Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: GjI38MBb2cm1NS/9dpcujgHVbOwmzfBh/Xjm6Tia6DM=
Subject key identifier: 37:C5:A5:22:9E:51:C4:19:21:66:66:DA:2C:A6:7F:C1:FB:47:72:4F
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019A2364F1F424A45249C023AE5C831742D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 16B1
Signing time: Mon 27 Oct 2025 02:00:09 +0000
Manifest this update: Mon 27 Oct 2025 02:00:09 +0000
Manifest next update: Tue 28 Oct 2025 02:00:09 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: jEjqXJOezdivpurGzWpF1YZN1cDPV/Yaj8u/4Kw/8HM=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:64:f1:f4:24:a4:52:49:c0:23:ae:5c:83:17:42:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Oct 27 02:00:09 2025 GMT
Not After : Oct 28 02:00:09 2025 GMT
Subject: CN=37c5a5229e51c419216666da2ca67fc1fb47724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:1e:0e:46:41:82:91:d8:01:cc:64:9c:3c:
84:d4:77:96:9f:dd:64:5a:11:d6:83:d4:71:41:38:
65:31:cf:88:99:07:8c:28:6c:01:dd:52:7b:25:f2:
91:f1:a7:9e:43:e6:17:3f:af:81:2e:76:0a:ca:53:
0a:3d:64:86:81:ac:e7:a6:43:81:9b:7a:1c:f8:71:
88:4d:b5:b6:6d:59:0a:b8:8e:09:b9:b4:b6:80:29:
06:9c:73:bb:01:47:14:01:06:1f:1c:2e:87:43:f4:
33:fc:9b:db:2d:57:9c:5c:28:04:3b:19:3c:02:79:
86:ff:9e:4f:4b:79:24:d9:df:56:dd:6e:9d:fa:c8:
e9:2d:94:75:63:5d:1a:e9:b0:fc:78:8d:ba:0a:1d:
ee:0d:fb:e9:13:36:fa:82:97:0f:e7:1f:86:14:2a:
f4:63:51:b6:d1:4d:62:92:2e:eb:9f:ca:cd:ce:fd:
03:99:3a:db:13:38:f1:44:db:e7:9e:9d:09:88:7e:
27:0c:84:df:7e:e1:b3:27:15:3d:76:11:a9:00:31:
f9:4c:89:ad:7c:65:f9:0e:51:6f:92:c9:f8:ff:79:
15:2e:5f:23:4c:75:a8:ea:8a:ba:a4:d1:78:29:44:
c1:df:89:7c:77:61:80:39:6c:ac:35:0f:59:57:97:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:A5:22:9E:51:C4:19:21:66:66:DA:2C:A6:7F:C1:FB:47:72:4F
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:28:87:60:70:18:7b:bf:4c:2a:98:40:ac:b5:d2:94:ed:
68:be:3a:e6:ae:4b:48:e3:3a:e5:25:5b:94:8d:a9:e9:c2:8c:
d3:d1:43:6f:f1:80:50:64:8c:0d:ee:de:1c:d5:00:d5:86:72:
72:af:1e:ef:bf:79:e6:e0:48:35:80:2a:2f:26:73:82:dc:95:
e9:2e:92:86:f4:1c:ec:b1:b2:b3:f7:8e:1e:8c:e3:c7:b7:67:
f3:d9:da:fa:ec:01:40:7a:ab:3e:c0:e0:ac:6e:34:a9:05:2e:
b4:f5:9f:47:3a:e0:5d:7c:a0:78:30:1b:51:57:75:2d:49:5d:
0f:30:59:fa:ee:0a:41:1a:b3:18:ad:3d:e3:ae:92:32:48:81:
13:bf:b2:ad:3d:2e:2d:46:99:02:81:e8:8a:c1:6a:43:14:d6:
4e:68:3a:28:93:2c:57:cf:9d:da:39:c4:c2:d1:9c:f1:60:91:
2e:60:73:3b:13:16:af:99:50:98:5b:7f:41:95:f4:84:23:5d:
f7:d8:6e:3f:b9:17:30:df:61:8a:be:ec:d5:9e:5a:54:ca:12:
d2:1b:59:46:d0:ac:e8:7f:49:c3:4e:fc:e9:0f:b2:02:54:2c:
1e:41:9d:c7:1d:33:9b:65:80:a4:0c:92:1a:c8:b4:f8:ee:34:
19:2a:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:47 2025 by rpki-client