Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: kATwKKgvZN5jb26GK0NjryknJU+gn1zpN3amai/X0pA=
Subject key identifier: 8C:C0:EC:94:E0:B3:A7:4D:6A:58:B3:09:5E:5E:2A:6E:73:3D:33:A8
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 019A71EE9C51C7B3EA5E6FFE722D4404DDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1342
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: +ZGFBS89lk/zpk4TGBnQk9KMxLvs5uHxiNToEeNgnsA=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9c:51:c7:b3:ea:5e:6f:fe:72:2d:44:04:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=8cc0ec94e0b3a74d6a58b3095e5e2a6e733d33a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:d2:af:a6:cc:62:2f:ef:9a:09:b6:70:40:
5c:8d:3c:e8:0d:e0:6b:41:bb:5b:5f:3a:5b:c0:71:
cb:68:15:8e:e6:71:e2:c6:b3:9f:f9:6f:2c:39:8f:
b8:53:95:ff:4a:f7:b2:66:76:21:e7:46:2b:2a:76:
b8:3f:4e:78:01:64:9d:f4:42:8b:69:b4:d4:4b:3e:
42:3d:ec:ca:6a:bb:5d:f6:02:61:b9:bb:fb:08:f2:
86:ae:6a:43:bc:f8:c6:b3:59:7e:c5:02:5e:6d:a5:
8d:6a:90:a4:a7:03:84:c4:a4:de:84:25:e9:23:e6:
f7:44:e2:23:ab:ef:b5:66:7a:4e:02:1a:4e:83:58:
df:a8:39:89:1b:3d:3a:fb:9e:4d:63:f5:72:73:e4:
3c:5e:37:56:4a:cd:dc:bb:61:91:e3:40:eb:50:ab:
09:6b:58:17:5e:5b:6c:cb:a1:79:a5:d8:d0:b5:96:
f1:e2:08:0a:77:41:b1:98:5e:20:6c:66:14:1e:a3:
46:36:86:21:b5:75:d2:3b:95:72:ff:4a:d4:da:1a:
a3:11:5c:7a:59:fb:cf:9c:d3:3c:a7:88:a6:52:ce:
08:79:06:75:60:14:6f:6e:2c:34:5a:d7:e8:12:88:
9e:75:e3:47:1c:28:7f:d0:72:5a:5d:43:54:1a:3d:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:EC:94:E0:B3:A7:4D:6A:58:B3:09:5E:5E:2A:6E:73:3D:33:A8
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:27:20:dd:cb:0a:4f:05:d6:61:a2:32:4e:6b:57:6e:25:
26:2a:a1:8a:47:0f:c5:70:22:78:0d:83:5c:45:a4:12:36:48:
4d:07:2a:e2:22:2d:5b:5b:ec:74:60:8c:e1:0e:0d:5e:ac:84:
97:84:28:0c:50:d0:d6:2f:07:eb:84:f9:4a:39:5d:e2:ac:5d:
b1:d2:19:f8:3b:16:57:f6:08:e7:dd:23:9c:c8:a5:d6:52:cd:
b4:0b:ed:cb:58:50:d0:56:e2:b4:44:11:fa:51:ec:4e:7e:a2:
35:20:11:7b:44:95:9e:6c:5d:5d:3c:0b:fd:46:f5:c1:7b:ef:
09:1d:07:a2:f4:c7:0c:80:17:bb:77:58:c0:69:97:aa:f6:ce:
f1:5d:05:d3:ee:81:da:f3:88:b3:73:a8:78:2c:9a:2d:08:14:
78:c1:c9:fd:19:ff:7a:a0:f5:77:a3:21:59:9e:e9:51:46:24:
20:58:b0:0f:23:60:42:45:98:dd:00:47:9b:d3:32:46:96:39:
be:9e:3e:18:5f:d1:7c:a6:d3:a2:23:de:08:73:01:b5:01:9c:
5d:3a:f6:fe:0c:a5:a0:f7:ec:0f:6e:91:c3:ad:d6:e8:e9:b9:
92:5a:61:fd:a1:69:30:a8:6d:3c:30:4e:60:a2:2b:a1:37:89:
02:26:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:22 2025 by rpki-client