Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: LoAHd8zNdSYNWbe+d/X0uNMyjBEPzoYSmdZ2cznzv2E=
Subject key identifier: 97:E5:6A:C6:E2:60:52:7A:0B:9A:F3:53:1E:C5:B5:97:E1:D9:61:BC
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019A7293834D65C3B7C5D8C45C69D001DED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0818
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: WkG+8WZRsZ4btsje0QehhmHIBwA+a3L6FCWEg2oOENo=)
2: XbRIFdQP_RXO6IV-cEyYaj6kxNs.roa (hash: 3o+QHeiT4KUONTiQxPqZMl4amlORzK8bXLG3POsUfAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:83:4d:65:c3:b7:c5:d8:c4:5c:69:d0:01:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=97e56ac6e260527a0b9af3531ec5b597e1d961bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:17:ef:f2:63:81:d2:9f:82:38:01:46:c8:
fa:b8:07:80:6e:a0:34:f0:3c:15:d6:19:a0:0a:65:
03:2d:ab:ae:a0:ed:c3:7c:c9:db:b2:f9:19:cc:6c:
72:f9:f2:a0:84:64:73:db:ff:b5:bc:4c:c7:15:d5:
5f:37:8f:65:b5:75:01:2e:1f:3b:34:6b:2d:6d:e7:
2c:3d:9a:c6:f3:91:79:51:1a:b4:e6:32:fb:94:ca:
33:54:ca:2f:f4:74:d1:60:31:5f:fd:79:62:20:1f:
43:b9:8e:60:79:20:e6:1f:5f:ee:96:e6:a1:f6:81:
2a:e6:a0:93:56:12:9f:14:0e:79:be:c4:3f:c8:1c:
3c:55:fa:e1:4c:6c:4a:53:84:07:fa:cd:0e:fd:15:
24:5a:03:00:de:36:35:1b:0c:ac:1a:1d:c3:93:6d:
13:3b:0c:0c:ab:17:29:cf:11:b8:9b:1c:20:35:14:
44:e0:9c:5d:e1:30:f7:84:3d:29:97:89:2e:d3:e6:
4b:a1:e0:91:b7:21:84:a7:84:bb:a6:f0:f9:ae:ed:
9f:c7:d8:0e:33:9b:96:e8:99:b9:e5:16:30:09:e8:
3f:ed:60:ce:3d:6c:4c:89:be:31:c1:ae:da:b4:74:
da:45:fa:55:5a:4b:64:51:c9:24:7b:f7:a0:21:26:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:6A:C6:E2:60:52:7A:0B:9A:F3:53:1E:C5:B5:97:E1:D9:61:BC
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:df:05:74:4a:0f:0b:1d:e9:7b:e1:2d:fd:a1:3a:ae:d0:
5f:c8:ec:f2:8f:a2:41:46:1c:24:70:ab:4e:7d:da:1a:f8:e3:
36:98:94:b3:1d:61:c3:2e:59:7c:cb:52:13:17:d0:53:c0:ce:
05:26:1d:23:8b:59:5d:eb:65:cf:68:a2:ad:4e:88:07:22:3e:
9f:42:14:dd:81:9e:11:67:13:e9:75:fe:51:1f:7e:33:5e:30:
ef:0c:3d:5d:29:bc:2f:0e:49:26:b0:ef:88:f3:6b:f0:d7:05:
ed:1b:76:62:32:c1:ed:c0:4b:64:ae:b7:e5:52:87:fe:30:17:
3c:d4:d6:7c:54:7f:ad:cc:73:b0:b6:88:9f:59:c9:65:04:34:
81:21:b4:18:ef:67:12:7b:cc:ed:7b:5a:71:67:ac:24:ac:1b:
76:ea:7c:52:7b:57:ae:32:cf:73:d2:04:c5:7f:e9:0e:2f:0e:
f6:ca:78:a7:df:f4:e7:d1:df:73:be:b9:3e:18:0b:84:87:71:
59:0f:b7:13:53:2f:47:62:f8:4c:ea:dc:16:e2:78:92:15:bd:
67:47:10:4f:8a:8c:c2:50:ee:2b:57:35:04:fb:f8:2f:2e:5c:
2c:9b:6a:48:f5:3a:67:d9:54:71:ce:b6:a3:4b:cf:3d:1c:76:
ba:63:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:13 2025 by rpki-client