Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: TnBFbEwibglBuYrzeesTU+NecMQ+w1yZTIeGiot1CVc=
Subject key identifier: FA:42:FD:FA:C4:0F:D8:A4:2E:B3:07:B3:84:0D:D8:87:9D:58:F8:96
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019A733890987F9B92C9C324EDA0459951B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0A11
Signing time: Tue 11 Nov 2025 14:01:18 +0000
Manifest this update: Tue 11 Nov 2025 14:01:18 +0000
Manifest next update: Wed 12 Nov 2025 14:01:18 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: GkZQRcvBYn+5ts6J1MjbaB7KqURO5XegvBGMno+feeA=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:90:98:7f:9b:92:c9:c3:24:ed:a0:45:99:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Nov 11 14:01:18 2025 GMT
Not After : Nov 12 14:01:18 2025 GMT
Subject: CN=fa42fdfac40fd8a42eb307b3840dd8879d58f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:aa:4e:3c:27:1a:d3:6b:af:3e:78:40:12:
45:e0:74:f0:c6:0f:07:86:56:ba:4e:e1:a0:a0:f4:
12:36:59:11:e7:63:a5:8e:c9:63:68:0f:4a:43:a5:
11:79:05:f4:e7:ae:f7:81:0a:29:1c:c6:29:d8:68:
79:58:40:21:d5:a8:25:da:c1:da:15:1f:d2:2d:e6:
68:54:55:3a:82:cc:63:48:65:c3:49:7d:52:f4:0e:
44:a7:71:a8:a7:94:a3:9f:b8:f0:26:fd:25:78:37:
29:f7:ed:f6:87:6c:e2:1c:e7:fb:07:c7:e9:6f:9c:
d2:85:9a:8c:e2:3c:d8:81:6e:7d:80:30:97:d3:e9:
f0:24:f3:c1:62:ea:17:13:99:17:f1:5f:15:c6:00:
75:6f:f8:6a:46:ec:e9:62:3e:92:73:19:9d:db:bc:
5a:5e:bb:d0:a9:9e:33:fc:42:03:66:1e:aa:ec:d5:
b2:02:b1:36:cb:a4:92:0b:04:21:ce:f9:e5:e1:46:
a5:ff:5f:f5:bb:fb:fb:42:55:3d:d5:42:00:ae:83:
b8:a4:72:f8:38:4a:c8:40:94:66:0a:89:9f:4d:43:
ba:e7:1f:7d:2f:79:b3:73:50:8e:8d:41:32:ed:cf:
24:f9:76:d5:44:ff:88:bf:51:4a:be:a4:25:e7:19:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:FD:FA:C4:0F:D8:A4:2E:B3:07:B3:84:0D:D8:87:9D:58:F8:96
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:84:78:07:31:20:82:ca:3a:d9:e1:e6:ea:94:de:8a:2a:
9e:74:37:17:0b:89:cc:c3:4c:34:e4:fe:7a:d5:29:99:aa:99:
b7:b7:eb:63:05:ff:7e:e4:86:3c:b8:0f:e8:0a:ab:f0:37:c6:
97:ef:41:32:c0:95:b0:85:20:96:8d:3a:6b:a1:df:87:8b:18:
9e:37:cf:82:b0:71:35:7d:b1:93:01:1e:70:1a:3f:bc:31:6c:
60:5c:2c:80:dd:99:16:0b:58:64:a0:39:b7:33:6d:ad:dc:d6:
0a:98:e7:ca:46:c1:3b:87:48:70:19:06:33:ad:6e:ee:16:fa:
48:82:4a:fa:4f:0c:5b:d5:68:8e:07:20:be:1f:00:8b:2b:9b:
a7:1c:b4:4d:85:a7:e3:a6:a8:b7:b8:c1:d9:a9:e6:75:b8:9b:
ae:77:ff:b8:ee:a5:77:65:c4:5f:d3:76:6f:db:22:08:e0:9b:
6e:57:49:f8:ff:bc:fa:60:67:c5:d0:ba:a4:c5:99:75:2b:82:
75:e5:ba:92:ea:11:b5:5f:e0:4c:b6:fc:1e:88:34:3f:04:df:
1a:40:0e:d2:8f:be:c7:39:ae:88:1d:2b:7a:2d:89:15:6d:56:
6b:cb:37:2a:aa:6b:16:37:c3:aa:3c:3e:ae:c2:2a:7f:e1:f5:
36:9c:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:11 2025 by rpki-client