Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: i3UaOq9lcPrLqztDJH1ak3WcDoSoCEdppS461TOridM=
Subject key identifier: 4E:68:5D:C4:97:5D:DA:A3:16:8A:E5:94:F0:65:2B:16:06:24:13:EE
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019A71EEB451B6ACA5A7254F997F3D50C187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: JHJMCkUYOD/Xuyq6ydoP2/Uehi3NpbcWV6ujmL5ue3I=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b4:51:b6:ac:a5:a7:25:4f:99:7f:3d:50:c1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=4e685dc4975ddaa3168ae594f0652b16062413ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:41:5b:38:a4:60:7a:3b:74:29:5f:a1:bc:
c1:cb:b5:19:21:92:62:37:17:8e:4a:af:99:85:0b:
7a:a2:73:00:c0:b4:3b:cd:03:57:78:ac:d7:03:1f:
b6:53:a1:6e:19:61:d6:02:98:3e:d3:7c:3d:f9:f9:
87:a0:89:13:51:11:90:e5:7e:81:77:7d:fd:74:fc:
d3:73:bb:cb:01:ba:8c:8e:54:2d:07:7d:72:e8:45:
a5:11:98:d9:7a:e7:4c:6c:9b:bb:60:f6:70:b8:a2:
6c:cf:cd:97:cb:c0:cd:0a:d7:8b:41:5e:89:41:74:
76:92:d3:de:fe:28:6b:94:d0:88:6d:3c:6a:9d:24:
13:88:68:42:f4:8a:d5:83:08:b6:51:ed:93:3c:57:
de:16:f2:52:5b:66:96:00:62:bb:bb:9b:29:92:4b:
c6:be:b7:ad:a6:e4:9e:82:0a:3f:98:99:59:1b:b5:
19:0b:b5:74:da:5d:a1:53:67:48:90:a3:cc:c8:b4:
cd:a3:51:80:8f:c0:5b:fe:bb:30:b3:b8:67:e4:d7:
a9:4d:40:c4:58:ce:c2:d9:43:d2:b2:5f:bb:d3:f0:
08:83:e3:30:7d:1c:d9:2f:8c:1d:44:dd:2e:77:37:
33:a0:7b:b2:73:14:45:41:a3:b8:a7:49:b6:0b:3b:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:5D:C4:97:5D:DA:A3:16:8A:E5:94:F0:65:2B:16:06:24:13:EE
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:71:90:95:5a:ad:6d:cd:64:83:20:5b:ff:01:8f:46:16:6d:
d6:20:5f:11:47:90:ee:59:64:98:06:05:d4:14:3c:e7:66:40:
07:97:b4:9a:0d:71:a2:81:45:ce:8d:6c:39:a6:04:29:a9:44:
23:61:7c:ad:ef:c3:56:5d:f5:6c:3e:8e:4b:00:6f:13:3a:37:
3f:c2:fc:ef:84:c1:c5:ad:80:42:59:b9:70:02:e7:6d:7d:d3:
b7:9f:da:04:d2:06:1d:3b:79:8e:60:e1:a3:e2:28:55:6e:cf:
6d:af:a6:65:30:2d:ab:34:80:d2:2e:0c:41:d3:21:55:2b:b6:
f6:41:41:26:b5:7f:19:7e:c8:09:da:6b:2b:a3:24:cb:88:82:
ac:7d:b7:3a:3e:dc:ef:35:e2:f0:a2:9a:23:68:33:d0:75:97:
eb:2a:a6:46:73:cf:a5:b9:1c:8f:ae:a1:06:52:07:e4:b4:ef:
5b:8b:60:38:51:af:bd:44:8b:2a:ae:18:a9:41:37:62:6d:94:
73:56:c5:67:8e:46:39:d1:67:b8:a4:22:d9:7a:ca:4e:5d:9b:
f5:06:49:d3:ad:95:bb:7c:e9:12:e9:a8:0b:92:16:b5:44:f4:
f5:06:ad:6d:03:ad:87:30:6e:c2:09:d9:76:d2:26:98:af:43:
35:b2:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client