Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: A819efs+Q4Pcx/1MIyAY54tJaEIfVR0K0XL67yBTvy0=
Subject key identifier: 33:4E:76:90:48:D1:08:DD:02:B4:03:47:91:E3:FA:DD:48:60:06:FD
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019A7112B8362A24073CC33B00090A72EBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 07F5
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: WC7tiNEIHuG1/7Z7MY7QdGltYSXAAAmysGsrElABAqA=)
2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b8:36:2a:24:07:3c:c3:3b:00:09:0a:72:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=334e769048d108dd02b4034791e3fadd486006fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:1a:e5:b5:a2:3d:a5:5e:0f:7b:4f:e6:e8:
4b:7b:cf:8e:d9:25:22:be:18:72:83:ef:a7:57:ce:
f3:5b:8c:57:c1:55:6d:87:0d:d9:f7:ae:36:12:cf:
ac:63:5a:70:65:68:f0:fa:a1:2a:37:53:bc:b1:d2:
0f:29:06:5e:22:40:d1:8b:e4:8c:01:b8:b9:ec:57:
1b:1e:b8:a0:b3:d7:f2:5d:24:51:f4:3d:ce:7c:ac:
68:56:05:38:0e:23:31:3d:fa:d6:2f:ec:6d:1b:3a:
b8:42:b6:69:cc:1a:ab:ae:fd:ff:ca:8c:e1:ec:89:
22:70:fc:6b:1d:23:f4:ef:d9:3b:65:93:da:d6:b6:
e0:24:76:f0:49:dc:11:41:ec:e2:6c:1d:72:2e:16:
70:e4:0e:31:1c:79:d8:56:01:ea:7d:ce:32:fd:51:
38:2f:c2:bb:e7:60:2e:a9:0c:36:2b:bd:4e:62:08:
0f:b4:03:e1:7f:bf:e2:e6:17:6a:60:fd:56:57:90:
95:72:81:81:e1:3d:95:4e:ac:e2:5a:30:41:cf:73:
a8:a3:24:64:40:09:39:11:af:df:44:1b:57:6e:0c:
4f:e3:9a:77:7b:d8:84:f9:31:0a:0a:f1:d6:99:3e:
f2:0b:d1:b3:81:8f:cc:1c:a4:3c:93:f0:61:54:07:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:76:90:48:D1:08:DD:02:B4:03:47:91:E3:FA:DD:48:60:06:FD
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:7b:02:61:0e:6f:37:ce:8f:c9:29:09:37:83:99:08:76:
b9:e7:b5:f7:8b:56:f5:34:4e:1a:22:a9:0d:52:b7:22:11:bc:
88:56:af:51:8d:80:65:cf:c8:d7:22:5b:75:38:ea:6a:ec:07:
a9:23:97:46:34:99:30:d1:9d:a0:17:ec:76:18:23:7b:6e:b8:
1a:f9:0f:bc:70:14:14:fa:40:42:e0:29:ef:4b:28:fb:35:dc:
6f:8d:39:a8:18:c6:14:11:e7:ce:e8:4c:9a:83:22:55:c5:b4:
1b:b7:8c:7b:ce:12:09:9d:a3:9e:47:23:12:db:63:8e:9b:9b:
34:59:d2:74:79:20:3a:e9:a8:15:f2:75:66:f5:4f:c6:dd:54:
6c:56:89:61:e5:ca:66:a4:11:72:83:24:b7:e6:29:79:01:db:
f0:6f:cc:30:d4:f8:9e:97:b0:16:1b:c2:03:d8:53:06:46:23:
1d:ba:fa:f1:06:19:08:eb:ea:a2:02:45:dd:ae:eb:0b:a2:ed:
00:bb:60:e4:3a:a2:4b:b4:0b:60:06:f1:ce:6f:41:08:f1:bd:
d3:0a:22:9e:3d:9c:91:ff:89:ef:e9:dd:8b:e7:31:10:77:92:
88:5f:df:80:6f:0a:7c:5d:5b:f3:20:2b:52:ab:57:4f:a7:3e:
5e:e0:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:29 2025 by rpki-client