Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: vxGgoeocCyIG0QNyIKcaEawUYcZ08EQ0XbgMInO/zSk=
Subject key identifier: E4:C2:2A:9D:99:E8:A5:BE:89:DE:70:B9:E6:CA:6B:9D:B0:00:BE:87
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 019A71B7EF1A05F096891EA81A34F1154059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 020B
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: /1gQgk7gKt7ce56zcE73ukVw3lMbrgQb5sBXOauuk68=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ef:1a:05:f0:96:89:1e:a8:1a:34:f1:15:40:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=e4c22a9d99e8a5be89de70b9e6ca6b9db000be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:09:61:22:98:b0:a6:41:88:0c:ec:e9:86:
b8:0c:1a:3c:2f:fb:9a:ed:51:e0:9d:8d:52:1c:b4:
bd:90:bd:e8:c7:49:f9:78:c1:2e:4a:cf:6f:34:90:
35:d8:6a:12:eb:0f:1c:0d:36:ce:4c:17:78:ef:45:
c4:33:b5:db:46:34:20:d9:0b:04:0a:fa:3c:34:3b:
e0:2c:d1:06:f0:63:16:6b:8e:c4:d1:65:06:45:b5:
3c:86:8d:5c:e7:53:f8:9a:61:95:ef:ad:2d:7d:ca:
60:c2:58:58:35:75:ce:1f:cb:88:55:24:7d:3c:54:
19:aa:ce:e1:15:ce:1d:15:1a:92:bd:92:d9:01:e6:
ca:89:a6:23:5e:3a:b0:4f:2b:5f:e4:5a:3a:8d:68:
90:5d:55:85:43:ff:6a:ad:4d:d6:9e:31:80:1c:25:
43:26:87:4b:c4:d2:f4:b1:2e:00:39:23:5d:57:e5:
e8:40:50:d5:c1:28:f1:26:05:a1:69:9a:57:14:a6:
b8:0f:4e:af:de:ba:c0:68:e8:28:f2:a6:6a:39:04:
43:af:c2:ae:36:22:52:52:0b:62:31:05:20:69:a0:
13:d4:e7:21:08:ac:db:a0:30:3d:14:36:ce:5d:23:
1a:40:2f:92:bb:3c:53:ae:a6:d1:66:f0:e5:ef:94:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:2A:9D:99:E8:A5:BE:89:DE:70:B9:E6:CA:6B:9D:B0:00:BE:87
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:0b:fe:92:4b:16:a1:bd:73:61:ea:e3:7c:13:09:24:20:
1a:d7:97:05:84:a5:1d:ff:ba:af:bd:d4:c1:92:8f:9f:99:f6:
32:d7:67:06:25:02:2e:c3:ea:6c:5d:6e:ed:eb:29:f5:5e:2d:
94:d2:f9:96:ee:62:d6:cc:b1:14:11:7a:f5:68:32:e1:ab:54:
28:74:39:80:fc:11:9b:ab:be:dc:cd:57:2b:63:ae:e3:01:e8:
84:a8:73:5c:df:7c:59:f6:9e:f0:ec:0f:1b:0d:12:1f:34:4b:
55:bc:36:ad:c1:8e:47:dd:dc:03:89:d6:54:c3:d5:8b:71:0e:
d7:b7:26:79:84:00:f5:ac:24:4e:bb:7e:ce:62:59:79:be:52:
72:86:6b:c6:9d:a9:46:b4:d4:ca:5f:86:80:fa:53:e6:c4:7c:
f8:ef:4e:6e:f3:72:31:d5:09:f5:0b:6a:c8:89:e8:a3:73:73:
13:e6:98:2a:94:12:ff:33:26:70:f0:81:1f:c0:7e:03:02:94:
f0:de:1f:be:b2:ce:20:49:ae:73:5d:07:7f:ff:85:da:22:ee:
fe:b5:94:3e:0f:db:eb:d2:1d:de:5c:42:cc:b4:d8:20:bd:d3:
ef:44:16:70:4d:20:d2:ab:51:d6:f4:ad:8a:70:83:ec:3c:86:
ae:ad:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:42 2025 by rpki-client