Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: OI+uZSYbP3Iqa+1iQPPJluxIggMceOiNm6rsu+IyQVk=
Subject key identifier: C5:8B:75:1F:28:70:C9:96:66:86:C5:6E:8B:F3:3B:22:6E:80:43:01
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019A7225DBA9EFBF66CCE10F5EF3A80FF7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: 3TS33nlDgL6nAOyg1aHzRhh1UucVFzPqpdSYx2SzX+o=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:db:a9:ef:bf:66:cc:e1:0f:5e:f3:a8:0f:f7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=c58b751f2870c9966686c56e8bf33b226e804301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:d2:68:c2:fe:35:73:a8:f2:75:6e:30:b1:
0d:a4:a8:04:11:49:bb:ba:70:2f:cd:5f:b2:a1:c6:
31:95:4c:1b:70:91:51:e1:63:ee:72:e8:50:99:65:
e9:2a:46:54:e1:c0:bd:e3:fd:d8:f6:1a:ca:5b:1f:
e9:59:ef:de:d2:c3:57:43:87:06:b5:33:fe:e9:c6:
66:77:4b:83:a7:1d:96:7c:11:1b:fa:3a:78:16:44:
d0:86:91:e6:ce:59:27:5d:0d:a6:7a:f1:10:c2:4f:
d9:dc:41:ba:3a:c0:b7:ac:3b:8c:8a:14:68:81:fe:
80:32:3e:23:94:de:b7:20:09:17:6e:d8:42:85:02:
7b:91:31:87:ac:ac:35:b8:1c:09:97:11:c6:b5:56:
3c:2d:26:e6:fc:1c:14:0b:eb:55:1c:7e:9d:ea:fd:
aa:54:ba:06:c8:6e:93:11:66:1f:d9:34:ea:91:73:
e5:ef:08:ef:ed:86:6e:13:c2:44:1b:59:73:d5:ab:
58:18:c8:66:84:92:2c:9d:b6:55:ee:8a:3d:88:d9:
29:0a:b1:1f:75:94:11:e1:44:0f:b1:c8:5f:fc:a7:
d0:9a:52:12:39:4d:be:32:f5:35:99:38:76:d8:4e:
91:63:a4:66:cc:bf:b6:af:e9:50:d0:07:68:f6:56:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:75:1F:28:70:C9:96:66:86:C5:6E:8B:F3:3B:22:6E:80:43:01
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:57:bc:8d:01:bd:bc:44:1a:50:63:bc:e6:f0:75:f0:6f:
ff:f7:52:d4:2a:22:f8:a6:3d:31:82:df:50:99:22:37:4d:68:
df:87:a2:e8:d8:d8:69:d5:3f:3a:9b:66:21:0e:2c:80:b0:15:
a6:5a:53:7a:27:e3:1a:d8:09:1c:a7:ac:44:bd:ed:29:df:ee:
68:1e:ba:2f:02:f6:27:52:f3:e6:84:09:8c:40:82:87:aa:fd:
3b:a0:d0:a4:8e:51:cd:5e:87:23:c7:14:2e:ab:a2:08:30:96:
8d:8f:97:04:ad:26:4d:8e:24:c5:de:3e:19:aa:f8:4c:d3:db:
bc:36:f1:27:13:1b:6a:fd:eb:a8:cd:dc:c3:35:bb:13:07:19:
be:14:8c:8b:85:f7:87:98:cf:58:ef:8d:ca:7d:2c:7d:3f:17:
f1:ec:a7:96:ba:d5:0e:4a:a3:42:78:27:f0:d4:65:be:6a:da:
2b:7d:c0:55:01:8a:8c:e9:57:b2:b1:fd:24:82:3b:e7:42:bc:
da:65:fb:54:fd:d6:e8:3f:64:c4:23:90:41:36:1e:ad:00:1b:
2a:4f:9f:7d:b5:68:04:ce:c4:98:1a:39:b3:78:3a:1a:72:f2:
0b:e9:48:8e:96:bd:95:38:de:14:03:2d:00:40:3d:79:d8:58:
d6:8e:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:58 2025 by rpki-client