:dd:92:75:2a:3a:12:7d:ae:9e:c5:66:09:d5:d2:
cf:5f:60:28:90:a3:19:77:d2:86:d8:02:7e:1d:4f:
a2:89:24:d8:95:b4:01:b1:de:2e:af:18:12:b7:83:
41:ad:e9:62:57:4e:5f:d6:8d:5e:63:09:57:c9:ce:
34:3f:2c:9a:db:f7:39:20:62:84:00:b5:b3:4e:23:
82:cb:36:a0:1d:ba:9d:31:65:85:47:4a:22:23:71:
87:28:18:db:99:6c:6b:12:b5:d5:c9:67:ff:39:07:
a7:0d:d8:ea:d7:d8:88:79:ce:bf:56:37:41:42:cd:
f0:f4:4b:bf:75:d5:f0:5d:03:94:45:56:55:a1:d4:
3d:8b:aa:da:db:06:6c:d9:1a:2d:12:77:36:1d:9a:
fa:1e:ba:81:f2:28:cc:34:b3:14:95:44:03:86:2b:
ca:c3:f7:90:e5:bf:b6:6c:25:86:00:19:68:17:53:
0a:ca:da:4e:39:ac:58:68:b1:51:19:4c:d5:de:70:
59:5c:59:0d:f9:87:c4:76:a1:63:ab:90:9c:b8:e8:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:A4:4D:42:54:FC:35:7E:48:5C:77:C8:25:52:A9:05:18:A7:CD
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bd:9b:78:0b:d2:65:f1:bf:db:a8:b5:e6:5f:68:7e:dd:c2:
64:3a:f5:41:fe:b8:7c:ce:79:1b:9e:62:d0:42:64:88:3a:de:
a1:81:4c:e8:fa:c0:5e:06:57:8f:ff:00:72:46:01:2a:ef:5c:
8c:d2:aa:d5:b6:dd:ff:61:fd:a3:e6:f8:f4:6a:9b:b2:cb:88:
da:50:99:b1:01:ff:78:a2:48:20:b3:01:69:a7:fa:ca:4e:db:
89:0b:c7:ba:3a:bb:87:9a:ad:6a:41:62:82:45:9a:95:b2:e9:
81:98:2b:18:b1:00:26:b5:03:62:d3:33:28:f8:e2:3c:18:9c:
f4:19:c9:84:0b:f2:8a:10:aa:a0:39:a9:2e:d2:2a:4c:5a:b4:
e1:89:ca:a5:33:f8:4e:fd:a5:fd:3d:b7:f8:69:20:d9:be:b4:
29:40:bd:38:39:f5:f3:53:f5:fc:b2:2c:c9:18:d1:91:d3:51:
63:b9:13:bb:ec:4e:b0:8b:b1:68:f0:34:e1:ba:6d:ea:c7:aa:
17:d7:b7:f6:7d:ee:3e:82:c2:5a:5f:20:98:14:fd:9c:f2:d3:
fc:23:75:36:73:b6:79:96:9a:72:98:2b:70:99:6a:ed:7f:17:
2a:52:da:37:4b:55:ca:bc:2e:39:76:cf:ce:09:b7:b0:4b:92:
06:30:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:16:06 2025 by rpki-client