Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: h6jRfzTZBUBbCe6HC7eJwYNgSkwwr8LzdiLYO1V7ew8=
Subject key identifier: 23:EE:AB:45:3A:FD:F6:8B:15:68:43:A7:2F:2B:86:89:EE:6C:7E:12
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019A4F62D2BF6449CA40679BFD34CD0E52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: 8DsOqTm5QGlBYiwpBEDhW7g3HAT7TIgyDfX/MNPrOJA=)
2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d2:bf:64:49:ca:40:67:9b:fd:34:cd:0e:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=23eeab453afdf68b156843a72f2b8689ee6c7e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:16:52:d1:b5:6b:b7:7b:c5:47:06:3a:1f:
30:0f:e6:ee:59:de:87:24:7e:1a:24:0a:d8:39:3a:
27:d1:82:b5:19:4d:83:d8:82:35:cf:00:fa:fd:9c:
a2:56:47:9c:7f:62:11:4d:e7:73:de:29:c3:38:80:
e6:b3:21:84:80:17:4d:eb:1a:7a:70:d9:8c:de:bb:
6e:0f:86:f6:6c:9f:65:51:af:a3:b9:ca:18:74:8b:
10:db:16:d2:5d:5b:b4:69:15:5b:df:c9:cf:14:66:
ed:b1:4f:d1:fc:62:b7:7a:f1:8d:2a:16:98:fb:41:
18:0f:4e:df:97:6a:8b:83:a4:d4:96:37:3e:d3:ba:
31:90:eb:03:19:de:dd:48:05:8f:78:f5:d0:14:d1:
89:80:f2:7c:09:ee:13:0a:72:9a:d0:bd:e9:52:e8:
67:d4:85:0a:a5:b4:6f:10:2a:25:81:f4:3a:cb:54:
18:a2:e9:04:b4:7f:94:31:e0:45:c9:d5:75:16:bd:
48:3f:57:8c:3c:a2:97:e1:3c:75:62:ff:b2:e0:ed:
65:20:e7:52:0e:95:6e:a8:f0:f4:5e:1e:46:55:fc:
06:fc:92:f3:93:e2:84:8c:fb:dd:fb:86:5a:33:62:
ea:7e:a3:f3:4c:d8:f8:09:60:08:a5:fc:e9:50:3d:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EE:AB:45:3A:FD:F6:8B:15:68:43:A7:2F:2B:86:89:EE:6C:7E:12
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d9:fd:ba:a0:4f:70:9f:3d:19:6b:26:9b:45:41:51:38:52:
0e:ae:d8:f4:d6:dc:33:40:4c:e7:9d:28:8f:72:e9:e6:7e:49:
a8:97:8c:38:d4:66:5b:77:e8:51:e0:a4:49:cd:fd:0a:5c:53:
1f:39:d9:3b:da:16:5d:e7:8a:d5:46:44:42:68:e5:f5:a8:9e:
69:7b:db:19:81:dd:35:18:f4:a9:88:6d:75:9e:e1:9b:2e:3e:
32:b2:f0:2f:03:7c:92:1a:7f:d9:99:a1:9e:48:3d:f5:07:0e:
b2:70:3c:85:c5:f5:fa:b9:4c:a7:3d:fa:a9:4c:e1:20:f5:bb:
a3:09:4e:95:08:84:e9:32:62:5e:1a:48:b7:15:4a:46:61:58:
7c:59:45:e3:98:16:9f:bd:ce:af:cd:15:ed:13:9d:d9:72:79:
56:2d:59:a7:93:1c:32:92:c9:e0:33:ed:07:a1:b6:db:a7:9e:
09:e7:62:9f:5f:63:ff:9a:d3:d0:d7:dd:f8:20:64:a6:dc:60:
ef:9b:49:5e:23:08:4e:e1:00:f6:46:c7:f0:b1:67:61:44:3b:
1a:8a:f0:29:32:25:5d:26:b8:d5:28:be:e5:a2:63:ea:c1:87:
e0:23:44:9f:4c:e7:ec:c6:d6:ee:e5:76:96:ab:ba:a0:91:07:
c6:3d:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:17 2025 by rpki-client