Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: OGioBAc4d5TtZrLaKGZAVmXj6ppw8exCIe8aFEZ5vPI=
Subject key identifier: B4:EB:67:9E:F8:A0:35:EC:DA:23:A4:87:A2:DD:69:32:7A:36:93:10
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019A503DBB0BC20E99D6F0F90591427078E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:14 +0000
Manifest this update: Tue 04 Nov 2025 19:00:14 +0000
Manifest next update: Wed 05 Nov 2025 19:00:14 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: BKW4v6YWOGcXZBAgswAQ1Jx54iaHhFVSjgAF0b7cjM4=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:bb:0b:c2:0e:99:d6:f0:f9:05:91:42:70:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Nov 4 19:00:14 2025 GMT
Not After : Nov 5 19:00:14 2025 GMT
Subject: CN=b4eb679ef8a035ecda23a487a2dd69327a369310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:1b:b2:c4:c8:6f:98:5b:10:9d:bb:8f:e1:
e0:05:7b:37:07:dd:aa:d1:91:70:94:27:4f:e5:41:
21:fc:a8:53:9b:8f:9d:c5:bb:53:00:58:b8:76:1f:
01:55:c6:d7:a7:9f:6b:9b:ab:c5:87:cc:c0:bc:b1:
2f:7a:95:b2:d2:5a:96:51:c0:df:ad:5b:38:88:24:
a1:1b:f8:68:a9:37:54:19:69:10:7c:25:2c:39:7e:
60:67:1c:40:e9:22:3d:8e:0a:a5:07:22:0d:c4:6f:
1b:74:9a:fd:1c:cc:8a:02:37:61:1d:39:69:37:46:
ab:34:f8:da:26:a7:0e:77:b5:e2:3f:f4:6c:5a:e6:
b6:fb:29:f3:d1:f0:bb:96:6c:95:08:ac:4d:bf:2c:
34:25:c6:e7:4c:31:63:8f:5a:3b:e7:3a:e2:5c:87:
0e:c4:2f:92:30:9c:39:14:3e:45:15:90:69:31:9b:
df:18:c5:56:8b:d6:a6:5b:ae:bc:67:cc:3a:b7:a4:
4f:af:e9:f5:89:65:60:d0:5c:71:13:b4:88:d1:35:
33:75:a5:3a:81:8a:59:52:c0:d2:76:63:82:59:c6:
e6:1f:0a:6d:03:8b:89:62:61:8a:a7:b5:a4:d4:69:
83:56:5e:e1:a3:78:f3:05:c5:bd:3b:01:69:64:45:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:67:9E:F8:A0:35:EC:DA:23:A4:87:A2:DD:69:32:7A:36:93:10
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0d:f3:d8:08:ce:fb:f0:d3:73:cc:ff:64:aa:cd:0c:19:2d:
8b:8b:e5:30:d5:ea:d4:1e:87:79:64:ae:db:cf:c7:b2:1c:30:
5b:a6:94:fa:dd:b9:35:f5:98:75:a0:67:1a:fe:be:26:d7:45:
66:e4:ca:4a:7b:07:8a:b5:41:8e:78:9b:7c:bc:37:c0:62:84:
93:a8:32:92:5c:45:00:26:78:50:28:38:75:48:7b:3f:a3:25:
46:65:6a:9c:bd:8a:23:9d:75:5e:91:b0:06:6a:a4:33:af:eb:
dc:a7:49:a2:72:e5:bd:90:57:79:ec:ef:28:c2:53:99:f6:9d:
ba:10:18:56:01:f2:12:de:27:ba:45:1c:29:7c:4f:87:f4:72:
83:07:2b:de:ac:be:87:8a:5a:29:02:81:f5:be:83:00:34:a6:
48:a5:e5:28:9f:0f:49:9c:55:2d:70:99:b9:f6:ad:c6:41:51:
3f:8f:f3:f3:a7:23:c2:4c:88:d5:68:24:cf:b3:8c:08:b8:69:
31:2f:69:d7:df:2f:69:d6:31:38:8b:5b:f6:82:04:11:de:44:
89:db:6d:64:f1:69:ac:a2:b1:e6:74:f9:9b:ff:17:eb:13:42:
48:95:15:5f:d8:3d:71:e6:84:5b:4f:9d:be:22:c2:8f:02:ee:
1d:e0:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:50 2025 by rpki-client