Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: wpWNX1PH7svwVop5y0v6OWdsSIVuIzIh0BbWx1ZSS14=
Subject key identifier: F1:15:65:70:1B:A8:AA:B4:FD:4F:AE:4E:5C:A9:18:E6:70:44:26:5C
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 019A0F3A6636453F95754D5A466DB1741B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 16F2
Signing time: Thu 23 Oct 2025 04:01:16 +0000
Manifest this update: Thu 23 Oct 2025 04:01:16 +0000
Manifest next update: Fri 24 Oct 2025 04:01:16 +0000
Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: DxrqNilyZ1WY162nn3oJuSV0bHxe0791j2dNGOMgniI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:66:36:45:3f:95:75:4d:5a:46:6d:b1:74:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Oct 23 04:01:16 2025 GMT
Not After : Oct 24 04:01:16 2025 GMT
Subject: CN=f11565701ba8aab4fd4fae4e5ca918e67044265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:b1:69:ee:18:c7:2e:c8:b0:de:84:d3:81:
58:2b:31:2d:bb:1d:dc:a6:92:ee:6e:a3:46:1a:88:
17:bc:c3:57:0b:0f:f0:6f:fd:dd:23:be:94:9f:96:
e2:5e:e4:c1:c4:4b:6b:98:ba:b5:b0:74:f1:da:41:
ab:a0:29:ae:d8:78:2c:ae:83:2b:bf:4b:98:f6:13:
4d:5e:f7:40:dd:ea:c1:f8:af:70:38:5b:1c:56:2c:
79:82:be:63:25:af:ea:f7:38:c4:66:ae:48:35:56:
0d:37:84:a8:90:8f:46:ad:ab:2a:34:a8:18:c1:dc:
b0:01:d9:20:69:a7:8f:08:e9:8d:c6:b1:94:49:eb:
f0:59:54:b3:7d:1c:b2:2b:3f:7e:83:c4:cf:c2:f1:
d9:74:47:27:4b:d0:07:03:7a:5b:91:41:18:4f:86:
6d:6b:7e:ca:a0:72:a8:dd:bf:2c:24:a4:7f:ab:bf:
b5:56:84:02:56:45:fd:46:82:db:61:40:e7:0a:1e:
50:8c:1b:7e:d1:fe:42:55:54:1c:a3:9f:84:d3:9e:
7e:90:ae:29:f1:f6:e3:fa:b1:d4:cf:30:28:65:cf:
3c:3a:ae:de:a0:ae:84:cf:1f:15:10:38:8e:48:33:
b1:e1:0c:7f:48:7f:1e:f5:56:30:dd:32:53:fe:c5:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:65:70:1B:A8:AA:B4:FD:4F:AE:4E:5C:A9:18:E6:70:44:26:5C
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1e:5f:be:87:f4:00:7f:72:47:92:a8:f5:b8:69:a1:b5:f5:
2f:a1:40:3e:57:2e:88:38:54:92:b9:02:7b:15:d4:76:42:6a:
4d:67:48:80:50:76:44:96:58:bf:2c:f9:a0:e2:04:ca:44:0b:
d4:67:d4:4c:ec:ad:c4:2c:56:c6:fa:e0:1d:79:5d:b6:e8:0b:
72:e6:8b:fd:d9:63:e5:05:59:c5:4b:0e:5c:84:1e:82:1a:51:
8f:a7:8e:74:8e:89:c8:fc:e8:c2:41:cc:4c:2f:83:56:06:fa:
1e:20:0f:d4:74:1c:d0:0c:e2:00:34:08:7c:e4:11:c7:d2:e7:
6e:06:58:4f:7d:f1:08:33:4e:d1:38:03:6a:b0:0c:24:3d:a2:
76:f3:d8:ce:75:4b:fd:b6:32:7a:28:21:36:8f:d6:80:49:18:
6a:ab:c1:e6:df:e3:a0:64:24:6e:fb:ff:b7:ef:03:92:69:a4:
11:82:0e:5a:82:e8:5c:c0:96:82:09:18:f3:f4:da:87:7d:d1:
c2:f0:e4:a9:64:2a:1c:e6:ab:d4:5c:32:b1:a2:a9:62:c1:50:
0d:67:e9:79:4d:c7:1f:59:09:dc:20:66:47:6c:18:88:a9:82:
62:53:c7:ab:fd:54:61:10:5f:10:c8:a8:fe:08:42:94:9a:ed:
73:85:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:42:24 2025 by rpki-client