Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File: ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier: C3TlE764G459mTyaJM0k0gfRZYR7kpIJTUcq4WQdM/8=
Subject key identifier: 97:A4:49:FC:03:10:72:28:36:42:CF:E5:64:4F:CF:9E:94:35:0F:C2
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer: /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial: 019A71B985671DF393FA9AAF42014F3B6DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number: 084E
Signing time: Tue 11 Nov 2025 07:02:54 +0000
Manifest this update: Tue 11 Nov 2025 07:02:54 +0000
Manifest next update: Wed 12 Nov 2025 07:02:54 +0000
Files and hashes: 1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: TUq/kwZAL6BP3Vufa6R4frP0mdd3WTDZ+6mmjk7aPPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:85:67:1d:f3:93:fa:9a:af:42:01:4f:3b:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Validity
Not Before: Nov 11 07:02:54 2025 GMT
Not After : Nov 12 07:02:54 2025 GMT
Subject: CN=97a449fc031072283642cfe5644fcf9e94350fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:f7:dc:6b:05:91:7c:4f:85:d2:17:18:3b:
2e:d0:58:a7:27:71:ad:3a:9b:82:95:ae:9d:35:95:
cd:59:bc:20:8e:60:6f:0b:96:de:8f:e6:1c:f5:c1:
af:38:ff:59:3c:5b:00:7b:d4:3f:df:88:e9:07:a3:
87:82:bc:8e:72:64:1b:d7:46:01:9b:71:98:44:2b:
b7:b9:d8:8a:cd:65:1b:0b:b9:27:12:3a:d1:f8:4b:
cc:5c:43:c4:67:d6:01:4b:80:39:49:ce:80:63:24:
d7:4c:bf:b0:09:29:f2:66:34:7a:13:10:b6:d9:f1:
08:07:8b:0e:80:1f:ac:3c:93:b5:86:36:fa:03:09:
94:e1:0f:10:5d:72:86:3b:42:cc:e7:2f:3b:9c:68:
0f:91:4a:ae:80:c7:5d:d8:94:06:74:06:46:1f:01:
16:b9:57:ce:18:46:54:82:01:a9:83:3c:f8:06:27:
77:0e:5b:10:ae:be:b4:8b:2e:3f:38:f4:9b:b0:22:
84:8c:0c:17:8c:72:c1:11:db:9f:b0:a4:c8:4a:3d:
e5:b2:5d:6a:34:01:53:c3:ea:18:84:66:49:a8:c9:
b4:f3:0f:6f:81:3f:0e:cf:d7:ab:9f:89:13:08:8f:
b6:52:a4:b2:30:db:f4:5d:3c:8e:43:82:3a:13:05:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:49:FC:03:10:72:28:36:42:CF:E5:64:4F:CF:9E:94:35:0F:C2
X509v3 Authority Key Identifier:
keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:d5:70:fa:50:6a:40:17:76:95:05:b4:1d:bd:ce:22:52:
44:2d:42:1b:c6:7f:fb:1d:a0:f0:c7:55:61:db:05:fe:b8:82:
7f:18:94:44:6b:87:2e:0b:d7:f2:f0:47:82:ff:67:1b:d6:73:
8e:02:cd:6f:e0:80:02:c9:b2:2d:50:6b:cf:f7:05:0b:a0:0b:
e7:9c:3b:e7:42:9e:80:15:2f:00:cd:cc:e2:c3:3e:66:b5:19:
4e:51:1a:7a:c6:6a:f4:f0:c7:ba:ae:f8:90:df:c5:af:4f:85:
48:e3:18:11:3c:bb:4d:34:ef:d0:de:5d:f8:6c:5c:3f:1e:25:
55:ae:f0:1d:d6:0d:1d:9e:c6:f3:b1:1f:41:73:f7:6a:48:28:
c4:24:ec:90:ce:7a:a5:ff:28:13:b6:bd:c1:5e:4f:6b:7d:17:
02:36:3a:ca:69:a0:1f:81:7d:58:eb:5f:a2:6f:f7:fc:81:25:
74:5b:14:f8:e0:e3:d2:dc:36:30:23:0e:1c:99:1c:8a:36:cf:
61:c3:6f:2a:7b:a8:85:10:14:f5:06:15:bf:9a:1b:94:ac:3e:
f1:a3:c2:78:64:f2:1f:cc:bc:ee:4f:e8:54:ca:35:9e:63:9b:
a4:30:b3:4d:02:b0:bc:cc:13:d3:33:27:81:e9:77:61:ed:42:
b2:5f:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:08 2025 by rpki-client