Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: /5FjbNz8HdAU1dAxfyLxCAQnTAoSS/A+lTyW/bSpTnc=
Subject key identifier: 1B:BB:77:74:3E:00:9B:14:2D:A4:98:38:62:39:76:44:A0:18:AA:54
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019A71B96CC8756C6890A67706FFE5903C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:48 +0000
Manifest this update: Tue 11 Nov 2025 07:02:48 +0000
Manifest next update: Wed 12 Nov 2025 07:02:48 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: nNoJ6EWKeQv9IegR3NyhVo/2iLhDUljRy2goFQ6rylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:6c:c8:75:6c:68:90:a6:77:06:ff:e5:90:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Nov 11 07:02:48 2025 GMT
Not After : Nov 12 07:02:48 2025 GMT
Subject: CN=1bbb77743e009b142da4983862397644a018aa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:fd:1f:82:c1:f8:2f:8b:cc:62:51:9f:9e:
83:f9:5f:c6:76:2e:5c:87:40:25:7f:62:22:27:55:
2b:7f:9d:4f:b1:98:6c:db:8c:da:97:06:cb:63:c6:
81:df:17:5a:97:fc:fb:68:56:04:1d:f6:02:8d:1e:
ac:66:68:bc:95:cc:26:bb:17:9b:7d:c4:4a:15:27:
20:53:27:2f:a8:22:66:c3:3d:a8:0f:f2:41:07:2d:
3a:c9:54:e4:9f:c4:4e:c1:dc:2d:04:84:f2:d2:fc:
89:eb:e7:0a:72:79:0f:16:46:ec:43:ae:7f:4a:58:
57:36:62:4d:75:08:5c:18:94:03:ca:bd:be:58:e1:
4e:00:aa:70:74:a7:d8:e7:63:17:a1:c7:43:c2:8c:
fb:00:5e:07:52:cb:9b:14:8e:d5:a0:32:ca:92:eb:
53:52:64:14:f3:06:89:68:4a:01:61:3c:72:e3:ec:
47:d9:97:db:24:20:e0:b9:13:5b:48:16:94:4f:6e:
50:0c:44:5c:db:53:31:14:16:cd:57:c9:c5:8a:cc:
91:ea:21:09:d2:1d:3e:e2:41:aa:9e:9a:e3:cf:cc:
3d:37:8b:4e:4f:ef:0d:a7:e7:02:43:ae:fb:4b:95:
27:b4:fb:a2:43:e7:8e:d0:6b:80:28:5a:6b:ec:67:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:77:74:3E:00:9B:14:2D:A4:98:38:62:39:76:44:A0:18:AA:54
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b7:9b:4f:28:5c:4b:9a:4d:2f:0a:60:54:ac:67:fc:44:99:
5d:c9:28:05:23:48:2c:cf:0a:76:38:44:63:a5:6c:7c:ea:a8:
6b:9d:d9:be:b8:cb:35:ba:29:a7:77:43:03:81:16:6b:3e:e2:
08:3c:84:25:57:8c:89:b1:b9:ce:57:ce:2f:b5:78:aa:ec:aa:
1f:6d:3a:65:92:49:a5:80:af:d5:28:ac:7d:ab:06:ec:57:04:
38:51:78:a9:46:6a:68:0b:b6:5a:1c:03:36:a5:80:a9:8c:cd:
9d:54:8c:e6:ab:e4:57:86:ff:10:7c:19:95:6a:d0:78:59:4d:
23:5d:e9:ef:46:df:ed:e0:ea:d3:ea:6a:25:a6:60:d7:d5:c1:
63:5a:29:6f:7c:af:82:19:d9:ea:39:0c:e4:a3:04:7e:3d:2b:
04:5b:67:56:16:ae:23:d6:69:a5:5d:4d:36:16:b7:61:c4:89:
d8:55:62:c6:b1:3a:70:81:e5:9b:fa:fe:35:68:08:0c:4e:b6:
a6:e7:6b:37:c4:17:53:d6:e7:8d:96:5d:d7:f2:81:d4:6b:c2:
48:50:09:e3:ed:10:93:cc:bd:21:42:1f:78:b1:8c:9f:4e:e9:
ab:b4:ca:4d:53:e3:7c:54:76:da:9e:67:a6:85:d8:57:d2:43:
71:21:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:57 2025 by rpki-client