Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: c2aoKK9B0PEt32iGBBY3DfyKWcmBYl3MSH8hu597pTs=
Subject key identifier: 8C:0C:08:F3:00:29:0A:F4:A8:0D:0E:B2:88:52:2D:3F:F4:35:9A:A1
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019A4D742459EE4EA88C4A8EA30741B66EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0866
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: I25drf1yidv0rfRtLjP1+nL53qxkXGvExZovJAv+My0=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:24:59:ee:4e:a8:8c:4a:8e:a3:07:41:b6:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=8c0c08f300290af4a80d0eb288522d3ff4359aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:9d:df:47:4e:50:42:d9:3f:2e:f7:a0:c1:
2c:56:a3:17:21:21:68:a8:c1:c2:20:2a:0f:78:0a:
e2:86:0c:12:8b:2a:0a:ad:46:c1:2a:3b:5e:c1:a3:
3f:bd:d1:ed:20:e5:70:ea:d9:00:6c:44:79:40:6e:
8e:6d:ab:f3:50:b8:1e:74:2b:b2:20:7e:2f:07:c8:
51:57:b1:fe:89:93:f5:ed:b4:87:9e:c4:82:f5:e2:
f2:67:29:a7:e0:2f:63:21:d6:dd:b9:a6:07:09:03:
e1:4d:c7:b5:b7:9e:8e:cc:fb:2a:a9:13:42:3b:23:
03:6f:c1:0c:53:f4:03:cc:76:85:1e:1a:22:0d:8a:
a8:66:5a:d5:b3:3c:74:2f:cd:e4:d5:7d:5e:5f:3b:
e5:5a:74:09:ea:6f:e1:29:c2:7b:10:c9:b1:18:83:
91:cc:eb:7e:59:5f:b3:b3:fe:42:51:23:4c:7c:d4:
3d:3e:59:0f:bb:a6:da:16:bf:80:8f:78:6e:e5:69:
f4:4f:8d:66:ba:80:04:cf:84:7d:95:20:97:35:32:
82:46:44:32:63:06:b9:95:69:6c:84:e7:de:90:a6:
83:61:75:ce:22:bc:13:6e:74:23:8c:ae:da:85:d6:
52:9d:7b:2f:af:b9:5b:c2:b4:a7:3e:a1:0f:d5:bc:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:08:F3:00:29:0A:F4:A8:0D:0E:B2:88:52:2D:3F:F4:35:9A:A1
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:aa:be:c7:bb:35:2b:8f:a5:6a:95:0c:66:39:25:fe:0c:
5c:76:53:3c:f5:f4:2b:6c:eb:68:c8:04:9b:ec:69:54:74:99:
a2:eb:6c:1d:18:54:90:bb:61:ef:79:8a:82:10:36:49:10:33:
03:79:b4:18:42:f4:7e:f5:13:f5:02:b9:a3:61:94:7b:ea:25:
7a:eb:46:87:66:b6:76:0c:10:2a:fc:f2:63:a9:7e:96:45:20:
17:cf:c8:6e:de:f3:a0:a9:a3:e1:c2:af:40:e3:22:8c:f8:47:
da:68:c5:54:d3:50:bb:ef:2e:6a:40:ce:ac:1b:9b:20:a9:52:
24:85:c8:c7:4d:d1:0b:6e:c3:be:03:ba:dd:4f:9a:27:1f:a7:
22:5d:72:35:18:91:13:5f:3d:d5:5c:c8:18:7b:27:cd:f2:50:
69:0e:2c:09:0f:f1:7a:1e:38:ae:c5:33:83:e0:c1:79:e5:6b:
7b:39:c4:37:73:0d:62:9b:42:79:50:89:06:3f:47:ab:c7:6a:
8a:bb:59:db:56:3e:1f:db:bc:6a:94:07:af:db:b4:a1:b7:58:
3e:89:53:53:85:75:54:f6:bc:c2:4c:ed:ef:60:bd:a1:af:27:
bf:a1:d0:fb:0e:62:f8:a4:89:07:f9:0e:14:58:12:42:9f:f0:
28:5b:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:05 2025 by rpki-client