Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: Mnkd5b+20Rns1Pun13YzpMasBo2wXaJDUXC+W1RcZWk=
Subject key identifier: 71:AD:FB:78:F9:8B:80:16:02:C0:4C:F6:71:11:94:75:08:F1:D9:E8
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 019A71B90AD38EE40A4048F79C1030373FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: qOKkdNNq7u0F4r49+SqUY4W9YhH6IEq8Q+iktaxiWSk=)
2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0a:d3:8e:e4:0a:40:48:f7:9c:10:30:37:3f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=71adfb78f98b801602c04cf67111947508f1d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:01:bc:47:a0:12:fa:f0:10:cd:94:28:1c:
9f:a5:2d:bc:26:05:be:18:e8:47:27:90:66:d6:75:
48:79:fa:66:78:be:e0:db:76:04:cd:84:10:f9:c9:
55:05:26:44:12:f6:da:df:43:72:92:60:9e:2f:98:
0b:32:68:94:fe:00:15:ae:6b:5a:d4:86:8c:38:c7:
f1:6a:2d:10:2e:70:99:9e:50:80:a5:f6:b2:37:3c:
43:a0:48:a4:d1:2c:91:ab:4a:16:cc:6e:72:98:c5:
9d:17:24:3b:f8:ea:5b:65:67:5a:1e:5a:11:84:6a:
47:59:e0:1b:11:6f:33:b3:fa:f4:c4:1e:14:3a:a8:
29:4d:4f:50:d6:9b:53:d9:74:24:0c:78:22:f4:13:
4d:f3:23:3b:2a:e2:39:a9:d2:4a:b2:ee:a2:8e:6a:
bd:fd:92:11:87:96:96:49:c9:eb:99:c5:c1:90:6f:
6b:53:af:f5:53:a0:48:7b:15:9d:58:10:83:6d:fe:
7c:73:bd:11:cf:a4:f5:ce:b5:97:63:4f:80:21:a5:
d5:28:27:c6:f1:f1:a5:7f:b3:a4:1e:08:ae:bf:cb:
2e:86:c2:b8:5a:ab:b2:7f:38:3e:f0:c7:7c:e6:a3:
b1:62:e2:8f:8f:c4:32:c4:76:78:aa:87:1e:77:ba:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:FB:78:F9:8B:80:16:02:C0:4C:F6:71:11:94:75:08:F1:D9:E8
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:1d:68:50:e1:23:c3:65:2a:ff:36:5d:12:f7:96:de:08:
18:f0:cb:53:5b:f7:1c:40:d7:ca:f3:27:6f:3a:fc:7f:b0:ab:
24:fc:a4:d7:7d:50:df:8d:8d:35:b1:a7:59:ed:1b:dd:19:43:
16:6c:93:4c:dc:f7:da:dd:9c:2f:0a:cd:e2:b8:1a:21:84:1f:
c2:e7:04:8a:59:23:81:e7:e5:99:e1:b1:f3:77:72:58:db:38:
20:35:e7:25:72:a4:de:da:5a:27:6f:75:be:eb:1e:3b:1e:9d:
a7:61:e4:99:fd:f2:00:2a:b8:41:f4:d6:0b:18:ec:fa:cf:7d:
6a:a2:29:de:f5:70:a5:0b:87:b2:ee:a5:f4:2f:9b:2f:05:e2:
76:93:14:b6:94:eb:df:a4:c8:a8:a4:45:ed:eb:b7:5e:2b:5b:
c5:45:58:df:66:f8:84:54:80:8b:d6:23:ad:89:5e:40:b5:b0:
6f:16:68:88:6d:6e:93:12:93:55:81:77:f9:3f:00:e1:3a:95:
62:d7:fb:0b:16:81:68:20:08:cf:78:66:04:21:b6:8d:36:c3:
31:61:a2:c8:53:f7:a0:b0:31:c5:9f:0d:c0:98:c7:cb:9e:ea:
a9:00:63:d9:6a:e5:6b:75:cb:55:0c:1b:4c:be:65:bf:4c:a9:
67:ba:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:31 2025 by rpki-client