Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: +FVzoOaF8+l98ymbenrLiZPWBC0Dw9th2feLPNva8/U=
Subject key identifier: 0B:3D:1C:2C:E6:F9:60:AA:F8:DF:5B:6A:62:AC:9F:9F:7C:F4:C2:1A
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019A4E4F8E5C957A1DEEAB0709F6F6821DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 0488
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: JIdx7+8sT0sF45aQoBUCT9k021TcdsykklJ2neI2vz8=)
2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8e:5c:95:7a:1d:ee:ab:07:09:f6:f6:82:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=0b3d1c2ce6f960aaf8df5b6a62ac9f9f7cf4c21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:ce:33:d4:94:79:9b:64:a6:9c:5e:76:c0:
03:9f:3b:bb:f3:c2:8f:b9:f8:96:aa:11:9e:a7:6d:
cf:c0:51:2a:da:cf:cd:9c:e1:7f:95:40:ad:7d:49:
fd:84:a7:e7:aa:d1:d2:16:ff:0a:93:fa:65:00:02:
f9:d0:ce:91:0b:05:d0:2e:91:f3:a8:1e:04:9e:07:
37:35:fd:53:4d:08:46:c8:72:83:be:6a:20:32:1f:
ce:74:08:92:09:e1:f6:3c:83:24:fd:f6:d7:b3:5c:
2a:85:1b:1d:0b:ed:0c:97:1d:44:14:72:3e:6f:93:
58:02:13:ea:80:11:c7:38:39:df:4c:17:9b:d0:0e:
85:47:e6:45:03:94:fa:0c:ea:e8:25:45:20:5a:90:
b3:24:68:92:6c:ad:9c:fd:d3:db:7e:ef:0d:b6:79:
4f:33:22:05:b6:31:4e:55:f0:ef:e9:38:3e:91:30:
aa:23:e2:80:da:af:69:e7:67:33:84:44:9a:46:96:
67:92:5b:62:aa:da:38:e8:50:14:98:cd:00:69:88:
ed:ea:4e:60:bb:7a:6a:d9:19:e8:81:58:64:e9:3b:
36:1c:c8:40:e4:b6:93:fd:22:01:71:d8:cd:7f:b1:
25:65:d0:39:31:69:7d:3b:74:dd:75:6e:e1:34:d7:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:1C:2C:E6:F9:60:AA:F8:DF:5B:6A:62:AC:9F:9F:7C:F4:C2:1A
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:5c:86:45:6d:72:35:b0:63:bf:78:4f:f9:9f:4f:86:0f:
92:c4:c8:3a:1e:fe:c4:67:8c:83:db:6d:66:78:8e:20:6a:69:
cb:5c:8c:66:d1:b4:5f:46:13:b0:b8:02:66:fd:b8:4b:31:3d:
15:be:45:93:d6:96:31:6f:56:a2:bc:40:6b:c9:f8:b9:83:70:
14:18:d7:c7:69:fb:04:df:8d:af:34:28:ed:47:c5:7f:c3:27:
8a:66:20:cf:b9:35:34:96:58:53:6b:b5:3f:09:ab:6b:bc:f7:
06:ca:d6:51:18:bd:30:01:a2:fb:0e:28:8b:e4:b2:1f:28:1f:
2c:12:92:89:23:51:7d:22:36:d1:c4:61:f5:c8:f9:0e:56:ef:
7b:9b:90:77:bf:94:95:23:66:4e:79:22:27:d3:3c:af:2e:f6:
77:d4:2e:41:b1:62:b8:fa:f4:af:eb:30:5a:34:68:c4:1b:8a:
18:2b:ef:a3:c8:80:ee:56:0d:cb:2a:b2:fb:5e:e9:c9:62:66:
9c:97:11:77:90:2c:9c:9b:67:5a:66:a7:1d:d1:9f:4a:7e:13:
0c:aa:96:85:37:44:83:2f:10:8f:5e:38:a8:3a:1a:3a:09:5a:
49:39:68:89:1e:f0:e4:30:23:b1:0a:9f:d0:9f:38:a4:8d:ec:
27:24:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:45 2025 by rpki-client