Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: OtU5S5fbhR7wENfbWo3iTp1d+LjDaXW5pNWHR2ThRjw=
Subject key identifier: 19:35:CD:9B:9A:F9:EE:16:92:62:AD:DC:66:C2:88:B9:49:9D:61:58
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 0199CCEC23229A00F6B924289230C3CA0762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 16CD
Signing time: Fri 10 Oct 2025 07:00:51 +0000
Manifest this update: Fri 10 Oct 2025 07:00:51 +0000
Manifest next update: Sat 11 Oct 2025 07:00:51 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: w0cICXT6JE17AItinZcNRhTXUklsOUih5vutA9oHjwQ=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:ec:23:22:9a:00:f6:b9:24:28:92:30:c3:ca:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Oct 10 07:00:51 2025 GMT
Not After : Oct 11 07:00:51 2025 GMT
Subject: CN=1935cd9b9af9ee169262addc66c288b9499d6158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:0b:d8:f9:d5:e7:40:41:79:e0:22:3e:bc:
89:cb:6f:30:6b:90:ee:ba:68:52:78:d1:e9:70:5b:
7e:c2:d2:77:b0:83:bc:86:d8:b6:0c:35:d0:d4:f2:
bb:7b:8c:88:00:f3:2c:96:d8:72:9a:4e:f7:06:99:
33:8d:20:69:22:ae:43:2b:ec:f1:9b:a3:e5:c9:f8:
3b:15:a2:a4:e8:e0:28:66:6b:da:11:ab:0a:95:26:
76:67:18:7a:c1:43:c8:64:75:e7:69:30:17:87:e8:
92:c2:fc:fc:e0:0a:e7:0f:6c:27:5d:a9:80:4f:80:
79:f2:25:6a:97:83:0e:6f:f9:78:89:8e:6d:76:ab:
16:3a:2e:44:aa:2d:0a:96:b2:0d:df:8e:d3:34:08:
52:80:b8:73:75:8e:e3:4d:b8:e8:9d:55:ec:44:77:
33:db:20:2b:4b:fa:9f:59:50:8f:86:05:b1:94:04:
ef:c4:18:ee:62:f7:76:45:c8:52:50:00:83:bb:8a:
0a:0d:90:b6:7b:5b:69:3e:cb:77:cd:5a:a9:a2:77:
df:d8:23:85:60:c0:ca:34:99:df:b2:c3:b2:ab:7d:
0b:94:76:53:16:7c:a3:04:96:a4:27:88:98:8d:44:
3f:a9:24:ce:25:23:7e:c0:c1:b3:31:13:b6:de:ba:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:CD:9B:9A:F9:EE:16:92:62:AD:DC:66:C2:88:B9:49:9D:61:58
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cd:43:1a:83:fa:f5:b8:f9:4b:a2:c6:d1:c4:1f:86:75:25:
6b:3d:67:53:af:40:de:31:69:21:cb:c0:15:85:47:9b:a8:59:
0a:0b:cb:aa:b1:66:25:2f:8a:e4:f7:5a:d8:26:58:4c:89:68:
1c:ee:ef:e0:33:22:b1:6e:e5:2c:24:ca:0b:7a:0b:7d:9a:d6:
c5:56:46:27:2b:7a:1e:5c:52:df:ed:1b:ed:a3:8e:76:01:b0:
1b:2f:a3:4f:e1:26:6c:40:fa:d5:69:e6:e1:9f:e5:8b:8c:93:
49:10:55:3b:0e:df:08:e5:dd:cb:3d:80:a8:c7:25:bf:c4:13:
2e:fc:a1:2d:a0:6d:e8:3c:47:45:a1:93:8d:6a:41:da:c8:0c:
04:c2:64:13:93:fa:91:5f:26:69:ee:60:e2:1b:cd:d4:01:71:
8f:e4:c5:2f:94:8d:5c:3a:61:f1:00:2c:39:05:f2:c4:6b:04:
5f:d7:36:69:09:cb:dd:ec:a3:0c:ed:c5:de:74:f5:91:1b:41:
ad:29:f3:6b:23:02:60:1a:eb:52:a9:e3:f9:5a:ab:29:ae:47:
80:ed:73:e3:4e:50:0b:9d:a9:13:25:81:2a:53:9e:a6:c5:32:
0d:68:84:5d:61:b9:9d:2f:e5:69:64:12:03:41:4d:17:30:34:
67:f4:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:06:25 2025 by rpki-client