Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: EhTm2pk9p4XttIjAOQIByiBXUY958ir4/j4W6DrJeUE=
Subject key identifier: 8D:E5:7B:65:79:83:D4:B9:BA:5A:19:55:58:FD:F1:7B:48:69:64:47
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 019A21402BA9F94BF201CC397624064216DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 16:00:44 +0000
Manifest this update: Sun 26 Oct 2025 16:00:44 +0000
Manifest next update: Mon 27 Oct 2025 16:00:44 +0000
Files and hashes: 1: 46CrIffnQ_Z2VULr2_zq5ycXi_o.roa (hash: woo5CJdBZeqj+spRxywdEIpQkRHqd5niNUiG63o0aik=)
2: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: pl/qM5kyFlc1onB7gPFeLkGutqY2jtAwf3p+KoxDrFk=)
3: YFRHntH9AB6J_9p-ec1L6rWDsyc.roa (hash: QWDe2AgrTQml0pWJuJyjoi3nAbxgZlcrSf5Yvm3lXe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:2b:a9:f9:4b:f2:01:cc:39:76:24:06:42:16:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Oct 26 16:00:44 2025 GMT
Not After : Oct 27 16:00:44 2025 GMT
Subject: CN=8de57b657983d4b9ba5a195558fdf17b48696447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:6b:9c:1e:43:da:bb:08:d4:bf:c2:18:56:
57:23:74:4d:e7:57:98:32:a5:8d:68:85:d0:f6:11:
2c:69:66:3e:76:33:e2:f0:73:ab:4a:bd:8d:57:73:
23:07:7f:8d:aa:44:9e:72:6a:b9:1f:22:c7:e3:9c:
27:2c:22:17:b9:80:70:cb:9a:4f:f2:da:dc:83:46:
11:37:17:32:9d:42:ca:f0:cb:c1:16:54:0b:bd:88:
00:ca:d6:01:86:c7:e7:a0:33:f2:fa:61:5a:fa:d4:
08:75:cd:1d:18:7b:00:df:7e:b8:b8:53:bf:14:ed:
2f:5f:fe:36:8c:23:56:26:04:0c:04:cf:16:95:68:
62:82:24:22:a2:2b:67:56:77:bc:c7:74:2f:bd:9e:
33:57:e5:5a:d9:55:00:98:44:6b:f5:68:5a:30:13:
1a:c7:7f:cf:69:35:98:a7:ff:5e:33:5d:8a:99:8c:
33:f3:d7:44:48:89:f2:1f:4d:2a:4f:8b:16:a4:9d:
a1:5a:3a:0a:44:4b:53:66:8e:c8:81:d6:eb:e1:2d:
8c:24:37:ea:28:50:46:b2:2a:8e:12:82:ca:d1:5d:
77:b6:58:97:2e:05:d8:fc:01:2d:c6:99:59:93:5f:
95:53:31:83:8c:22:b1:87:28:50:c9:3f:06:e4:f7:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:7B:65:79:83:D4:B9:BA:5A:19:55:58:FD:F1:7B:48:69:64:47
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:5c:4e:bf:ac:6a:a4:c4:9a:df:fd:25:01:2d:31:0a:99:
9e:99:44:4a:f0:5a:1c:ce:ee:7f:07:c9:5d:98:12:45:5c:3b:
01:a6:17:66:58:6b:4e:34:c1:55:b3:95:96:15:4b:02:f9:21:
bd:3d:23:bb:94:02:36:04:80:ea:b5:7f:17:7b:ef:fe:02:5d:
ee:ff:cb:82:17:8c:f8:33:84:e8:c1:11:33:04:96:68:5a:1f:
a0:0b:27:01:f3:f2:f3:b8:7e:16:82:9c:b8:45:e1:e3:db:7c:
17:00:4b:e9:ae:e2:30:3e:00:0c:07:8c:d2:44:35:21:76:09:
20:73:d7:a0:b6:dd:c6:06:71:f9:3a:ce:e8:8f:79:38:8e:fc:
14:3a:56:39:3d:96:82:f7:f3:e8:16:01:d7:0f:dc:ff:06:6e:
5b:bd:cd:07:81:76:8b:b0:02:cb:fa:12:ca:90:ac:f5:e1:9d:
c3:78:fc:66:61:af:04:e8:a3:3b:26:2d:57:7f:5f:0e:fd:f3:
5c:07:13:f9:22:80:3e:16:a7:f2:a7:d6:f8:d4:e2:57:80:6a:
d3:0f:b0:d3:73:05:8b:e0:99:20:04:75:f6:97:33:78:4b:db:
3e:3b:53:a8:a5:13:27:a5:7d:28:56:cf:47:3e:06:08:72:eb:
d3:9a:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:27 2025 by rpki-client