Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: hL+yx6P5qR8JJm9iqyInCNK2o5u8vAhoKCZCzkdG9r0=
Subject key identifier: 25:26:D0:9A:DA:9D:94:A4:32:52:43:C2:7A:B6:2D:F8:38:26:92:B3
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019A71B87D0E524A8468DAE94B998B9842D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 125E
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: KBFn7NF8sJU1ob6ZUrJaCsATdfopcjbsRzyhAE7ZzKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7d:0e:52:4a:84:68:da:e9:4b:99:8b:98:42:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=2526d09ada9d94a4325243c27ab62df8382692b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:3d:72:2b:5c:72:ea:12:af:fa:9c:00:f6:
6b:1f:9b:4b:1b:9f:c5:37:56:b7:02:02:19:b0:93:
41:df:9a:55:e1:ad:71:5b:4b:a7:89:d4:93:ec:13:
51:44:ab:ff:f8:c1:98:4f:20:05:97:c4:d0:32:cd:
93:c0:43:c0:4c:aa:85:2b:75:a6:b7:a1:4f:d5:4e:
8c:84:91:87:bf:78:57:bb:4b:27:a0:c0:b4:ea:7c:
25:e8:a1:83:ab:7b:d6:95:eb:ad:0d:71:c0:55:53:
d9:40:59:28:d3:52:ce:82:58:18:49:9b:1d:84:32:
04:e5:35:4e:1b:a5:0b:3c:45:f5:90:eb:55:a7:5a:
54:bf:d3:83:2b:e7:bd:e2:95:2c:bd:5a:92:b9:fb:
dc:bc:06:58:c0:75:d0:b6:09:04:fc:a1:a3:17:93:
71:db:0b:1b:5a:60:31:28:5f:15:bf:71:11:78:9a:
c5:56:88:b4:b1:ba:48:3f:08:13:c1:4d:c0:3e:fe:
88:d3:00:f0:6f:c4:54:f0:cc:90:e6:da:66:0a:b8:
c2:bf:3d:e5:f8:46:21:b4:c5:9d:e8:c6:a4:95:c9:
c1:a2:53:db:84:f8:3d:69:18:40:6a:f0:0a:44:c4:
99:17:59:a9:55:f7:95:8e:55:ec:2a:d5:17:74:b8:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:D0:9A:DA:9D:94:A4:32:52:43:C2:7A:B6:2D:F8:38:26:92:B3
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:36:4b:43:66:c0:c7:2f:9b:11:cb:c2:18:ee:99:97:28:19:
85:2d:e2:8e:96:97:33:39:57:5a:99:26:46:4f:86:ca:48:50:
6b:a3:c6:cb:84:cf:4e:62:e4:26:b2:e4:b8:35:78:f4:98:39:
9b:26:d4:c2:92:3f:c2:20:ff:8a:9d:72:fc:70:aa:e6:d0:5d:
cb:52:c4:c1:d9:ef:59:23:31:bc:7d:f1:7d:0e:e2:cf:c5:06:
f6:9d:f8:e0:b3:82:e6:bf:e0:e5:47:34:20:bb:80:ca:44:2a:
dd:22:56:4b:37:c1:73:ee:68:bd:06:e7:09:0c:d5:a0:da:4d:
b9:c2:03:da:97:71:0b:a7:e9:0a:65:37:08:64:31:99:45:81:
bb:07:34:29:40:b2:5d:95:d9:3a:57:53:98:59:4b:57:d6:fc:
52:41:15:4b:20:dc:ff:4e:a1:42:95:ee:70:46:e9:29:30:07:
2b:68:86:d0:2e:45:cc:d8:09:0b:27:3a:cd:3d:48:bd:ce:a7:
92:92:49:84:ba:4e:b8:7e:c2:8a:61:f8:17:6e:88:be:31:e5:
e9:6c:dd:1f:dd:3a:e9:de:14:90:d7:b4:e1:e4:8f:85:e2:ac:
7c:a4:c4:f1:9b:b6:cb:b7:5e:3b:c7:70:3f:a6:12:64:da:dd:
bf:de:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:55 2025 by rpki-client