Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: Xk7vftD3xG9iN0WbywVgg4S5TO/iU8W5leot5vzi0Wk=
Subject key identifier: 83:8A:54:E1:5B:C5:83:F3:FF:C8:AE:F5:8F:EB:64:AB:44:E7:9D:88
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019A1EE40182E3DB0F91E937EC128A2E2538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 013D
Signing time: Sun 26 Oct 2025 05:00:50 +0000
Manifest this update: Sun 26 Oct 2025 05:00:50 +0000
Manifest next update: Mon 27 Oct 2025 05:00:50 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: a3iueBtvUEEHOIB/hQleSKrt8nOSee7KccIXgjkotp0=)
2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e4:01:82:e3:db:0f:91:e9:37:ec:12:8a:2e:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Oct 26 05:00:50 2025 GMT
Not After : Oct 27 05:00:50 2025 GMT
Subject: CN=838a54e15bc583f3ffc8aef58feb64ab44e79d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:0c:47:8f:f9:05:08:90:f9:4a:8c:4e:64:
e9:d8:ed:0b:71:24:d7:fb:9e:30:5a:f5:20:a0:a1:
df:1c:94:c1:a6:3e:05:3d:a3:89:7b:70:8a:4e:a2:
c8:2d:d0:82:a1:29:62:67:5e:5e:8c:20:27:f2:09:
4e:28:22:74:db:55:36:d5:99:c4:bf:64:85:70:c5:
55:ea:ca:ad:2a:f4:48:f4:89:48:6a:dc:88:10:d2:
f6:e2:81:8c:58:2a:67:19:ff:1f:f4:7e:c1:b4:75:
e1:96:07:79:6f:02:7e:b5:4d:ee:b4:9d:a2:31:67:
58:3d:cf:81:d2:0d:05:de:fa:a6:dc:35:dd:3a:65:
82:07:0f:77:b4:a6:9a:fb:0b:9c:a5:55:80:03:44:
a7:5a:9d:43:1b:bf:f6:4e:80:ef:4f:62:6b:a6:eb:
76:0d:5e:be:61:23:f2:8f:aa:ae:51:cb:82:93:2f:
13:a5:32:b2:de:9a:80:84:9e:d9:19:7c:e5:1e:b1:
11:21:5c:10:07:d1:b8:a4:69:18:bd:5f:42:16:e6:
31:50:ff:eb:a0:92:f3:eb:96:c2:e2:f1:55:14:a8:
41:e5:ce:31:6e:62:07:14:3c:12:c2:52:c2:08:13:
36:72:4f:79:4f:93:b7:9b:ff:4e:22:b8:5b:74:a7:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:54:E1:5B:C5:83:F3:FF:C8:AE:F5:8F:EB:64:AB:44:E7:9D:88
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:98:38:e7:fb:08:73:95:08:b6:8e:fd:2c:37:50:6a:e8:
e6:a7:14:bb:07:ac:b5:ec:bf:08:db:59:aa:5d:00:a3:4a:d9:
8e:d6:96:98:0f:c2:8c:64:d5:1b:ff:01:c7:ef:31:3a:3d:26:
1e:ab:20:58:c8:33:96:32:60:a0:f3:0c:66:20:2e:dc:06:ea:
a3:3d:0e:45:a7:e2:40:e9:47:03:b4:eb:62:de:2b:1a:99:27:
f9:06:cc:33:1e:ad:32:f1:04:ac:c3:9d:71:30:6b:eb:7d:7e:
07:06:c2:fb:6d:09:5d:d0:a5:5a:79:6c:3d:cb:bc:80:bb:ec:
42:2e:d7:4d:e4:31:5a:76:19:b3:05:57:6e:16:9c:fc:e3:cf:
68:81:24:73:27:d3:08:a9:6b:85:85:bc:c5:1f:c2:a1:bd:9f:
7b:95:ba:ff:b3:71:2b:a0:43:c1:4a:23:fe:e3:6c:ad:c4:3c:
12:32:ca:22:bd:94:53:b4:f5:c9:37:0a:24:bf:31:d9:b2:ba:
13:9e:fb:d7:03:3f:78:cc:98:8d:12:dd:a0:52:77:05:86:b1:
08:ef:fc:c2:6d:f8:1e:57:e0:5e:29:a8:d6:ba:f9:cc:bf:b4:
ed:78:0c:71:b0:0e:82:04:77:e0:3f:31:54:f5:d0:46:01:b7:
e5:9d:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:16:37 2025 by rpki-client