Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: hCD1wyzRiZGgCyPPWLBmq5KDGdOFTYIDSsjpmyzFeWo=
Subject key identifier: 0A:CA:B6:DE:E9:AC:00:48:DC:B7:47:73:92:0E:22:03:FD:9E:B5:49
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019A4EF45384FFC9C0738E77E48EAE998988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 10C0
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: ejYsjOZAflmhtAwdmzG/ijhPaEQG3Y/AjgXIu7PlCh8=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:53:84:ff:c9:c0:73:8e:77:e4:8e:ae:99:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=0acab6dee9ac0048dcb74773920e2203fd9eb549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:aa:01:26:f0:63:24:8c:4e:cc:45:5a:1e:
31:d2:ae:1d:45:44:1b:9a:f8:53:a8:60:8f:65:d7:
09:11:53:9c:7e:ef:1f:e5:aa:9a:73:a4:bd:55:13:
c8:56:fc:ac:26:d8:e2:93:99:2f:79:63:02:a3:4a:
bc:99:d9:14:6b:01:24:6b:95:77:61:69:b8:30:31:
4c:4c:75:eb:e7:97:99:1a:74:b2:5f:ba:a1:c4:e6:
3b:b8:31:f5:40:da:a9:d8:ea:82:44:a8:95:0f:6a:
72:c6:61:c7:b9:1a:d0:9f:cc:f1:08:46:c1:7e:49:
bf:ec:1f:18:8a:6a:69:ee:f5:a6:57:b2:54:35:fc:
5d:70:cc:b8:4a:3d:56:b0:93:3c:fa:c8:61:77:b7:
9c:1a:6e:73:18:3c:4f:87:d6:ec:1e:23:9c:54:37:
ce:1a:c0:aa:66:49:58:c8:05:4d:89:20:92:ce:46:
ab:a7:84:08:18:41:1c:a5:fd:3d:a8:1f:ae:c4:d2:
ec:c9:98:7f:c5:79:55:7c:ca:26:73:d8:40:49:08:
23:a2:12:3e:f4:e3:38:5f:1a:09:0d:0b:fe:f1:c4:
87:9f:79:47:b7:16:f9:01:37:44:3a:d8:25:66:45:
75:98:28:5b:cf:a8:e5:1b:6b:84:7d:25:0a:98:71:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:B6:DE:E9:AC:00:48:DC:B7:47:73:92:0E:22:03:FD:9E:B5:49
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:ae:13:4a:63:e1:51:eb:89:e6:c6:2b:f0:66:51:d4:61:
3b:47:f9:1c:36:27:dc:cc:73:09:2b:25:b7:37:de:a2:ef:c7:
aa:7f:72:01:53:13:c9:c6:0e:a0:23:7e:bb:15:8b:45:94:52:
b7:78:79:85:aa:28:fb:e5:1e:c8:02:e0:4a:d0:06:c7:b7:88:
9a:21:c5:bc:12:78:93:4b:af:66:a9:48:67:05:d4:9f:04:00:
04:e3:33:45:ac:14:43:83:e0:e2:45:0e:95:06:7b:75:c6:b4:
60:bf:bf:0a:23:e9:c8:79:c3:01:fd:3f:fa:16:d2:8e:12:d8:
b0:66:18:e1:7a:42:2b:27:8f:78:fe:36:ee:ad:2b:d6:f8:eb:
7f:64:ed:09:00:7b:02:28:9c:93:1a:f7:f3:91:23:62:80:51:
63:99:2c:ca:df:dc:bb:4e:e3:10:61:d3:36:4f:b6:fa:b8:28:
cf:2a:91:eb:39:2c:fd:42:59:e2:25:66:d8:f4:1c:2d:2f:ed:
0c:01:29:07:f9:10:5c:4c:6e:c0:81:bc:06:4c:7b:25:c5:3c:
2f:a9:07:db:1f:83:f6:3e:01:b5:48:2f:4c:66:a1:8c:b6:30:
52:b3:52:26:da:df:06:d8:6a:95:d1:93:92:91:07:73:43:04:
e8:ca:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:36 2025 by rpki-client