Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: Of3w9NHDMW1krR5ZviJaacVlLrIzEsFI3C+LTmn8Q9c=
Subject key identifier: A6:38:12:80:54:89:87:78:B6:59:C5:6A:F4:61:89:31:D7:0B:2E:E8
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 019A7338893E82801ECABDFE5443A849CE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 021C
Signing time: Tue 11 Nov 2025 14:01:16 +0000
Manifest this update: Tue 11 Nov 2025 14:01:16 +0000
Manifest next update: Wed 12 Nov 2025 14:01:16 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: BJGIEinV4XUHRSsnErVKiHA+Fnwx6GHxUCKNt1Fmhco=)
2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:89:3e:82:80:1e:ca:bd:fe:54:43:a8:49:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Nov 11 14:01:16 2025 GMT
Not After : Nov 12 14:01:16 2025 GMT
Subject: CN=a638128054898778b659c56af4618931d70b2ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:29:eb:5a:47:27:c9:b9:b8:d8:ee:c5:a4:
04:b0:25:56:30:80:56:2d:23:4e:86:6a:50:3e:c7:
39:84:ef:24:90:a2:17:65:44:1f:35:66:c6:50:6c:
8c:b4:e2:63:75:1d:d7:98:e3:84:1f:33:39:60:33:
c7:1d:c9:90:df:2a:27:9e:a4:31:1d:ee:0d:b0:ee:
0e:5a:1b:d8:5c:88:2e:9a:dd:f9:e7:c4:e7:23:20:
2a:e7:13:b6:67:26:38:35:c5:03:c4:69:73:f2:69:
0a:14:52:b2:69:d1:69:bc:30:64:74:0b:4c:fc:f7:
46:ad:7f:06:57:06:68:37:b5:e4:f2:c5:bf:0f:b9:
0c:93:2b:04:30:14:e8:6d:1b:f3:14:53:ba:78:6b:
0d:17:d4:4c:c7:ce:8a:c3:23:86:75:ca:a4:cf:dd:
63:54:cf:a5:5c:3a:8e:fe:a2:93:91:6b:55:da:3d:
64:b1:d6:c3:01:bd:8e:40:41:1a:5c:2d:bb:90:00:
06:11:ef:7a:fa:2e:96:34:18:ce:e9:5e:f5:98:6c:
01:34:13:e6:66:83:b2:70:96:af:f3:3e:ef:55:b3:
9e:61:d5:73:b3:42:b7:6e:9d:da:98:99:8f:83:58:
e0:24:2c:b5:1f:81:6e:98:1f:fb:bd:7f:fa:24:fd:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:12:80:54:89:87:78:B6:59:C5:6A:F4:61:89:31:D7:0B:2E:E8
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:82:78:46:43:01:38:27:40:84:6f:e2:a0:db:79:94:5e:
66:ee:26:77:81:ec:de:c5:04:3c:36:ba:e8:5a:04:4e:9f:98:
4b:bf:65:84:64:e7:cf:26:74:9d:9c:11:da:13:b7:6b:30:37:
ec:42:d0:ec:c3:25:6e:54:36:de:f9:31:4d:b7:9d:6d:10:80:
7f:bd:24:0f:0e:03:d6:34:b8:b2:3b:6f:21:a9:92:e1:63:22:
47:26:8e:30:6e:c8:21:60:28:a6:c1:5a:ba:88:3d:3e:d0:c7:
ac:55:90:38:7f:8d:bc:86:74:30:67:be:68:6b:2c:34:86:80:
88:27:be:05:23:71:40:2e:65:67:1d:af:47:1f:e8:a4:17:dc:
6c:4b:f9:4e:f7:9f:70:55:f0:6c:31:55:31:98:d1:c2:55:98:
32:ee:58:40:75:b8:69:45:85:63:f1:4c:4e:c8:68:14:36:ea:
38:09:5d:67:8e:90:99:d3:eb:e3:93:e2:5e:5b:5d:6b:75:14:
9e:a3:6f:75:b9:b5:fb:3f:47:60:25:13:8c:91:de:06:23:f7:
e0:dd:6a:4c:94:ba:4f:a2:22:e3:f6:8e:32:fa:d6:05:ed:8d:
5a:72:f0:bb:69:f3:aa:0e:34:ad:91:00:2a:4f:ed:df:db:ac:
06:e6:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:59 2025 by rpki-client