Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: Ei2YmBwYaC/WA8ByAX7F9YdVdS5bUItiVLAGDF+Nz44=
Subject key identifier: A3:D0:9C:DE:9C:41:F9:6B:1B:F3:B3:6B:04:FA:1D:A0:28:28:53:52
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 019A50E37FD6DB36A10F967238996AAA180E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 0817
Signing time: Tue 04 Nov 2025 22:01:17 +0000
Manifest this update: Tue 04 Nov 2025 22:01:17 +0000
Manifest next update: Wed 05 Nov 2025 22:01:17 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: a93/YdKSHL9XIdyLTqv6vUZ7ifRNW+T1P1WItPw6yic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:7f:d6:db:36:a1:0f:96:72:38:99:6a:aa:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Nov 4 22:01:17 2025 GMT
Not After : Nov 5 22:01:17 2025 GMT
Subject: CN=a3d09cde9c41f96b1bf3b36b04fa1da028285352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:7d:3f:fa:de:0e:45:26:67:2a:25:12:ba:
33:1b:19:fc:89:54:5e:4d:5b:8b:14:9d:7e:e4:74:
1c:cd:00:37:6b:c7:ca:44:dc:9d:c2:69:0e:2b:6a:
ec:b1:3e:c9:57:ab:be:bc:d9:96:55:53:9f:37:1f:
28:35:a3:db:da:3d:84:49:8a:45:da:46:20:37:cd:
57:84:28:3d:33:df:6b:72:c2:8d:a1:6a:28:81:23:
b5:47:5e:6d:c7:7d:34:7f:01:f5:ac:92:3a:c1:fe:
1e:56:d3:3e:b2:aa:2b:41:ae:6c:14:c4:71:48:13:
f3:27:80:a4:2f:ed:6a:bc:18:48:a4:2a:fe:fe:34:
20:da:36:ef:b7:69:f3:1c:0f:13:b0:2e:0f:47:42:
65:60:5b:50:33:75:64:ab:05:9e:e9:52:da:25:f9:
46:54:d3:3c:2d:14:b8:43:87:22:ad:d1:de:94:0d:
e8:8d:23:1a:8f:11:a4:d9:c1:82:ff:35:d9:06:49:
91:2c:a1:61:a7:11:34:68:ba:6e:fb:3c:10:35:e2:
b9:02:ce:c0:43:58:c7:b1:84:db:3b:8b:4d:c5:ff:
20:b2:f6:45:3d:37:81:04:dc:66:78:fc:e3:24:b9:
70:bf:d5:da:79:c6:f3:9b:35:02:02:67:e9:32:9c:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:9C:DE:9C:41:F9:6B:1B:F3:B3:6B:04:FA:1D:A0:28:28:53:52
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:7c:aa:01:e3:86:52:3d:e8:ec:c3:e3:e6:b5:a4:95:93:
45:13:93:11:44:b5:93:9d:a4:2c:ef:e0:3b:bc:80:5e:75:07:
fd:40:a7:bc:13:ca:c2:52:c5:26:97:4f:18:d3:4c:4a:3b:07:
5e:44:18:46:c0:21:49:ad:4f:3c:a4:ec:39:69:ef:2a:93:d7:
50:73:fe:0e:df:03:6e:22:5e:8e:a4:32:9d:39:bd:44:96:99:
f8:4a:d0:3b:c1:da:3a:45:af:75:53:66:74:c5:bc:24:0d:7c:
26:28:15:39:89:c6:4e:29:a8:f3:4e:d3:9c:82:ac:fd:a2:d9:
e5:6b:0f:d9:35:ef:89:66:0d:ce:b5:70:c5:db:ae:e6:c1:83:
13:bb:2b:11:1d:11:02:5a:c2:be:77:f1:26:8e:a7:ce:47:a9:
3c:ab:60:e6:74:1c:59:66:29:8a:69:6c:56:88:8d:90:1a:fa:
6e:e9:9e:94:2b:9b:da:e2:1f:de:66:36:22:8b:78:00:b5:96:
1b:27:a7:26:a5:eb:65:b3:63:72:cb:06:b1:20:52:80:96:9b:
1e:74:97:36:18:6b:ad:4f:39:af:5d:85:53:41:45:24:96:e5:
b0:51:61:8b:48:b0:32:42:3a:cf:43:87:18:40:1e:66:94:d8:
7f:c0:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:09 2025 by rpki-client