Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: 67CFKqjytrnBnHJIggGJXeaIE2lP0X6Kr2G77PeKek8=
Subject key identifier: 4E:C7:43:5A:D9:C8:68:12:C1:16:C4:81:28:1F:B2:ED:EB:FA:54:93
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019A50E364986251AA5EAE7A6CC2305CECD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 124D
Signing time: Tue 04 Nov 2025 22:01:10 +0000
Manifest this update: Tue 04 Nov 2025 22:01:10 +0000
Manifest next update: Wed 05 Nov 2025 22:01:10 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: fF44oNBpKAgJ9nXV80xupcq+cQjQKzEKrkxfFXetBgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:64:98:62:51:aa:5e:ae:7a:6c:c2:30:5c:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Nov 4 22:01:10 2025 GMT
Not After : Nov 5 22:01:10 2025 GMT
Subject: CN=4ec7435ad9c86812c116c481281fb2edebfa5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:e3:cd:1f:4e:84:ca:9c:2f:45:be:5f:3f:
e0:05:6d:29:6d:2c:2c:4b:8f:81:75:51:4b:6f:9f:
96:eb:e2:91:74:64:81:f8:f7:f6:9f:7c:62:08:42:
ec:3c:ce:c4:2b:27:9c:a5:91:62:37:83:ea:35:6c:
59:d6:2a:c8:dd:da:e6:04:cc:2c:27:a8:16:ca:81:
02:87:ea:51:57:95:b8:44:c2:1e:5e:4d:ad:9a:e8:
fb:c1:f6:8f:c5:53:7a:d8:bb:6e:ad:6a:4c:24:1f:
83:0c:a6:23:30:15:2c:91:c1:8e:c2:72:83:70:15:
96:c9:19:38:91:04:9a:a2:4b:17:89:8c:1d:72:65:
09:1a:4b:de:bf:31:0b:b8:df:b1:4c:e1:05:46:2b:
b8:6d:1a:9e:50:69:30:7e:67:7a:6e:c8:68:4e:cf:
81:5f:28:94:a2:38:27:6b:62:0d:00:c7:56:ce:f6:
e1:b0:e7:7c:39:51:2b:de:e3:5d:b4:1a:ca:39:22:
38:13:8b:7f:ad:17:78:cb:8d:15:a1:a1:ea:90:aa:
04:7e:a1:02:46:e8:dc:6f:a4:8e:1a:75:97:b2:0f:
ad:bb:17:8a:79:17:a1:58:fb:cf:2f:a8:a9:3c:b6:
4e:cd:55:64:26:cc:01:33:d3:51:0e:4c:b7:1c:7d:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:43:5A:D9:C8:68:12:C1:16:C4:81:28:1F:B2:ED:EB:FA:54:93
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:18:e4:db:3d:88:ea:4e:ea:e0:90:30:e1:4c:70:9b:7a:
8a:e1:99:84:c1:c7:4e:f5:9f:4e:89:45:1a:d0:a8:95:7e:2b:
d3:96:7c:a6:82:5d:11:1b:c3:7b:3a:9b:3f:26:99:ff:6d:48:
94:a3:45:29:94:18:10:7c:78:9e:2d:5b:b9:ef:1f:9c:98:55:
4b:05:cb:92:5d:78:92:a9:a8:ff:aa:87:59:6f:72:b6:6e:56:
ca:0e:de:31:ec:c5:25:4e:d0:47:1e:25:d6:d9:79:ea:b5:d8:
77:ff:c6:a2:e9:7b:08:15:46:27:01:a1:27:a0:f0:01:76:d8:
bb:6d:f9:bd:54:57:29:13:3e:bb:3e:43:57:8c:62:80:72:02:
47:6e:23:0e:81:b4:a7:1d:21:be:d4:5a:8c:2b:a5:9a:e2:ce:
aa:e4:33:9d:85:1e:17:a8:de:27:36:52:76:64:d5:14:59:d4:
b7:73:92:be:6a:2b:a4:34:8f:83:65:05:f7:69:5a:88:dd:e4:
7b:34:59:0f:0f:56:ac:4a:54:59:a5:0b:ca:71:23:a7:bf:9c:
e6:58:71:1e:c9:2e:d2:1f:a9:1a:41:59:f2:c6:42:5f:b4:48:
84:ef:1b:34:68:9c:1b:ef:c2:d5:49:c2:24:68:d4:bc:5b:63:
96:e6:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:17:40 2025 by rpki-client