Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: N6ii7MiM15KjqpqhOv7TzFc2m1lZmVknk0ALxM092hs=
Subject key identifier: 08:9F:EF:B4:2C:85:DB:5F:4E:63:2F:41:D4:CA:08:56:ED:09:39:9A
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019A4E188180862E83EB1EC643A5BAC34C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0824
Signing time: Tue 04 Nov 2025 09:00:20 +0000
Manifest this update: Tue 04 Nov 2025 09:00:20 +0000
Manifest next update: Wed 05 Nov 2025 09:00:20 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: 1E7KVLRK6+rLI118WnVO2kZ1A8xcx3J2l/vj9P9rJCw=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:81:80:86:2e:83:eb:1e:c6:43:a5:ba:c3:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Nov 4 09:00:20 2025 GMT
Not After : Nov 5 09:00:20 2025 GMT
Subject: CN=089fefb42c85db5f4e632f41d4ca0856ed09399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:46:0d:81:8f:e3:3c:16:93:7c:c8:f1:31:
6f:33:53:93:5e:91:d9:b5:f8:45:71:aa:cc:ed:34:
eb:49:f3:59:8b:c7:72:fe:24:f5:bc:80:c8:4e:50:
81:44:f1:c7:40:18:2f:94:c0:3a:86:0f:35:fc:59:
dd:f8:4d:61:47:e1:41:d5:e6:f1:35:9b:a9:cd:58:
bb:e1:07:6f:8a:81:6c:d8:3f:a5:a0:3e:91:40:94:
ca:05:de:d7:8d:3b:c6:ed:6d:87:dc:4a:99:25:83:
bc:f1:6b:fc:4d:3d:97:d4:53:49:fd:db:40:97:cf:
09:5e:a9:b3:42:ad:8a:7c:8d:97:d7:99:2e:41:ad:
0a:08:c4:70:bb:b1:4f:35:b8:29:d8:6f:37:b2:c1:
e7:bb:17:a8:98:56:db:85:4a:c5:f3:a0:ea:fe:61:
dd:44:ea:e8:ca:11:0f:67:42:44:d6:cd:41:71:9a:
52:25:47:a4:fb:8a:00:55:6c:07:1c:09:50:cb:e8:
f0:4f:2c:19:7f:9b:45:f2:66:37:7c:0f:38:e9:54:
ab:fe:c1:35:1a:08:01:42:41:c2:30:ae:3e:6e:12:
f9:14:bf:06:e1:76:f1:07:8e:16:ba:35:d7:74:dc:
f2:18:fa:63:cf:42:64:64:7d:24:db:82:48:8d:1e:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:EF:B4:2C:85:DB:5F:4E:63:2F:41:D4:CA:08:56:ED:09:39:9A
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:ed:28:db:84:67:cb:5b:99:36:4d:79:a5:f8:47:49:56:
ba:d9:f8:1c:ab:2e:89:91:2f:0f:86:27:e2:18:6f:0f:97:86:
6c:4a:fe:94:46:15:a2:27:7c:b2:95:5d:c3:d2:ef:0c:ac:d0:
9d:6e:30:74:08:ef:6f:cf:65:d5:ed:82:9a:28:bd:a2:da:ad:
68:de:c3:34:b3:27:f9:63:79:11:76:7e:99:3f:25:2a:cf:49:
59:52:9e:4f:30:25:d2:8b:c7:ee:af:8b:ed:59:99:d0:d2:52:
6a:35:07:d2:ac:0f:0f:0c:29:b4:a8:78:9d:64:37:fe:76:53:
a1:34:28:d3:62:b0:f1:3f:5f:04:d0:89:25:53:59:be:5f:8d:
74:cd:e2:d5:73:d5:2d:e8:c0:e6:05:c7:93:a0:13:c7:91:9a:
d7:da:cf:3a:cc:56:c7:da:79:8f:4c:21:17:80:3a:6c:a7:c9:
24:f0:88:88:27:e3:43:ad:61:98:e7:9f:52:d1:25:3c:6e:52:
94:3a:37:5b:69:b4:92:66:ce:de:3b:00:43:7c:3b:bc:d2:d0:
a9:53:cd:93:fb:be:2f:e6:d6:2f:70:6e:da:51:e3:e7:66:8e:
7b:65:7a:16:77:fe:d7:86:46:cc:e1:2d:72:20:4a:a4:71:69:
5d:f1:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:01 2025 by rpki-client