Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: upySe8zZKnAeJxgjSuzdl4Z7iV7i9b8subxLrn3XQNQ=
Subject key identifier: 79:46:2F:AF:EF:09:EF:8E:5B:5F:7D:96:41:E0:DC:0F:89:E5:CE:FB
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 019A7112C379C2D368F7FB0DA505AB1BAC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: yhki2gWMoA2wq9fLJ/al1MQavHCHBxgVJkJCm14KLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c3:79:c2:d3:68:f7:fb:0d:a5:05:ab:1b:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=79462fafef09ef8e5b5f7d9641e0dc0f89e5cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:9a:9e:6a:70:f2:1f:d4:d9:df:14:ad:f7:
c6:5a:49:e2:56:5a:b0:fa:a5:12:c2:75:a9:07:a0:
21:15:ed:b3:5b:19:a4:da:d8:f4:c7:7d:8e:88:f1:
89:8b:f9:a9:ec:5b:75:42:62:24:44:57:fc:51:49:
c6:bb:41:a1:75:34:20:4b:cf:dc:d4:24:25:41:5c:
74:1f:99:57:1b:f8:1d:68:33:2d:35:cb:c6:f4:a5:
88:44:b8:21:ac:f8:df:45:6b:26:89:c1:1c:ba:7d:
91:91:3d:b4:a7:91:15:f6:f2:7b:26:c3:de:fb:92:
e1:c7:05:3f:bf:87:92:d0:f2:c4:8e:c7:de:d8:b2:
df:12:c5:5e:1a:f7:63:56:d8:52:6f:b2:fb:bb:f6:
1b:b7:3b:29:5b:74:93:49:25:1e:ef:72:b7:6e:e0:
23:c0:9a:76:05:20:b6:93:7a:09:7f:0e:4f:fc:dc:
6a:55:69:cb:bb:48:6b:7b:0d:4c:25:bf:e2:6d:db:
1a:3d:a5:82:8e:bc:b2:4d:de:03:66:65:aa:67:6a:
fc:3c:b0:bd:7b:34:f8:9a:b2:41:4a:39:3f:88:f2:
1d:9d:28:4d:07:6a:a5:a4:d0:6b:46:8b:35:d7:f8:
67:df:ef:d0:85:6b:48:6f:a9:67:44:cb:cd:a0:33:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:2F:AF:EF:09:EF:8E:5B:5F:7D:96:41:E0:DC:0F:89:E5:CE:FB
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5d:20:e6:b1:5c:d7:2d:d7:1c:ed:b6:3b:94:c9:c2:1f:85:
db:8c:29:72:cc:23:42:2b:6a:df:db:74:30:1a:12:07:51:fd:
68:b6:3e:19:1a:4e:eb:fc:e9:22:b2:6e:60:8d:18:78:c2:94:
c7:d3:9a:4b:dd:c4:55:5f:fb:11:b9:3b:21:3e:fb:47:87:4e:
85:66:17:65:7d:d6:1b:3b:28:fd:72:2a:fe:15:c6:39:df:31:
33:4d:5d:25:eb:5c:22:31:52:cf:8c:02:cc:63:f2:d5:bb:a6:
39:a5:c3:e8:7d:02:a8:50:6a:ce:33:4a:d1:aa:dd:f1:cb:0e:
45:2a:1c:58:b3:e8:6b:90:b2:d0:3d:84:a4:8c:f4:fa:c4:f2:
5b:42:12:a8:d5:a8:33:16:6d:1d:c4:9e:16:68:9a:40:bb:9b:
98:b1:10:e7:e7:f8:f9:20:15:dd:f2:7f:25:02:76:fa:ab:36:
2d:1c:bc:64:b1:ce:ea:e6:3a:f5:fc:5a:da:2d:f3:da:00:9e:
76:77:56:e2:fc:6d:ac:94:8e:fe:3c:c1:8f:ca:5f:81:3f:35:
37:ec:6f:26:94:55:d1:08:c3:9a:cd:e3:01:de:41:8a:02:cf:
47:6b:b5:fd:1c:3a:35:45:fa:c7:16:8d:ea:a0:35:d5:15:40:
ad:70:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client