Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: fndJ7AqIUZUoIuAybrAy9ySXIz37w5LxM6Mi8/T1ykY=
Subject key identifier: 7C:CC:99:AA:59:AA:A4:E4:89:85:FF:78:94:D8:8B:5E:87:6B:AE:B9
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019A7293FC28C72ED229AC6A34F565150678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0DC0
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: VZ8i377x+iP1AQnAMZ3TjsLisZ1YqNRH03HFZW7VC0E=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:28:c7:2e:d2:29:ac:6a:34:f5:65:15:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=7ccc99aa59aaa4e48985ff7894d88b5e876baeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:39:6c:d7:5a:2e:fa:db:6a:b6:0b:38:01:
46:01:bd:85:e8:51:23:43:20:a8:15:9f:51:b1:ac:
3b:89:6c:32:e9:7c:ab:bc:66:36:8a:09:27:2d:8a:
53:3b:a1:e4:7d:40:ff:0f:b4:83:dc:e4:bd:36:bf:
c7:e6:b1:6a:1a:80:0c:16:b9:1e:3d:56:00:21:42:
17:c2:20:db:f8:10:37:47:e3:d1:d1:6d:87:89:bb:
73:dc:7b:65:3b:80:19:02:38:a7:9f:a0:9c:6b:1d:
10:5b:c1:58:c6:ba:dc:14:d1:8b:94:23:d8:78:ac:
f4:74:bf:21:73:fd:ac:29:fb:67:50:7c:b5:2d:5b:
32:b7:82:64:71:8a:14:d5:d8:d2:83:fa:59:d5:4d:
70:9c:9f:c7:7c:21:ac:ff:ed:d9:89:e8:99:c6:d0:
09:e8:f8:27:66:6f:2f:93:10:60:e8:66:cf:64:14:
40:bc:24:33:4e:68:5c:d3:ec:82:6a:4b:81:ea:5b:
bf:cb:45:91:b8:a8:8f:ad:96:84:5b:1b:73:a5:0a:
fa:12:21:12:9b:93:03:c2:a9:b5:1a:e8:c0:de:a7:
29:4f:db:6b:9f:55:8a:69:be:dd:19:bb:94:4e:74:
e2:13:03:48:18:d7:cb:e9:31:6c:3c:54:59:63:1e:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:99:AA:59:AA:A4:E4:89:85:FF:78:94:D8:8B:5E:87:6B:AE:B9
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:f4:6c:3a:d0:f3:ff:31:2d:82:5c:a9:db:ab:3f:30:b3:
b9:ce:8b:fa:7c:eb:7c:b7:66:71:32:25:67:e0:0d:5e:ef:a0:
9d:78:c5:8a:17:18:75:fe:e0:17:d9:8d:8c:95:27:da:24:88:
b0:e3:7b:01:cf:55:9a:ad:c1:a3:d3:9e:6a:d5:8f:92:50:97:
22:76:25:bc:76:ce:db:b5:53:81:42:b6:3d:34:b5:ab:d7:7a:
45:ee:4a:63:26:4b:84:76:e1:13:45:4d:84:b6:65:d1:08:27:
ac:19:7e:44:6c:37:2f:30:76:6a:36:1b:20:68:c7:08:09:2b:
27:09:f3:02:d8:d6:ea:17:6d:7a:43:9c:b5:64:d1:99:27:3e:
50:ff:67:36:5d:e3:15:5c:f8:34:fa:32:80:4c:8a:2a:55:30:
10:78:8e:3e:d2:0e:31:d5:ac:41:64:b9:e3:55:56:d0:14:9c:
9b:2a:89:6b:80:7f:65:6e:e7:af:19:f1:f6:6f:b9:06:bb:ed:
ed:d3:1e:b9:9c:9f:04:ce:26:cc:b0:3d:08:80:b1:49:36:b9:
5b:d5:99:08:f2:15:5d:a2:47:9d:b4:9a:ce:ac:1e:f8:ae:05:
bc:dc:4d:f2:0c:f3:ce:78:4e:7d:2d:d5:15:0f:3e:09:17:bf:
cf:53:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:42 2025 by rpki-client