Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: QAuj3YDvH/RmTxJmsBt50BNglG4u3ZVXz17z3ieuQz0=
Subject key identifier: 0C:83:CB:44:C8:E7:50:D0:D0:51:6F:53:E5:23:0C:B6:AD:B0:EC:54
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019A71B884032207FA13C1F22C8765FC50B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 10D2
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: SAc9PBFJ0sguMM65QRVx0uvP15orQQBierq3RkJLbxk=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:03:22:07:fa:13:c1:f2:2c:87:65:fc:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=0c83cb44c8e750d0d0516f53e5230cb6adb0ec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:7a:d4:0b:f4:63:35:74:f6:1c:94:b0:6c:
31:83:03:f0:fa:a0:8b:90:57:01:62:f0:77:04:47:
37:b9:f5:ed:5b:5f:3c:8a:6a:bc:53:07:c1:d7:a2:
e8:08:6b:b3:e0:6d:3b:6c:7c:60:0d:e8:96:b2:d1:
19:45:07:83:9e:ea:9c:79:8d:81:b4:e9:01:c1:20:
35:57:4f:12:cb:5b:2c:fb:43:a6:a9:20:21:73:23:
8f:99:13:46:e4:ee:a3:83:3c:c8:d5:13:9e:0c:ba:
a8:9f:2f:77:64:fa:33:40:8e:98:49:2a:e4:65:a2:
47:77:8c:ef:64:0c:9e:a3:39:7c:a9:ae:1c:5e:08:
99:1a:58:3c:4d:e1:43:cc:15:44:4a:82:13:03:16:
b1:c4:ff:7e:ef:0e:ff:66:2d:47:2e:aa:c0:42:aa:
c0:80:06:c5:24:fb:1f:1c:4c:d0:84:1e:c0:6a:31:
a8:57:28:8e:e6:e1:05:80:57:6b:e2:d2:a7:24:eb:
39:2c:ba:0b:c2:29:2d:e1:1e:2e:46:5c:2c:ee:d8:
9e:5a:cc:9b:cf:1e:9e:05:37:74:21:5f:44:79:ad:
7d:0f:47:a5:b0:cc:52:d3:bc:9d:e7:c9:a6:3e:01:
0b:34:47:e4:0e:62:09:c7:08:b8:a3:df:d2:b1:89:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:83:CB:44:C8:E7:50:D0:D0:51:6F:53:E5:23:0C:B6:AD:B0:EC:54
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c1:30:9e:05:bb:27:88:52:19:f7:28:77:52:65:72:d6:ab:
f2:da:4b:6d:fb:92:a8:d1:71:a2:c9:60:e5:fa:f2:ad:de:0f:
47:70:de:5e:26:79:93:c7:d8:f7:27:0f:58:c4:93:3c:88:f1:
07:b8:f8:c4:5d:24:c6:e3:df:d6:1e:bf:23:e8:8d:04:e8:2c:
9c:f8:56:75:f7:b7:77:1a:83:c2:52:a1:fd:d7:26:ff:95:23:
2e:43:de:3e:8f:bb:45:ff:a9:88:cf:3a:1d:fe:f1:3d:c3:d6:
0e:65:ec:c5:6b:33:d6:8b:fa:76:8e:ae:17:ac:03:0d:53:a8:
70:c7:9f:93:85:4c:1f:14:3a:0e:17:07:c8:51:96:80:3a:c1:
8f:8c:0d:d9:0f:c0:73:8f:df:3e:39:ea:3b:6b:fa:f9:67:b6:
86:86:05:d2:75:eb:db:a2:4a:8f:3d:9c:69:10:0c:07:dd:23:
65:0e:38:48:21:fa:80:22:e9:a5:fc:d5:88:58:36:bf:39:2f:
dd:3a:05:5e:02:31:1d:3d:0f:55:06:77:aa:ab:ab:9e:93:49:
4a:30:68:78:2d:66:e5:ec:b7:ac:bf:4d:05:3f:10:e1:cc:9c:
25:a5:69:65:b7:dd:63:c8:49:02:11:b4:de:1e:8a:da:e4:29:
9d:c2:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:40 2025 by rpki-client