Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: PDv75U/iQcAUATBMNsFbU/3jfXlc9AJ6Nmc+yKLkhhE=
Subject key identifier: 7A:D2:C0:61:B7:C9:5D:66:AB:B7:69:AB:D6:91:5D:E9:D2:37:90:90
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019A7226480F1BB38DFEE5CE2BA1CB51D6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 015D
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: ZE6x4oYcYsuSYtYqTRRmwT4ZlK+iXOgMdPV0JcRTUbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:48:0f:1b:b3:8d:fe:e5:ce:2b:a1:cb:51:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=7ad2c061b7c95d66abb769abd6915de9d2379090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:de:c4:79:66:ba:7e:bb:74:64:2f:f4:01:
7b:81:df:44:e1:a4:86:d6:17:fd:8d:37:4b:20:ad:
03:63:50:7f:55:56:6d:15:cb:d5:1f:31:3f:5a:c8:
a2:bb:e0:0e:54:d0:c6:92:7a:c4:11:33:44:9b:df:
15:f1:ce:0c:6e:42:32:99:50:1e:88:76:e3:bd:ec:
c8:72:4e:3b:31:cb:44:ef:6c:f4:ae:b3:ce:47:d1:
e4:58:95:cc:44:ef:17:7d:05:ca:8f:ac:d0:c5:9f:
e4:a8:32:fe:38:56:75:2c:ef:fb:01:42:48:03:7d:
9f:f8:ff:b0:0b:d2:29:27:87:9b:e0:3d:86:87:5a:
8b:03:ae:df:41:3b:6c:60:12:b8:ef:70:53:ca:b3:
54:3f:59:aa:bd:58:d1:1c:6e:ea:51:24:8b:1d:a1:
5f:be:e9:18:92:66:1b:60:0d:7e:5f:ba:43:c6:45:
99:1d:76:25:09:ca:58:c6:00:2a:23:d4:d8:d1:63:
f1:9c:d6:6d:29:c8:62:45:e8:98:2e:8c:fb:b3:b9:
60:3e:bf:32:93:c1:92:5f:dc:cd:81:2a:43:1d:16:
68:cd:13:55:c4:62:82:fa:1c:15:eb:14:31:83:23:
72:be:b0:0f:f3:25:2a:a5:72:98:23:99:ce:94:0d:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:C0:61:B7:C9:5D:66:AB:B7:69:AB:D6:91:5D:E9:D2:37:90:90
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:34:5e:36:b0:8a:e7:76:16:68:26:f1:e8:bb:fa:a0:34:
28:08:3c:af:97:ec:71:94:09:37:6c:dd:8d:b0:52:e6:40:a1:
43:d9:1a:e4:03:ef:06:3f:f5:ed:8f:d5:7b:87:cf:a9:9d:ed:
5d:37:42:3a:f5:4a:cf:de:4a:d3:f4:ed:30:2b:dc:c2:4b:73:
fc:ab:9e:e6:df:7f:ea:03:05:8f:af:de:e6:db:91:90:4b:04:
05:ef:1b:cc:a1:18:f7:23:a0:95:7d:93:cb:ec:75:c1:d5:d5:
1a:cc:23:ee:ab:a7:0a:fa:8f:d0:af:5b:e8:0f:e7:7c:25:a2:
be:47:c2:c0:66:2a:a0:d8:a0:f1:64:b6:08:9d:b2:da:dd:23:
11:42:4f:db:66:3d:06:34:9e:5e:58:a5:e4:9b:71:4d:4a:88:
95:ef:f8:e2:50:24:b5:37:ea:3a:cb:68:fc:a8:78:db:4e:ce:
1c:58:f1:6a:bd:f8:d9:08:fe:84:64:6f:46:51:38:5f:b8:41:
d8:cd:ac:f9:4b:99:67:51:ff:b3:d2:f2:03:00:c4:0e:6d:f3:
60:7d:d7:28:46:bf:ef:65:68:57:cb:96:76:b5:0c:0c:3d:29:
ac:67:08:df:e0:f6:56:ae:0b:8d:99:b1:0a:8d:cf:30:7d:53:
77:17:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:32 2025 by rpki-client