Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File: AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier: M2yUIy64walIx9anh+bypVh5s22N5yuSWhHfuRKDyaI=
Subject key identifier: 42:38:22:76:1D:BD:69:87:48:79:12:A3:C1:5A:9A:39:0E:C0:AB:13
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 019A714A369F48C26474FEBA808FA26AEDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number: 10F3
Signing time: Tue 11 Nov 2025 05:01:20 +0000
Manifest this update: Tue 11 Nov 2025 05:01:20 +0000
Manifest next update: Wed 12 Nov 2025 05:01:20 +0000
Files and hashes: 1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: swO1eW2Zm+xJv+qaCtgo+/jPo5VEiwE3fI0C21OQ//E=)
2: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (hash: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:36:9f:48:c2:64:74:fe:ba:80:8f:a2:6a:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Nov 11 05:01:20 2025 GMT
Not After : Nov 12 05:01:20 2025 GMT
Subject: CN=423822761dbd6987487912a3c15a9a390ec0ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:6a:73:7e:73:55:5d:06:51:30:83:d2:d8:
60:ac:fe:fd:58:91:df:d9:ab:77:e5:2d:33:40:9b:
bb:1e:d4:8d:9f:3f:e6:ae:98:6b:f5:90:03:bb:63:
3d:61:5f:c8:ff:d3:ce:0c:f6:4b:75:18:f1:b7:62:
c3:b5:b1:b5:0c:24:88:d3:f6:a6:ad:82:22:16:48:
af:16:b5:c3:60:7b:66:47:49:4b:98:d6:13:e7:43:
10:d2:6f:79:e5:ed:c8:40:0f:76:e8:1e:2a:3b:89:
7e:7a:51:d2:79:89:60:63:85:bb:5c:44:66:e3:62:
54:54:d4:4d:70:43:4b:c3:8e:f0:4f:b2:31:3e:67:
dd:7e:d4:75:9e:8e:0f:f6:02:91:e9:0f:8d:63:f0:
93:05:6b:89:cb:b6:50:b8:ab:4d:62:13:96:d6:7e:
93:f8:6f:a1:e8:b4:46:6c:92:c5:9c:61:c3:3c:12:
00:f9:49:69:2a:14:da:05:2b:bd:08:85:60:2e:9f:
1a:f4:cd:e2:7e:42:13:3b:92:30:71:03:56:8a:eb:
e5:0c:c3:9a:ad:17:ea:ac:bf:7c:86:3b:6b:77:61:
17:33:36:7e:66:78:f4:86:a7:ab:44:83:4e:d9:df:
31:dc:1d:7e:0e:61:2f:5e:fd:6e:20:4c:18:48:b2:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:22:76:1D:BD:69:87:48:79:12:A3:C1:5A:9A:39:0E:C0:AB:13
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:36:e9:2d:16:09:10:bd:6c:27:1f:ff:cf:4e:23:1f:d5:
6b:63:a0:bc:5d:2f:73:e7:68:1a:15:1e:c4:6b:c6:db:6a:20:
b7:67:56:64:1b:c7:e6:6f:c1:32:2a:c8:e4:d8:23:da:de:92:
ef:7a:d8:8d:a2:fa:ae:22:6a:2f:d1:6b:cd:f2:b3:5c:86:b0:
2f:ec:8c:51:40:77:91:16:4f:cf:88:40:8c:06:26:8b:40:64:
f6:37:19:48:84:93:45:a3:b4:85:9e:a1:9d:86:69:b5:b4:59:
83:0a:a4:e5:2a:2b:6d:14:da:c5:af:c5:ca:f4:7d:bd:db:f3:
a5:d9:b2:29:fe:b3:56:bb:08:af:0e:a8:30:d7:bf:13:48:03:
9a:c8:15:09:3a:9f:16:15:f3:99:7d:f7:6f:f8:d9:55:97:6b:
8d:04:09:b9:26:52:cb:ef:3c:cd:df:74:aa:27:e9:fa:17:f7:
9a:fa:67:fd:ff:f9:e8:3c:d9:13:74:b2:ab:b5:30:aa:bb:4a:
a9:26:8a:a2:cd:ec:95:69:20:c4:da:d9:e2:7d:b8:5e:9e:c0:
b5:01:e7:d0:3c:05:3e:49:9f:c3:2a:bb:ea:2c:cd:41:4f:c8:
7b:b6:d6:85:a7:a1:9c:78:64:d8:77:36:d6:65:c6:4a:71:0a:
a5:5b:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:29 2025 by rpki-client