Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier: ymKbY64kXQlzvdIQ5zcWSOut5tZVndatg2IAYtmqHYo=
Subject key identifier: B4:8F:15:06:F4:12:79:4E:4B:11:B0:C8:45:A6:EF:BA:AB:1C:1A:CD
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 019A71B77B1B6158828B412AB0721DFB852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: qkcboZktT/eDqpBgQlqF3VLgDO3IUQA1a89pRE2iBxc=)
2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7b:1b:61:58:82:8b:41:2a:b0:72:1d:fb:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=b48f1506f412794e4b11b0c845a6efbaab1c1acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:09:69:c7:e5:82:b5:b0:a5:fd:7b:99:59:
41:6f:9b:60:a7:17:d0:54:b2:1c:47:4c:b5:c1:f5:
d1:29:b0:b8:30:55:1e:c3:cc:47:04:f2:d6:43:7b:
96:f6:92:10:c9:20:58:c9:7c:6a:44:79:19:20:86:
f3:00:f5:13:f8:1e:27:2e:17:a0:cc:8c:df:53:5d:
33:eb:c9:46:ed:7a:14:c4:8f:09:30:b2:aa:eb:fc:
15:d9:48:c7:61:44:14:66:95:9d:a1:42:20:1e:a3:
26:47:e1:6d:57:12:d1:e0:0b:86:52:d8:4f:ca:ba:
d3:0b:75:d4:ea:28:8a:69:54:72:39:f3:47:b3:54:
fb:3e:48:9a:9c:9f:e3:77:05:40:75:61:2b:1a:43:
2d:d7:ac:e5:3f:fb:69:1e:de:0f:c8:1c:1b:aa:e1:
c7:53:4d:12:0d:6e:7a:69:c3:48:71:55:8c:ff:2b:
31:82:2c:ac:e0:47:f4:7f:dd:0d:1b:92:c3:c7:51:
b3:d0:7b:5d:26:77:36:2e:f6:56:d2:46:91:74:b7:
a5:b2:cf:56:67:77:03:a2:90:3d:b5:ff:a7:fd:72:
5d:56:d4:e8:e4:20:bc:c8:06:1e:bc:82:0c:80:4b:
68:1f:24:42:a4:79:f1:25:8d:44:b1:d8:3c:29:79:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8F:15:06:F4:12:79:4E:4B:11:B0:C8:45:A6:EF:BA:AB:1C:1A:CD
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:05:8b:43:d7:24:34:11:b4:d2:f5:91:63:25:fe:7d:19:46:
97:c3:6d:6b:27:41:8a:17:52:dd:0b:e9:2b:e3:d8:2c:72:80:
97:ca:f9:15:b7:46:43:4e:2e:40:be:93:c7:7d:fe:df:7c:aa:
d5:a1:7d:53:c0:98:79:f0:5a:79:3b:6c:31:88:7d:e5:24:6e:
f3:22:66:cf:74:f9:3e:c0:89:ca:67:a6:bb:2c:dd:6f:27:72:
93:d2:33:f2:f7:69:d1:4f:6b:13:ca:b1:71:2b:13:db:39:28:
34:d0:e4:af:2f:f2:e1:60:c1:b2:e1:f4:24:44:58:c1:05:eb:
a2:e0:3c:4b:34:c5:36:58:1d:85:cc:ae:52:3e:0c:fa:ea:8a:
9d:9c:15:d2:02:0c:63:63:8e:7b:d6:86:06:d6:16:a6:d9:43:
7b:dd:13:cb:d5:00:2f:da:a9:ef:9d:92:58:22:04:49:0e:28:
f8:88:21:9e:6f:60:3a:65:c6:4f:aa:a5:35:a7:48:57:34:7c:
3e:d1:d5:78:c7:32:85:40:77:65:6d:f9:32:e0:ce:a9:3a:3c:
a2:8e:af:1c:82:f4:97:c9:a8:60:b1:e2:fb:34:c4:fc:5b:60:
91:f8:a1:31:d6:8d:64:81:df:3d:34:68:0b:f0:bc:68:0f:02:
25:a1:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:20 2025 by rpki-client