Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: zqN5FCfs0elxTtFNH/D8fQC1vViinRrCHSBjvVkNM7M=
Subject key identifier: 07:33:BA:40:BC:F9:6E:F7:5C:92:37:2F:6F:20:C2:36:8F:72:4C:F6
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019A4DE172AAF9EF5FE502D3AC23DC5B3619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: ncEMm4JasmiN/9+PUp8YLXVqzWIxEtIcExDc+Pv/Ldo=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:72:aa:f9:ef:5f:e5:02:d3:ac:23:dc:5b:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=0733ba40bcf96ef75c92372f6f20c2368f724cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:f4:3f:6b:63:65:26:89:b1:b9:3e:4f:14:
b6:3d:74:88:2e:0e:da:54:18:32:d4:86:35:ab:ce:
0a:78:a1:fa:5b:29:8b:1e:58:9d:db:18:14:9c:bb:
49:1a:3d:71:13:a4:63:1c:cc:ba:78:61:4f:be:e4:
a0:72:ea:4c:27:6a:ed:58:66:58:b3:fd:34:28:9a:
37:b5:68:1e:f3:61:49:db:64:06:66:4b:b0:18:6e:
ec:f7:60:cd:75:87:ff:37:b1:2f:3a:d9:ad:73:80:
77:68:2a:03:07:5a:f2:8b:40:94:0a:36:63:00:2a:
fd:cd:a0:87:0f:e3:70:ff:9e:64:4f:14:7a:5d:d5:
0f:fa:b7:c3:2a:3b:cf:14:cb:d3:7d:58:6b:0f:ff:
8a:31:b8:d9:69:01:d0:60:a3:81:86:48:f3:9f:4a:
f8:90:c2:bf:69:33:b5:22:a6:2f:02:09:39:5b:69:
14:2c:df:89:17:8e:ec:55:4f:43:e3:d5:06:70:85:
73:e5:10:0e:53:7c:41:8c:ec:df:f1:55:7e:ad:6b:
1f:15:18:0c:34:39:1d:b6:e9:8b:53:54:e0:54:47:
f2:9a:db:29:a1:3f:26:e2:fa:32:8d:17:ae:6b:a2:
12:f9:1f:07:2e:f6:ac:f7:84:0a:0f:30:79:14:3a:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:BA:40:BC:F9:6E:F7:5C:92:37:2F:6F:20:C2:36:8F:72:4C:F6
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6c:c2:fa:a2:1e:e6:13:82:d1:27:e3:f0:3d:3e:e2:5a:d4:
48:02:88:cd:40:b6:23:dd:d0:7d:20:ec:c3:a3:b2:e6:27:98:
b8:3b:5d:5c:ec:6d:0b:c0:1d:57:c7:46:70:2e:43:f1:3b:c7:
8b:63:b2:46:f1:b8:e2:b3:c6:4f:fe:f2:94:f2:d7:6d:1d:6b:
40:de:c2:41:9c:e6:92:3d:fe:5a:8c:47:90:1e:0d:f0:ab:4a:
1c:c3:fb:15:6c:4a:d8:ad:0c:87:f9:02:d1:6d:6f:50:5b:08:
2f:74:b6:fb:c3:74:71:10:44:ea:0f:a2:0f:34:4c:3a:71:ca:
fb:5e:6a:e8:11:5e:ba:17:3b:fb:74:9f:60:46:43:b0:04:02:
11:a0:3f:0c:26:ed:ad:58:11:26:0a:3f:f4:50:91:19:33:a7:
38:db:54:4d:af:79:01:ca:c0:30:64:e5:2b:99:e1:ec:e5:51:
96:3d:15:2d:96:10:91:72:d7:74:8d:79:15:1a:11:a6:5a:74:
26:b2:12:e0:00:21:4d:b5:8b:e9:2f:ae:b7:9f:4a:f4:82:cd:
35:a4:a3:e1:45:12:fb:32:8f:5e:a2:9b:c2:df:94:af:5b:2b:
39:1b:d5:03:3b:e9:4c:3a:6e:2d:ca:60:3e:5e:b0:b8:04:9e:
f6:b2:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:40 2025 by rpki-client