Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: i1BQitv9aTo8F9FNmNjNljXdjtQxdwHCjoXYRtSfBac=
Subject key identifier: F0:12:CC:EB:AF:87:FB:C5:C4:B5:B7:D0:48:9B:DA:01:A6:ED:EA:29
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019A71B8B7C6771F40C3AE4903ADDC27695F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0BE9
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: cDKDrj4kgWmkHwO0lNRPHlKgI0msS9OhITyuqieOR0k=)
2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b7:c6:77:1f:40:c3:ae:49:03:ad:dc:27:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=f012ccebaf87fbc5c4b5b7d0489bda01a6edea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:d4:6c:cb:a1:c8:52:a0:0d:5e:32:27:ab:
88:e6:7d:d2:06:6a:49:55:b5:24:62:89:4f:35:ec:
15:1f:12:b2:e6:bb:ab:dc:df:1d:a4:84:66:0e:68:
b6:b1:8c:c9:65:a6:81:0c:a6:dc:74:1d:69:ec:da:
20:a8:6c:3a:61:2f:45:51:08:aa:a2:67:9f:a0:4c:
45:1f:81:e2:8e:f5:31:50:c7:9e:00:53:7f:4a:d1:
cb:c1:af:37:8d:ef:e2:99:2c:51:eb:74:5a:6d:12:
fc:07:b7:13:19:20:96:8b:e0:f4:5a:08:4f:32:2a:
8b:94:5f:77:e8:3c:b9:ba:6c:be:d4:72:ed:9c:09:
c8:c9:07:0b:00:a2:91:e3:1f:ac:21:01:16:46:b3:
67:c4:4f:ba:d0:28:94:14:5e:fa:e0:10:3e:7a:2e:
e2:6b:04:d5:3e:c3:d2:15:52:90:ec:d2:f1:ec:f4:
29:4c:d8:26:d1:1d:25:57:49:35:ba:54:c0:6f:7d:
4b:47:0e:28:a6:14:f7:ed:8b:b3:5b:58:24:73:75:
c0:dc:d7:56:a9:00:e2:ba:67:f2:c4:37:27:a9:f2:
40:5a:2f:68:4b:c8:16:87:e1:42:5c:61:cf:c2:c4:
c8:dd:f2:a3:92:be:52:03:36:8a:78:b1:38:d7:09:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:CC:EB:AF:87:FB:C5:C4:B5:B7:D0:48:9B:DA:01:A6:ED:EA:29
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:9a:85:93:27:de:db:44:aa:7c:b5:9e:e2:73:63:2e:3f:
9d:0e:0b:d4:cc:36:f6:91:ee:0f:5b:21:35:eb:6a:89:9a:0b:
23:fa:10:c8:0d:1f:d3:3d:d4:97:be:5d:0a:64:78:00:2c:da:
dc:b7:44:49:77:f1:1c:e2:79:53:ca:ab:fa:35:3e:d8:38:be:
f2:33:4c:43:50:52:78:31:cf:f1:a9:68:1c:b9:d4:36:7c:3e:
7a:5c:20:7e:f9:6f:76:5e:d4:80:7c:1f:ec:4e:58:39:fb:46:
53:ac:a1:e0:fe:21:f2:51:10:64:d1:32:49:60:d8:72:71:27:
90:26:16:d9:d6:f7:b6:95:f6:6f:9f:db:57:92:3f:78:7d:c7:
7a:20:b6:03:bb:d9:13:ee:5f:46:27:b8:c2:7e:fc:e0:01:6a:
62:95:e6:67:12:57:c9:26:f6:33:68:b7:b1:e0:e3:14:63:7e:
82:f0:68:d1:10:a2:54:fc:75:d2:3a:36:fc:d7:8e:e4:a3:2f:
a6:22:bf:b5:4b:ed:a4:92:45:3a:7a:ee:26:99:cf:74:11:ee:
1b:86:aa:91:ca:94:da:2f:1d:88:bc:07:98:19:9f:c9:7a:b2:
ca:bc:dd:79:76:38:d1:f3:33:2c:dc:1e:8d:67:56:73:c1:e7:
ec:b4:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:14 2025 by rpki-client