Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: yTgGzDrcNuEG9t2NUs1qBfpoaZg3hToFhxspakjzdjY=
Subject key identifier: A5:33:E7:BB:77:9B:39:72:4B:56:AA:01:73:1F:8C:7A:17:2D:C7:2B
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019A71130E8401BDFCAA7A5B412B9F430E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0F86
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: WrLcgfBYhtK3VetqIQ6+2hSZbrGA5fI7+RaD3C/NPWA=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0e:84:01:bd:fc:aa:7a:5b:41:2b:9f:43:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=a533e7bb779b39724b56aa01731f8c7a172dc72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:17:f6:18:f6:be:b9:c1:84:20:4d:8c:df:
76:f7:db:11:62:7e:39:ce:e5:a0:3f:70:2a:d0:64:
d4:d2:31:c1:7e:7d:a7:04:e0:75:cb:7a:b5:a8:22:
1e:81:b1:02:bd:02:84:b3:27:e9:3f:e0:db:0c:71:
b7:5d:12:f9:56:f3:ff:29:73:75:64:46:7f:e7:62:
d1:9a:d5:10:8d:3d:7d:30:64:5f:92:e4:98:5d:d5:
65:e5:b8:f4:21:d4:09:ee:9e:d3:cc:65:96:11:2c:
be:39:89:d5:d1:b0:6b:4f:7e:ad:a7:11:3f:16:2a:
e6:7a:96:d8:8c:37:a3:4d:8e:d5:6a:90:d5:b5:f3:
80:5c:8b:ba:c9:bf:8d:57:70:b8:ff:34:ea:19:9d:
24:f0:4c:dd:9a:2e:e3:40:f3:d6:21:f8:2b:af:08:
08:a2:66:66:e8:b6:3d:a7:0e:ec:1c:09:67:62:28:
99:78:ff:a8:8b:fa:62:4c:9d:d5:b4:82:61:80:9b:
55:bd:a7:59:c4:43:10:d6:f6:9e:8f:18:5b:54:04:
33:ee:52:c8:57:ca:47:52:d1:5d:5b:1f:bd:c9:cd:
e3:18:fe:71:84:0e:ad:36:fd:4e:22:da:16:8b:32:
fe:99:5d:41:52:ab:2f:af:e1:e4:19:53:6b:fa:94:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:E7:BB:77:9B:39:72:4B:56:AA:01:73:1F:8C:7A:17:2D:C7:2B
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:c0:ae:6e:98:09:4c:2a:32:ce:ae:54:33:cb:ce:71:86:
8b:8c:75:61:87:88:c4:3f:d9:0a:48:95:50:d6:6d:45:5a:d2:
8c:34:75:f9:7c:e4:6a:71:65:b3:e3:ea:0c:88:73:48:ed:7f:
04:02:4c:5f:16:a7:8a:5b:b3:4b:33:b8:7a:9e:d0:06:af:ba:
18:13:65:86:2a:94:56:75:ae:dd:87:89:7e:60:02:5a:9f:c6:
5c:db:ef:96:64:dc:0f:35:57:a2:03:d6:24:52:dc:33:c5:a8:
3c:6d:33:fc:41:13:20:b4:fc:a9:bf:d9:f6:86:62:d0:12:12:
1c:f5:78:e4:4e:8d:3c:6d:fb:bd:cf:69:c8:29:8d:07:a1:4e:
0f:69:04:3c:68:25:37:03:18:7a:48:2a:a1:6e:9a:5b:1d:5c:
8a:7e:aa:6a:a9:a6:25:22:96:11:b8:40:a2:21:6c:13:38:c7:
f3:55:cd:3f:17:93:c2:c0:97:2d:99:51:7f:86:1b:e0:d5:57:
72:c3:9c:f1:74:4b:9a:35:91:00:bf:9e:97:8d:2d:c8:35:43:
ea:ce:55:f4:82:06:08:6c:f2:0c:53:ce:d0:d2:a9:90:fb:3e:
fc:ae:bc:d7:5f:98:db:82:d6:6d:9b:09:0f:f7:75:88:94:51:
d8:20:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client