Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: tPSW6jxKxoREN+AAofgCvuk2p/rdWWy+Y1LBhk5OXBo=
Subject key identifier: E1:D7:93:CB:30:6F:9E:9F:18:10:69:54:5E:90:EB:45:4A:9B:85:23
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 019A7225E1D57986563786284EDC68AE116C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 04D7
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: pUdwMTjylHQjkGdY4/SbtAoEVEV64g5EWkSSV0wH4zY=)
2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e1:d5:79:86:56:37:86:28:4e:dc:68:ae:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=e1d793cb306f9e9f181069545e90eb454a9b8523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:86:53:f8:c2:a9:82:a9:f3:44:57:ae:97:
b9:a5:c7:8d:c6:af:19:27:33:6e:56:67:9f:be:db:
9f:f3:23:de:89:b3:3b:a4:34:5c:d4:38:85:77:16:
ce:91:87:61:3a:b1:5d:1e:ae:3f:50:37:3f:ee:10:
0b:90:9f:23:d0:e4:95:a7:35:05:c1:4c:ae:ee:17:
e1:59:89:c8:b3:b0:39:cc:c1:0f:a4:35:98:c4:23:
64:32:5f:b3:1d:8e:9c:ff:3e:8c:12:3c:6a:f3:e4:
11:59:12:9e:25:33:b0:8a:77:d3:45:a7:ee:2a:f0:
c7:f4:f1:78:bd:58:ac:20:ac:a9:07:92:f3:c9:7f:
62:f4:b1:4e:9f:fe:52:26:9e:3a:35:19:38:8e:c5:
8f:66:ef:e1:d5:63:e7:9d:41:93:90:ba:0c:48:bf:
67:8a:ba:01:eb:6f:79:de:af:69:ec:13:2d:2f:fa:
6d:ae:23:42:f6:d3:e7:f8:3a:40:17:78:6c:b1:66:
3f:76:c4:06:b5:7d:c4:62:77:ce:95:a1:d1:24:d5:
51:e7:d8:e0:bd:39:c4:87:32:40:e2:57:60:66:fa:
c2:98:fa:0b:f3:8b:40:89:77:f3:87:b5:34:ba:f0:
c3:2b:23:a9:24:9f:29:a8:58:c7:9f:ba:9e:21:28:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:93:CB:30:6F:9E:9F:18:10:69:54:5E:90:EB:45:4A:9B:85:23
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:94:4a:c2:a7:5e:fc:be:df:ea:4b:6c:a7:d1:36:b4:10:
28:00:13:09:1c:f3:f0:44:e7:fa:8d:f7:96:c5:85:89:cc:40:
77:92:e5:e9:ee:ea:3e:97:93:52:07:1a:3b:83:eb:aa:19:ca:
26:2c:98:d6:21:08:e1:74:c5:08:1d:a6:10:2f:b3:cc:e5:d7:
84:20:46:10:9c:47:d4:2b:5d:f4:9b:97:46:ac:a8:58:26:ec:
69:ce:47:2a:ac:4b:ab:84:6a:e1:4d:5a:78:95:d1:81:3a:c0:
b7:24:ee:98:ee:d0:af:2f:1b:06:37:b4:fc:dc:e1:3e:69:c5:
6c:87:33:64:fb:76:83:52:5a:99:bb:2d:d9:cc:e5:06:11:9f:
83:0b:a6:54:53:b0:b9:c6:c5:92:8a:d7:f1:72:36:5f:8a:3a:
b3:44:90:22:55:12:79:25:95:7e:77:f4:21:ec:49:6f:04:8b:
cb:34:98:60:94:0f:5c:2f:4b:47:d3:76:f4:0c:9e:cc:99:f8:
e0:a5:95:d6:11:db:ca:a8:70:ba:78:62:79:47:9c:94:05:69:
44:be:19:8e:29:e2:cd:ae:77:a3:d7:f3:80:82:96:00:56:7e:
83:01:5f:29:3c:be:25:28:42:1c:dd:c1:eb:81:b7:ed:3f:05:
c7:2a:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:10 2025 by rpki-client