Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier: swqySudxs3eJYnAHQfHk2u8XQlJs6eMoTJwnI5uFM54=
Subject key identifier: BE:CC:82:4D:9F:04:7E:A0:68:28:84:2E:CC:5B:15:71:C3:5B:0F:D6
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 019A1B070A4052564A2F25A56BA4D2E86D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number: 1685
Signing time: Sat 25 Oct 2025 11:00:37 +0000
Manifest this update: Sat 25 Oct 2025 11:00:37 +0000
Manifest next update: Sun 26 Oct 2025 11:00:37 +0000
Files and hashes: 1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=)
2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: iW4XHzICXGbS0uJLuZC1gIoYVd68+U0R6BdzenIqe1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:07:0a:40:52:56:4a:2f:25:a5:6b:a4:d2:e8:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Oct 25 11:00:37 2025 GMT
Not After : Oct 26 11:00:37 2025 GMT
Subject: CN=becc824d9f047ea06828842ecc5b1571c35b0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:1c:00:9e:75:d0:f3:e4:58:95:21:a6:a9:
7b:f9:57:e3:df:89:e6:b7:43:fb:6c:88:70:37:f0:
fe:fe:b1:d0:6c:ef:5b:a3:a3:44:0e:af:69:6a:89:
65:44:bc:98:12:ef:3b:12:fe:95:a4:2a:38:25:21:
a2:9a:ad:88:5f:73:3a:17:31:74:61:7b:14:86:71:
3b:c2:5c:a2:52:06:c4:01:71:0f:47:26:da:7b:8c:
2b:9a:b1:7f:90:28:de:0d:1d:3f:c7:3f:77:62:df:
7d:ff:84:71:4c:46:c4:e9:8f:91:75:d5:18:79:29:
52:4b:8a:e6:5a:ac:09:f7:8a:5f:64:87:b0:c0:03:
57:cb:f5:ee:f4:99:a6:5e:77:bf:07:96:55:2c:be:
34:18:20:c5:14:57:92:c8:e8:01:d9:72:4b:c9:70:
16:45:28:06:62:b8:57:ef:b6:66:1e:ff:9d:12:c0:
d6:fe:94:70:40:3f:76:d1:0c:19:b4:dd:ca:a0:71:
c5:ff:39:e6:d3:d8:97:58:3b:09:c3:e7:3a:a4:fd:
cd:bc:ab:1b:b8:9c:ea:48:72:93:f4:69:9e:c2:61:
17:2e:0e:32:34:45:81:9d:7d:cd:89:a4:68:c7:10:
a4:80:4b:2b:4b:8b:4b:e7:f3:10:90:ec:4c:a1:c4:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:82:4D:9F:04:7E:A0:68:28:84:2E:CC:5B:15:71:C3:5B:0F:D6
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:48:9c:ca:f0:af:5c:30:79:1c:43:80:29:7a:60:85:4d:b5:
7c:4a:6b:d8:c4:a2:17:fa:51:be:6f:1e:cd:ef:9a:23:17:81:
15:93:1f:f8:8b:9f:b1:75:fd:d8:ca:07:97:f5:66:04:64:3f:
53:bd:9d:3b:89:e0:d9:03:1d:a9:ba:df:c4:8a:a2:a2:f7:59:
a7:06:d0:43:bd:3c:97:e7:46:07:86:a4:bd:9c:a9:eb:65:75:
32:f6:79:45:ef:72:a8:4b:34:d7:1f:08:88:c2:8e:ce:9c:f4:
7d:0f:83:af:4b:03:54:af:1f:ba:a4:24:7d:2d:fd:00:41:2a:
f3:1f:08:ab:bf:ed:ae:c0:8e:58:19:f3:40:e8:47:ed:31:4f:
4c:e9:e3:3a:54:ff:17:0c:40:52:90:7c:4b:ab:e4:2c:6e:4a:
a8:d0:c9:e6:f8:83:63:48:aa:9a:7d:58:ab:bf:e1:07:15:12:
d9:4d:b9:0b:84:b1:3f:a2:bf:bd:00:18:c0:8f:fd:12:38:a6:
73:dc:b0:d8:1a:40:e2:f5:3a:f8:c9:a4:97:70:a7:12:47:1b:
56:73:c8:d2:19:3d:03:87:aa:97:34:51:14:82:74:f8:60:25:
7f:71:45:97:c9:0d:9e:23:44:88:87:40:d4:f5:92:69:76:a0:
4f:3e:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:57 2025 by rpki-client