
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: 6+z9YPRRQTHt26bSQ1Jp+rC1Lp9VP8R05F+l0BFs+xk=
Subject key identifier: 03:9C:65:BC:65:D7:90:4E:6D:32:1B:FE:0B:9E:B7:63:FB:43:02:11
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019A0DB9C0BD386F56F81107BAB28C39AE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0A4F
Signing time: Wed 22 Oct 2025 21:01:08 +0000
Manifest this update: Wed 22 Oct 2025 21:01:08 +0000
Manifest next update: Thu 23 Oct 2025 21:01:08 +0000
Files and hashes: 1: 3Ti0VRFQXYG5OETL6H3xqGURx7g.roa (hash: wOZdgFUImj0qeOyuyvxGEJ5Ru8WQDiyIL/ijF462qBo=)
2: 7XozsJg8cESPgPLOlnZdDHuIIkA.roa (hash: NkHcRJjWveOKr/3lsnLotWjQFQWLhxVwR81b0kSFErE=)
3: 9K541zTwKzkXQVxivY6RtgnMtfc.roa (hash: 2IzU5yJObIbCyE/+ehHr5lv63aMpYtOrcZkh+bZRUaU=)
4: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: wSPjtM7Pv1Abhp2ycPojuVB470uTyyqOxLyCwh9/3SM=)
5: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (hash: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=)
6: GqF55OK8p88k_RA7XjSbJsgeScE.roa (hash: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=)
7: K00tT5cZnNVXDF_Or6n_nc_0xRo.roa (hash: s/PaO+NasRBZLSycpt6mJjPENaMQFjfT/5hMIEO7t08=)
8: p0H-UvlbJAxkRpZM50LM0HMaTh4.roa (hash: eqbVXmLmRGS+69kMEz9SPkK3Rw5wmLRM/rZ2KSdZI3s=)
9: zOfa10bmz5mA01whN-vRAcpYyD0.roa (hash: ZjeDW/sMSDaC9yWADq68Sh8uF/rcU0PJexnNWW9mYAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:c0:bd:38:6f:56:f8:11:07:ba:b2:8c:39:ae:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Oct 22 21:01:08 2025 GMT
Not After : Oct 23 21:01:08 2025 GMT
Subject: CN=039c65bc65d7904e6d321bfe0b9eb763fb430211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:b0:f3:9c:3e:14:4f:6f:df:23:d4:4d:e8:
dd:05:29:76:0d:1e:98:ac:b6:a1:62:52:5c:20:79:
24:ec:79:62:63:c0:ab:dc:aa:e8:b2:0e:9d:92:a3:
d7:b7:c2:05:9f:ee:f2:07:61:ae:be:ff:a9:51:84:
dc:0a:ca:f2:64:1b:12:97:73:60:c2:53:38:d2:f7:
ed:a7:24:52:59:c9:7b:f0:cb:e7:57:84:0f:10:2d:
07:23:b9:87:0d:9c:0a:8e:6a:3c:d2:69:d3:89:a4:
26:34:35:d5:71:12:55:e2:3c:c5:1f:cf:4b:7c:52:
af:bf:94:73:7f:80:05:fd:e4:81:46:26:38:e5:7d:
c4:ce:2c:f4:e3:b4:7a:86:96:e5:a6:c6:b0:8e:e5:
0f:a3:b2:fd:dd:2d:87:2f:9c:48:9e:59:fc:c5:e1:
13:ae:2c:7f:01:01:cc:ad:ee:2c:83:74:de:66:5f:
36:62:5b:50:1c:74:5a:5e:66:9c:15:71:24:fb:cb:
8c:84:e7:ba:38:6d:a3:7a:aa:64:28:ae:83:33:6a:
6e:90:6c:80:08:a3:60:40:65:39:96:d8:03:98:e6:
18:21:33:6a:ba:5d:f4:57:c1:3a:00:a8:91:ea:2a:
8b:cf:76:60:cf:b1:c1:40:ed:3b:a7:25:71:f7:78:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:65:BC:65:D7:90:4E:6D:32:1B:FE:0B:9E:B7:63:FB:43:02:11
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d9:06:f9:19:66:f7:e0:92:5d:fd:3b:84:48:77:90:3a:57:
08:9a:a3:ab:3f:95:dc:b5:92:4e:d9:db:af:3a:1a:b5:2f:9a:
21:e6:73:67:e8:8d:c9:d9:ec:01:92:1f:d2:00:b8:14:ec:4e:
0e:37:76:0f:6a:53:85:59:f0:eb:57:2c:2e:d3:55:d6:2f:88:
0b:6b:0e:5b:ce:54:01:ac:b6:76:d3:15:8f:56:84:ab:3b:ed:
9c:a2:37:42:c8:a9:4e:1c:ab:66:1e:60:10:42:bc:88:5b:3c:
70:89:c5:6e:5a:7e:bc:87:7e:b9:01:a0:8b:77:68:c6:3b:1f:
8e:8a:90:72:07:34:c2:3a:b0:7d:7a:7b:42:52:41:bd:51:7a:
5a:f3:bc:30:d3:13:42:db:ef:ef:b2:79:a0:c9:12:6f:c5:56:
91:2b:9b:a7:ad:62:02:23:cc:48:01:ea:9a:29:3a:ba:7d:2e:
48:26:4b:ac:8e:c6:ef:20:05:34:0c:07:e5:bc:7d:6c:f3:36:
92:f9:f4:7e:00:61:5c:9a:f3:9b:f1:ab:01:3d:1c:22:a4:04:
c9:5a:f1:1e:0c:6e:d9:bc:ab:b1:40:00:80:67:11:67:dd:4e:
e0:e0:86:5a:b2:4b:54:f7:45:6e:73:6c:65:34:b6:bd:7e:34:
66:74:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:17:26 2025 by rpki-client