Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: C5J7MbXHUUjcumjmUyBUUSRHmU99oaD3kHbOOEhxaMg=
Subject key identifier: 23:34:AF:38:6A:B4:DF:7D:E9:32:E7:33:05:BB:0A:80:77:30:8D:81
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 019A72936900B36FD5100AF203B93FEDCEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0E3C
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: spI4xcEhvSMULzVHRzT9dXbOmILyb3NTl69CzgS1JeM=)
2: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (hash: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:69:00:b3:6f:d5:10:0a:f2:03:b9:3f:ed:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=2334af386ab4df7de932e73305bb0a8077308d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:b6:ce:6c:d9:19:f8:be:a0:f4:74:33:d8:
0d:18:96:79:5b:a4:91:e2:e9:68:48:aa:32:a8:fd:
3a:a7:73:9a:6c:da:6f:c4:92:b2:ae:e9:8f:d2:ba:
26:8f:1d:69:d2:f4:e8:b2:a3:6d:86:23:e9:28:fe:
92:f7:64:d5:82:09:e3:09:65:8c:4f:b9:57:51:6f:
5e:4e:61:30:51:37:da:67:ae:c8:45:bc:9f:81:5d:
ea:1b:ef:e3:9a:2d:78:2d:01:fb:1d:86:54:f6:7c:
16:7d:c7:6e:d8:1a:e8:8b:a9:ef:98:de:ee:f7:2c:
89:17:54:ed:da:68:b2:55:7a:ce:12:bc:cd:61:41:
38:d7:8a:9e:f4:4b:7f:ca:e7:6e:05:76:b7:09:e4:
31:0e:b9:ed:15:12:cc:e6:42:f5:38:4b:d8:dc:9e:
dd:36:d2:dc:55:ee:cc:8a:5f:63:6e:2b:ad:df:6e:
e2:12:df:bc:1c:99:73:be:f2:1e:18:9f:27:cb:3a:
84:1c:f7:40:68:b6:98:f4:c8:91:7e:34:24:e0:2e:
03:f3:ea:e3:74:01:9f:d7:cf:ab:68:88:8f:35:e2:
17:9b:4c:a7:60:99:61:03:b1:2e:5b:0e:64:14:41:
d5:bc:04:6e:c5:7f:45:94:74:46:6b:d2:64:4a:8d:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:AF:38:6A:B4:DF:7D:E9:32:E7:33:05:BB:0A:80:77:30:8D:81
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:54:0c:ff:59:37:0c:39:b3:1d:05:0f:5e:8e:01:4c:9a:47:
2e:b1:b9:b9:3f:6f:09:0c:3c:1b:75:43:a1:d2:ec:db:e6:d2:
92:21:30:a0:bd:c5:76:68:49:6c:3c:49:06:c3:ac:e1:01:3f:
bb:02:b2:96:13:17:f2:f1:a2:35:c1:2c:8a:43:6c:d9:8f:18:
de:de:33:72:bb:fd:3e:a4:04:fb:5a:fa:af:9f:b2:e5:f7:c6:
8f:49:68:8d:2d:30:b5:b4:e2:fd:1a:75:86:94:83:2c:e0:a7:
9e:b1:c8:6e:43:41:78:a8:32:57:02:94:96:2a:21:a2:df:80:
6c:65:26:a3:67:d6:8b:b5:c9:65:6f:c5:7e:fd:74:48:61:24:
65:27:79:56:fa:45:2f:41:01:43:ac:7b:18:12:32:b8:ee:dc:
cf:69:1e:c7:7c:39:4d:1f:b4:0b:58:fa:42:5b:fb:19:c7:6e:
3d:99:25:08:08:ef:3d:49:21:b3:73:60:47:e3:23:ab:16:da:
fb:03:49:c4:b5:65:bc:d4:f4:29:30:ec:e9:4a:4d:32:b7:f6:
bb:a5:47:1b:2e:93:72:fd:a4:da:59:6f:e4:5f:be:c7:cf:dc:
db:23:07:7e:65:2b:fc:22:74:5d:29:91:7b:47:5a:c5:5b:f9:
90:34:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client