Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: AhA6VsG3ZLhFMBj/iaVwuuXVBZGlea7kDi514Fte0Rc=
Subject key identifier: F2:97:AC:D9:E5:74:34:D2:02:CD:F8:26:87:89:0B:73:39:8B:EA:4F
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019A71B83BEAB940CFB1AC4FCC6255461077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: OpnJkqx/h7OEUffNnk9yq9muekFT5gprBc3JCi/gLBE=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:ea:b9:40:cf:b1:ac:4f:cc:62:55:46:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=f297acd9e57434d202cdf82687890b73398bea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:c7:ee:1c:b7:af:56:1a:6e:29:1e:4a:7b:
d1:1a:5d:74:0d:47:e7:3c:c9:62:cf:7e:d7:c1:c3:
0d:14:27:ff:ba:da:86:4f:8d:52:49:8a:58:b5:15:
d3:7b:89:0c:47:03:e6:95:84:31:c6:c8:92:7b:8f:
d1:64:7c:7d:07:98:de:f6:08:37:51:71:21:a3:e3:
e6:ea:2b:ce:e6:f9:87:1f:ae:1c:9d:8b:6d:3d:f4:
f5:65:e2:65:a3:a5:55:bf:cd:0f:6f:e6:2f:71:e0:
b1:4f:4b:b1:96:b2:c7:87:79:97:ef:21:f9:16:f7:
fe:e2:02:a4:b4:52:75:85:37:25:cd:31:40:da:19:
cb:ef:29:0c:b1:31:33:76:5d:d9:18:ae:0a:01:7a:
de:2a:84:91:05:1d:fb:74:46:af:bc:94:23:e6:85:
10:ff:7c:3b:31:e6:16:42:a8:19:a6:f2:06:5a:8f:
32:c3:16:8b:7b:fc:ad:2b:e6:68:04:6e:f3:17:c7:
ff:24:bf:ba:54:85:ca:8d:fd:d3:35:60:c1:e1:0f:
2b:c6:c9:a5:89:89:3a:68:95:cf:99:6b:c7:b8:14:
18:ec:c7:00:a9:69:91:53:79:ed:22:e6:e9:47:0d:
01:77:1f:b4:8a:eb:7b:9f:7c:5d:08:1a:99:64:47:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:AC:D9:E5:74:34:D2:02:CD:F8:26:87:89:0B:73:39:8B:EA:4F
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:33:f2:e1:13:19:59:30:3c:07:2b:ce:08:1c:d5:fa:c5:
73:c6:17:76:f6:a0:31:88:e7:92:6c:a2:bf:1e:ce:6d:56:73:
68:dc:c6:49:76:0d:f2:34:05:b5:f8:92:a3:ab:c4:ae:5d:75:
34:00:51:ab:e4:26:2c:d4:89:ce:f5:86:f0:1e:63:2e:e0:87:
9c:e1:f7:ca:b4:70:0c:11:90:71:17:1a:83:3e:ca:eb:da:0b:
79:55:d9:5e:d7:ca:c0:55:84:4d:fa:04:77:b3:89:50:5d:4b:
94:03:64:7f:af:5a:c8:11:34:2f:04:96:66:fa:9f:f8:54:be:
87:92:24:ec:01:2b:aa:88:08:77:93:51:74:2c:9b:87:9d:d8:
78:74:45:98:a2:62:a8:db:ae:83:ab:7d:cd:6a:6b:86:40:fa:
35:64:03:c8:24:90:61:f1:43:58:0d:07:e7:39:ff:75:c3:02:
d9:d3:5c:4e:d3:ed:3e:93:2d:e0:5d:8d:a6:49:8e:7f:0f:28:
06:a1:47:f5:f6:90:13:8f:29:a1:c3:52:6f:69:94:62:ad:5e:
44:11:30:2b:c6:e0:59:f9:1f:44:21:48:66:d8:84:b9:51:31:
c8:f3:43:12:ea:96:5f:1c:68:25:29:29:ea:9b:ba:df:06:7b:
5c:5e:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:46 2025 by rpki-client