Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: NCVBp1gkl1Bqc3WX+zM7uYWHp7YTe9x/AkPabJrdpg4=
Subject key identifier: 35:5C:CB:4C:43:AD:D4:45:05:30:93:F9:7E:81:BC:44:D5:1A:CF:24
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019A71EECD20D96E71618D940146E641E64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 01E2
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: dfAjv2KJI/BMB+nzhLTYSTHXrq0XgpA65lCaAZs9xZI=)
2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cd:20:d9:6e:71:61:8d:94:01:46:e6:41:e6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=355ccb4c43add445053093f97e81bc44d51acf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:79:a8:ca:b5:6c:f2:54:4a:f9:5b:2b:b1:
97:00:93:25:0a:eb:32:1d:bd:d4:34:12:f3:e2:ae:
8d:35:35:e8:46:d2:0f:86:af:55:d7:fc:14:86:de:
7b:d3:8a:d4:4e:ae:96:1f:06:ee:e0:7f:d0:47:8a:
ad:d1:32:da:13:f1:05:43:9b:5a:c0:11:4d:48:d4:
d8:3c:8f:e6:02:79:0e:88:0d:90:7a:63:68:8c:04:
54:a8:67:69:1f:46:2f:43:ab:ca:e7:74:88:f4:ff:
99:94:00:56:46:b6:82:d6:11:16:52:6d:e7:7e:72:
63:d0:55:47:6a:8f:f5:9f:88:70:01:ab:d6:7e:07:
92:92:dd:9d:c2:43:5f:49:a7:65:3f:16:fb:80:90:
2b:42:33:8b:e3:5e:cd:f8:20:26:6b:fa:b8:ff:3e:
5c:27:0f:6d:34:cc:d4:f3:02:6b:1b:41:fd:46:1c:
65:60:00:53:c0:81:7d:c3:28:37:72:bd:67:65:4f:
88:ad:5e:ba:7c:13:c6:9a:03:a3:43:b2:46:83:8b:
14:ad:09:44:84:b3:92:7e:20:f6:bb:a3:4f:50:de:
00:a2:f0:02:cb:eb:43:be:17:be:7e:d9:d7:af:94:
66:38:41:6a:2a:f3:10:4b:a6:03:c1:00:cd:2c:27:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:CB:4C:43:AD:D4:45:05:30:93:F9:7E:81:BC:44:D5:1A:CF:24
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:df:1a:4b:6d:e0:68:d9:78:f5:26:0e:f3:ac:1b:3a:d7:
81:39:7e:d2:29:6a:af:9a:c3:84:5e:d9:72:8f:f2:e7:8a:44:
85:19:96:f5:90:4e:90:ab:93:c8:ff:43:ae:bc:27:a0:74:80:
40:1f:29:fe:ac:99:ce:dc:30:cc:79:1c:b1:d8:55:eb:47:d0:
4c:b4:d5:c2:ec:15:c9:50:69:a5:0f:df:18:e1:7f:32:f6:e5:
f7:d7:fa:9c:87:6e:83:d3:d8:d2:96:a7:9c:43:10:36:75:a7:
8b:73:67:cf:fc:f0:92:ac:69:a0:28:5b:b4:7c:6b:04:e1:6e:
71:c9:55:31:09:11:8a:a2:89:e2:94:c0:7e:ba:f3:3a:14:f0:
1f:5f:88:a3:85:2c:0d:a6:53:9b:77:93:63:e3:9e:33:9d:24:
ee:75:0c:3a:40:ce:9a:67:54:c3:08:87:8d:83:3c:ae:10:fb:
e6:cf:89:a6:f2:34:06:e5:eb:b2:00:6e:6f:67:6a:84:c1:85:
d8:ee:37:c2:34:19:02:53:66:60:9a:fc:20:5b:d9:ad:bb:21:
66:25:f9:2e:26:cc:cd:bf:40:1d:1b:6c:74:a4:6d:f9:ea:f8:
d8:cc:de:2b:5c:7c:fa:62:5f:7f:09:bd:0a:82:a1:6f:8e:92:
d8:1d:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:14 2025 by rpki-client