Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: Uq/B8Wo4LpwEABCPNvbwiATKf5uoISTxEv0QF7rr4aM=
Subject key identifier: 0B:85:CA:40:1E:2B:2F:4C:70:A1:B9:0D:3C:F4:EE:CB:8F:6D:B4:EA
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019A725CD210C242FCFAFD9692C1446F39F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: uOd2cKLjekGWW9Yaqf7lTnv8IpAuDiS5ZnAGuEO/Awk=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d2:10:c2:42:fc:fa:fd:96:92:c1:44:6f:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=0b85ca401e2b2f4c70a1b90d3cf4eecb8f6db4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:b5:c9:a7:88:19:14:ae:27:45:86:62:6f:
1f:c3:7a:00:96:d0:d4:a0:d8:d1:f0:49:ad:5f:18:
2c:e3:89:ef:65:d6:9b:1a:a5:df:92:ea:fc:94:68:
db:2c:a1:1f:3e:b9:57:11:0b:b9:7f:5d:e9:f2:1b:
bf:5d:d4:83:1a:a2:f1:02:48:76:86:a2:d4:26:ab:
ae:83:8a:53:d7:25:53:51:42:45:83:41:de:25:41:
13:2f:ab:11:aa:59:3a:95:76:8d:42:56:99:4b:91:
23:0a:58:bb:d2:68:6d:3f:44:7e:68:d3:f7:47:b5:
86:73:16:43:2d:64:2c:14:e1:c2:20:41:be:0d:c1:
69:6e:02:3d:f7:24:47:1e:7a:b8:36:fd:11:54:e8:
b4:e6:29:3e:e7:1f:93:62:e4:26:94:a5:5b:5f:64:
16:84:9d:73:eb:28:e9:f3:e5:58:d6:c9:a2:d6:4c:
c5:fa:81:7d:cd:e5:7c:15:9e:eb:c7:10:4c:03:bd:
a7:13:74:84:c1:2d:e3:31:f3:b7:ec:54:02:30:9f:
9e:fb:bd:da:04:3f:a3:2c:93:b9:4d:60:d1:88:65:
f4:e7:a7:3e:ac:b9:17:68:1b:9a:33:c1:6b:37:a4:
d2:0a:32:33:a1:0d:60:77:a8:45:d5:cf:86:41:38:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:CA:40:1E:2B:2F:4C:70:A1:B9:0D:3C:F4:EE:CB:8F:6D:B4:EA
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:b2:5d:23:a3:2d:03:ed:ac:eb:3a:09:ff:a1:67:48:d9:
76:06:d3:d2:5e:f2:b3:fc:7c:d6:72:18:0a:da:bf:e6:6e:86:
ed:fd:87:bb:e3:39:c0:42:e2:1a:39:d4:b0:60:4e:f7:ee:68:
c2:66:c3:a3:90:0c:3f:c5:de:84:17:36:d4:c1:02:bc:aa:a6:
3d:0b:77:1f:d2:c5:04:d8:e2:f7:d2:c6:8f:a7:41:54:b8:ab:
10:7e:24:1b:a4:b4:d1:ca:8f:c1:91:f9:5c:68:bd:03:df:e0:
26:5a:c9:05:09:bc:17:ab:e4:f7:4f:46:ef:54:2a:5d:2c:b2:
9f:74:55:3a:b0:2b:90:05:94:d5:4a:11:b1:38:dd:63:39:9b:
ea:bd:85:3b:8b:67:7f:07:b9:65:40:76:a7:b4:8d:ee:cc:8f:
29:19:41:52:61:be:81:bd:6c:0b:18:c5:7b:5b:53:72:41:c3:
2a:84:cd:9b:7b:d5:4a:ca:35:07:51:31:2b:d2:c7:67:bf:c4:
7a:84:c7:86:c8:89:d3:b2:47:fd:c6:37:3e:d5:ae:e2:c2:43:
74:bb:c1:5a:65:d0:ed:c5:67:1b:17:f8:51:8a:d6:20:1a:89:
f6:7e:ae:ed:2e:a7:02:1a:ca:d2:17:0b:cc:be:c7:4b:1a:3c:
66:e0:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:49 2025 by rpki-client