Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: Y1dUJckAiGzVIhcbpah2FJJMutWi7Wez/6A/lLY3JCo=
Subject key identifier: 79:B8:5A:09:FB:EE:3E:69:C1:E7:08:31:FA:A8:08:4D:9F:29:7D:5C
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 019A72CAB6750AF120738CEB01D0AAFFA95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0C14
Signing time: Tue 11 Nov 2025 12:01:18 +0000
Manifest this update: Tue 11 Nov 2025 12:01:18 +0000
Manifest next update: Wed 12 Nov 2025 12:01:18 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: akFmq3qvseTM34rKJIKwKKKgQychChm5HGfrqjfQjJo=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b6:75:0a:f1:20:73:8c:eb:01:d0:aa:ff:a9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Nov 11 12:01:18 2025 GMT
Not After : Nov 12 12:01:18 2025 GMT
Subject: CN=79b85a09fbee3e69c1e70831faa8084d9f297d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:49:fa:c5:1d:9d:71:65:2e:94:47:bb:d0:
0a:73:8d:9e:34:48:f2:63:52:6d:dd:6a:70:87:32:
06:39:75:f6:51:fd:02:33:5b:34:08:aa:04:69:74:
d6:64:b7:59:76:83:dc:13:d7:cf:5a:df:34:7f:f2:
0c:4d:b5:72:7a:63:fa:82:14:99:8d:11:2a:d2:41:
2c:c5:1c:ec:89:f0:63:7c:fa:7f:cd:1b:15:d1:82:
b3:cb:5b:ae:4e:bb:5f:61:52:d4:63:29:3b:65:4a:
b8:56:42:61:49:aa:df:c6:ac:7c:ab:40:26:b3:48:
14:23:1a:7b:f4:ff:ff:c2:b4:39:81:8f:51:a7:98:
36:62:e9:ee:85:24:80:e8:98:23:04:34:90:4a:25:
1f:72:e5:19:e7:a4:e7:80:1e:8f:0c:d6:6d:b7:14:
95:f4:d9:c7:02:44:1e:43:00:b8:33:4e:4d:31:e6:
7c:e3:52:ea:6d:36:58:15:af:86:3e:ca:6e:fc:e0:
09:b6:7f:de:86:34:10:da:fc:eb:56:3b:0f:ca:71:
92:ed:e5:c1:0e:75:f6:d2:f1:88:5c:97:26:12:ca:
da:cd:42:19:5f:c9:97:bc:e4:95:11:2c:11:d7:10:
8c:cb:dc:c8:5f:64:e5:37:cb:6e:27:13:41:12:c7:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:5A:09:FB:EE:3E:69:C1:E7:08:31:FA:A8:08:4D:9F:29:7D:5C
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:58:dd:91:fd:0f:1c:1c:93:48:6b:e0:2c:d8:b7:3a:a9:
6d:81:b4:9e:ba:9a:26:e3:7b:c1:9c:51:36:d7:74:0c:d6:60:
4c:19:3a:4b:10:0a:e1:2d:9f:dd:60:34:bb:4c:46:28:a5:bb:
58:e0:18:c4:6e:c9:96:fe:5e:84:f8:36:de:bc:fa:c9:89:02:
07:c3:00:8a:26:76:e7:22:7e:fe:7a:a0:69:f6:bb:60:69:3a:
82:69:38:5e:0b:36:ad:fe:34:65:8b:22:ad:48:0b:73:31:09:
a7:42:c0:8f:4d:98:8e:03:85:39:53:a7:39:f9:cb:d3:2f:38:
fb:17:ec:ab:bf:1c:03:03:43:87:f8:c1:98:fa:9a:f1:a8:2d:
fd:c5:ec:3a:cd:8f:46:65:9b:e3:87:d3:00:3d:14:29:06:2c:
25:60:e4:d5:02:47:09:7d:28:52:bd:fb:9e:fa:22:03:e9:30:
74:0e:0f:d2:db:a6:04:a3:d7:fc:07:0e:33:6e:42:6d:c0:94:
a3:bc:a2:1a:94:3f:cb:bc:ac:de:94:d5:80:f3:13:72:92:b7:
33:7d:1d:8b:85:fe:49:f9:e3:8a:cd:de:86:c8:43:ea:d4:2a:
24:0f:34:de:dc:c6:55:4e:92:87:e2:b8:bc:50:33:b6:ab:64:
f7:25:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:53 2025 by rpki-client