Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: SmIDiR79M3imAhtOC/kvN6Nzf/kk+E7hr4OhTwYyYLA=
Subject key identifier: 51:3D:E0:33:86:27:4C:96:9D:CC:56:40:84:FE:38:2B:DF:7A:EE:29
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019A7293B67764D3F7DB37252DB4A5640AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: KEdCQERcgfzeHugHxu3Xf1qXDbmpVNQUNTVW0AN+vEk=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b6:77:64:d3:f7:db:37:25:2d:b4:a5:64:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=513de03386274c969dcc564084fe382bdf7aee29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:ca:e7:e3:4a:26:33:6e:9a:25:df:6b:c6:
17:19:ba:a7:3e:05:77:97:b5:0c:6a:ac:47:c0:b0:
9e:bc:6f:62:fd:fa:2b:46:65:43:ac:4e:06:ab:14:
35:fc:cd:36:c7:b2:74:6a:81:0b:ab:69:09:2e:28:
1b:4c:b5:54:29:22:e6:56:2c:f5:7b:ca:d2:73:c0:
62:b3:02:8b:c7:ae:b5:96:b0:09:b4:e9:31:f1:9f:
ac:5c:af:7e:07:bc:a5:77:b3:bf:fc:02:64:86:c7:
32:de:22:c1:be:e3:46:09:40:21:ae:50:07:9f:bc:
9d:65:45:18:14:2a:a4:0a:f4:b9:0e:15:ca:26:50:
ad:4a:2c:6c:2d:4c:b9:90:a3:7f:58:2b:ee:14:d0:
52:80:7c:86:08:3a:0a:41:f1:c4:36:20:70:3f:13:
24:cd:24:0f:6d:84:0f:d4:35:32:4d:25:b5:e8:a7:
2d:ea:0d:ba:50:7e:3b:60:c9:a8:c4:88:c1:67:16:
cc:78:d3:7b:60:9e:9e:e9:3f:5e:56:ba:6c:c8:54:
93:4c:54:41:a4:4e:67:98:ba:da:6b:cf:96:64:1a:
4d:33:77:da:8f:27:53:fa:0a:61:11:89:28:87:e2:
78:a5:88:fa:27:7d:ec:0a:db:0d:6c:38:8e:ef:26:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:E0:33:86:27:4C:96:9D:CC:56:40:84:FE:38:2B:DF:7A:EE:29
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:60:63:a0:2b:36:9d:21:59:43:fb:d2:15:a0:dd:ec:fb:
df:58:e2:92:a3:52:42:9b:c2:dd:a4:85:6a:fb:6c:b6:b4:e6:
90:7f:cb:14:70:20:3a:06:dc:9b:9c:1b:87:55:9c:51:d8:a6:
e3:d4:01:e1:ab:2d:0b:91:50:85:f1:ef:41:2e:3a:22:87:b6:
75:7a:ff:04:b9:96:21:3e:ad:31:f5:58:9c:ba:98:6d:8f:a9:
8b:1a:75:fe:d6:5a:de:82:e1:86:38:66:d1:84:22:47:18:99:
62:9b:65:2f:ae:f2:31:b3:6e:e2:36:c0:71:f4:d3:45:06:e4:
f4:59:40:09:6a:4f:e2:24:f1:51:79:1e:24:a4:b1:5e:56:f4:
bf:4f:a7:40:11:f2:3a:55:1b:56:b9:60:ae:02:bb:a9:34:34:
02:05:41:5f:dd:78:3d:27:2f:2a:6d:d6:37:a5:d6:1b:b7:80:
80:d1:01:28:ef:74:f8:45:04:38:c9:73:17:30:e7:a5:75:2a:
2c:52:32:84:39:c0:2c:41:ba:b2:8c:36:af:b1:a6:07:48:08:
e6:41:81:dc:09:e4:a0:95:f2:6c:df:8d:fb:bb:06:ba:cd:7d:
48:09:1e:e1:7c:c1:c1:d7:30:bc:d2:6b:ee:f3:5d:40:41:86:
d2:53:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client