Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: aEX/MZz0a1u84vSaLv1/N5crCG6vodZDb+SwrZpkd9o=
Subject key identifier: F7:83:2F:EB:0F:35:06:A5:68:CB:08:F6:DB:DA:0C:CA:D6:35:95:0B
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 019A71B77B38F3DB3F7D6508EBFE2AC511FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0FB4
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: Py5fHzCOrYlA+hNb4PGNACAY+mSC3kH4PLYWthu/Yy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7b:38:f3:db:3f:7d:65:08:eb:fe:2a:c5:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=f7832feb0f3506a568cb08f6dbda0ccad635950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:e1:d4:84:40:04:79:5b:3f:7f:1f:0e:5a:
87:6f:f1:1b:90:6b:24:27:1a:ff:c0:bd:29:66:f4:
1e:5b:75:bd:56:96:de:8b:28:23:73:b5:c3:9c:3a:
ce:3a:80:39:c6:30:56:43:6d:c8:3a:52:8b:ba:4e:
af:62:03:20:13:b4:20:ec:da:32:82:6d:8b:d7:9a:
ea:60:b9:9b:c1:27:c6:f6:00:54:13:c9:a2:cc:70:
1d:ba:89:66:aa:ae:23:15:0f:89:6f:40:8f:20:3f:
c7:53:73:e0:59:d3:07:05:6c:58:82:7d:0f:42:dc:
da:d1:8c:5b:2d:9d:f6:f5:fb:31:0c:25:c0:29:3e:
a9:9f:c4:63:28:e3:5d:e9:1b:2d:3d:e1:8d:7b:a6:
7a:e3:61:f4:b7:11:e7:cb:34:e5:9e:ee:b9:76:a8:
e5:a2:86:a1:02:0c:16:23:aa:39:12:0e:f5:2d:a3:
d1:73:48:6b:b6:89:13:12:19:15:1b:69:20:81:b9:
97:92:f6:80:ee:f1:c8:b3:c0:19:5a:57:a8:89:b1:
91:29:ff:c7:24:be:7c:c0:5f:8d:71:32:d5:45:51:
6b:1e:70:83:d8:4f:e6:a7:db:ee:a5:6a:3f:be:9a:
62:37:a9:b7:c1:76:76:d7:23:aa:ef:8d:26:25:74:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:2F:EB:0F:35:06:A5:68:CB:08:F6:DB:DA:0C:CA:D6:35:95:0B
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:ec:28:4b:78:e4:f4:86:25:47:9b:5b:d6:c7:55:bb:f8:
6b:08:7a:22:ce:da:a8:34:3c:a3:68:a9:ba:c0:10:eb:cf:98:
2e:a4:0e:34:10:ee:c7:aa:63:5e:1b:e1:e8:c8:29:b5:ab:8a:
e2:ad:aa:5a:c5:3f:44:a0:bd:b9:61:1f:76:86:17:51:39:91:
0d:e0:50:a4:b3:30:05:2d:1c:59:a4:0d:32:b2:cc:63:0d:15:
12:d8:1b:ad:92:74:ed:2d:d5:cb:c8:dd:94:2e:8c:e2:86:4f:
62:2d:b1:9b:78:7d:f7:0d:a3:dc:ac:e0:69:d4:9d:7c:64:80:
8b:2b:db:3f:b6:f5:d0:59:35:67:8f:da:57:c8:7c:bf:3f:87:
5f:85:f9:7c:ce:94:ba:39:d6:2a:74:b0:ac:e9:a6:32:2b:96:
df:b5:2d:68:5d:48:57:25:e2:ce:b0:a7:2b:26:3f:5c:3b:a0:
ce:4f:ee:c1:89:4b:33:cb:8e:0d:9b:a0:3d:dc:5d:30:83:b4:
f0:93:06:53:51:40:95:48:fb:cd:11:ce:59:b7:08:c2:a6:45:
58:aa:af:92:f2:bd:e5:b9:76:4e:41:09:61:fb:dc:1a:16:e6:
7a:d9:b4:90:94:25:67:bc:dc:63:6a:1c:b4:5b:2b:29:b6:8e:
f5:98:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:20 2025 by rpki-client