Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: 8cH653ameEY+zSlZErSX8mk8bUO02c0I3iXuK/G4FFU=
Subject key identifier: 6C:48:11:30:8E:5B:5D:CC:52:1A:82:03:D6:B9:8A:DF:49:84:B8:25
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019A71B7D6B22A2C693A66769E8C4774211A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0D93
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: lI/eI1kTta41SDV28YdXcskB+4Gv4eGMjQyKByIRjYo=)
2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d6:b2:2a:2c:69:3a:66:76:9e:8c:47:74:21:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=6c4811308e5b5dcc521a8203d6b98adf4984b825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:19:e5:d7:5a:1d:fb:06:86:a6:e9:49:b1:
b2:cb:e6:76:c6:de:2d:e0:68:4d:e5:aa:42:0c:c5:
71:dc:bc:13:7f:a2:ab:d7:76:3c:21:4b:a7:d2:4e:
22:e6:26:86:0f:2a:bf:0e:30:aa:3e:6d:7d:ef:e1:
ba:08:14:0e:1f:a9:54:c5:e8:f7:03:d0:c4:81:ca:
86:81:54:e6:06:d5:3d:ef:7f:dc:be:98:59:3f:ac:
3c:3e:f7:cd:0c:48:26:95:d5:2b:79:3f:0a:f8:68:
20:0b:50:ea:08:7f:93:dc:e9:87:a3:55:81:42:96:
60:3e:a8:3a:22:ce:d4:28:2f:83:49:6e:75:cb:05:
e3:8a:ae:7f:1e:fe:90:29:5c:89:f3:40:39:ec:2a:
5f:b6:3b:d4:19:76:57:d4:15:43:29:72:cf:ef:6a:
7b:67:1f:0d:f0:7d:2e:63:99:61:ed:78:5a:c7:01:
b7:20:56:2a:4d:d0:6b:67:27:5d:6b:c9:b9:7f:eb:
f6:00:a5:45:1c:f0:e6:4b:ba:a1:6a:31:d0:6a:f0:
47:3f:bc:95:60:da:bb:5c:27:63:3c:ab:c2:30:fc:
84:7b:6c:fc:fb:09:ee:38:73:3b:33:dc:b1:22:cf:
43:73:15:00:09:4b:23:fa:7b:64:cb:1f:40:f7:95:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:11:30:8E:5B:5D:CC:52:1A:82:03:D6:B9:8A:DF:49:84:B8:25
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:83:32:c5:2c:98:0d:80:5d:74:89:6b:94:f6:df:eb:c6:d5:
1c:b7:82:56:4a:5e:fa:73:12:2b:b3:91:05:c0:99:3e:94:1f:
cb:ea:f7:bf:86:e0:23:6d:e1:ff:61:da:18:7d:8c:6c:c9:39:
8b:34:37:1d:fd:56:37:3f:8a:c2:69:44:e7:3d:1e:78:1d:48:
02:de:bc:14:39:bd:57:ce:07:f7:00:3a:6c:8c:36:1b:ec:ab:
85:b9:0f:f8:ce:3e:39:14:fa:57:83:5b:e8:c1:4f:f7:e7:bd:
97:9b:66:0d:62:43:0f:f1:df:f4:66:2c:65:db:f3:29:27:de:
75:78:2a:1c:f7:d5:ab:46:cd:52:6d:1f:72:70:e3:11:a4:a9:
f0:b7:5b:cc:87:3e:d5:75:6a:3f:48:77:83:97:d6:00:15:56:
cf:62:bb:26:9e:ed:db:63:8f:4b:f0:46:18:dc:a5:e3:33:89:
d5:42:66:22:63:11:2f:66:85:e1:50:20:83:b8:e5:14:73:f3:
23:72:fd:44:85:f4:fd:f9:4c:af:0d:a9:6a:eb:b6:fc:f3:90:
30:f5:f8:27:e0:01:08:7b:4b:b6:43:bb:0b:6f:a5:23:f2:aa:
4c:e1:1e:9f:91:8a:3b:cd:9d:19:41:34:8e:56:f5:49:cf:10:
07:bc:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:53 2025 by rpki-client