Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: otGj/thGSxHxPmomfcPNjFFOG7NKLc94IyatTdHuYnE=
Subject key identifier: 63:17:64:AD:62:6A:18:25:16:24:89:C9:1C:FE:C8:81:BC:DC:6D:8D
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019A7225C4C0570E636322C0C94727D0C5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 142C
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: UYNsgYYNteOL/4b0kByheHrMB/I3YuMngDgUJCplXNo=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c4:c0:57:0e:63:63:22:c0:c9:47:27:d0:c5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=631764ad626a1825162489c91cfec881bcdc6d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:58:d4:64:47:f6:4b:95:5e:bc:12:fa:55:
f8:fc:32:9e:72:49:1a:33:e8:10:e9:b8:5f:22:a8:
a4:41:c7:38:af:a3:6b:2c:81:48:5b:2f:f7:37:bb:
13:d8:f0:3f:fa:5c:c6:73:5e:66:bc:f8:6e:7b:da:
2c:16:cf:0e:00:c5:93:15:4d:18:4e:a3:92:a2:1a:
7e:c2:51:bb:80:ef:3f:59:3a:f1:fb:ae:31:3f:8a:
a4:5d:ff:9d:09:16:fd:54:a8:eb:de:65:d9:76:32:
d5:f5:7f:67:7b:e8:fa:5d:43:8a:f0:d7:f9:05:42:
d5:00:37:86:57:39:cb:c1:0a:50:26:f3:f8:55:f5:
ba:39:c9:c1:33:1c:31:43:4c:0a:1f:ec:3f:e6:be:
1c:b3:8c:57:b4:17:61:ad:b7:d8:fa:ec:e8:2d:c2:
4a:89:93:cb:41:3f:15:b5:f7:e0:5a:6b:74:75:6c:
2d:18:fa:10:3c:92:9b:e2:30:12:de:82:7b:0e:54:
bf:05:cb:48:7f:97:d8:86:91:5c:b2:8c:ff:11:99:
a0:71:1a:9a:af:ec:8d:84:eb:70:f4:31:8b:29:6d:
7e:c2:19:ac:50:a7:c2:40:38:79:c8:c4:57:f0:de:
93:62:37:01:d7:24:e8:5d:f0:a0:20:62:38:02:88:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:64:AD:62:6A:18:25:16:24:89:C9:1C:FE:C8:81:BC:DC:6D:8D
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b5:a9:bd:e2:1f:c7:1b:28:2a:dd:c7:4b:62:c3:52:11:90:
15:b7:e1:1e:a6:ff:ca:3a:de:aa:b5:6a:65:db:03:44:d2:65:
8d:7d:1c:2c:69:94:77:20:35:dc:d0:9b:2f:8c:38:e5:0f:41:
bc:94:6b:c7:43:48:2e:54:96:f2:ac:70:86:af:df:86:8b:b6:
b7:1f:a4:b8:c6:d2:1b:3c:c9:4c:9a:63:1f:a3:f1:26:29:57:
fe:6c:81:eb:da:7a:e4:b3:3d:cd:94:44:48:ec:15:46:0c:97:
cc:0e:f8:b7:2b:31:30:92:73:66:a0:e1:68:54:ac:08:5c:43:
b9:87:fe:18:8a:d2:a7:13:9e:85:e3:82:1c:b0:5f:cc:c0:c9:
65:ec:e4:09:03:7e:1d:5a:9f:ca:77:84:2d:c1:22:42:90:87:
9e:6f:3a:70:f7:3e:0d:36:41:c7:53:9e:ec:37:b2:17:16:86:
6b:4c:1a:f2:98:ee:35:2f:ac:ec:b2:88:f1:3c:6c:2c:81:ad:
f0:78:5d:dc:f1:a2:e1:b9:15:17:a4:ff:d4:c2:7c:5e:6f:60:
74:68:07:18:e3:da:28:57:aa:96:39:14:53:3f:25:8d:f9:f1:
73:70:4c:3d:b3:e5:9b:6e:b2:9f:3f:60:a4:e8:87:c6:d5:7f:
9a:6c:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:34 2025 by rpki-client