Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: jOluv0+x4YJkYjSHhBsgWGLcW/Tgpp2iZgdHKR0Gtdg=
Subject key identifier: B3:77:11:F2:68:3D:F0:3F:B9:51:2C:77:66:6A:5C:58:2D:6A:8C:EF
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 019A507507CFA8A9E16014846ECA541ACB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: AE
Signing time: Tue 04 Nov 2025 20:00:38 +0000
Manifest this update: Tue 04 Nov 2025 20:00:38 +0000
Manifest next update: Wed 05 Nov 2025 20:00:38 +0000
Files and hashes: 1: UdICj6zPcID-7_Hf3d1V7ttrE0M.roa (hash: 1plINgz643oMJ6Sr7Nq6vQNGyijqcXnzXvCmKpTHyIY=)
2: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: jxc39KD78kklhgifswrVnODZpH3p/oMysxfzJxJ2FJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:07:cf:a8:a9:e1:60:14:84:6e:ca:54:1a:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Nov 4 20:00:38 2025 GMT
Not After : Nov 5 20:00:38 2025 GMT
Subject: CN=b37711f2683df03fb9512c77666a5c582d6a8cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:1c:8d:bd:a8:19:ce:c0:d8:0c:22:27:1b:
d9:53:12:dc:34:c7:1a:65:66:a6:f7:e3:e9:a7:d3:
4f:c2:11:ea:0d:9a:81:1c:a2:31:fc:45:4c:64:fb:
a9:e0:df:ad:e5:10:5a:5e:23:af:af:ca:2f:7d:3c:
5b:dc:e0:aa:e4:d3:38:2b:89:3b:4a:f9:cd:c4:c7:
4f:7e:c7:86:e6:fe:a8:95:c7:d8:eb:2f:16:44:dd:
f7:fa:2a:9b:14:40:3d:9c:ca:a1:26:8b:54:0a:88:
f5:7c:4c:10:25:9f:fd:50:85:9b:f2:3e:3b:f1:27:
b2:d5:e2:73:27:e5:49:ea:ab:c8:2e:ff:29:b9:69:
1e:a3:b0:2b:a1:35:e9:5f:70:e6:fd:af:ee:45:e8:
ed:d4:d0:eb:eb:c1:8e:79:04:3f:46:40:4d:5d:7a:
a3:ab:f0:92:1f:14:68:03:ba:71:cb:6d:9d:84:e0:
7a:58:f8:c0:ad:2d:2f:44:5f:38:17:e6:93:4e:a7:
dc:fe:2d:e1:ec:a6:4c:0a:46:5e:e9:b3:12:25:68:
06:b8:0d:7f:c0:b3:85:bf:92:55:da:7d:11:01:6a:
e1:ec:4a:f8:79:54:6c:92:e7:07:e3:f7:f2:c6:47:
a1:11:27:1f:59:6b:cc:ae:cc:1f:d5:ab:53:9c:28:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:11:F2:68:3D:F0:3F:B9:51:2C:77:66:6A:5C:58:2D:6A:8C:EF
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:c9:5e:a4:7d:f0:1b:71:5a:ac:09:48:b1:c3:ab:36:11:
02:d5:65:86:3d:ef:97:86:00:f8:0b:3c:22:6b:ef:27:b7:b6:
de:74:5c:2e:51:76:b1:f5:e8:63:3b:61:2f:1e:a9:15:63:3c:
8b:7c:c7:93:42:79:e1:dc:f4:24:90:24:db:c3:40:2d:5e:47:
6b:93:f4:2e:f4:55:0e:5f:6d:b9:e6:ba:f2:0f:12:47:31:26:
11:5e:59:6c:08:db:6a:f0:f3:a1:7f:72:5b:f3:b5:ba:71:91:
b8:af:97:0d:8b:06:c4:39:08:bd:b7:6e:56:11:2d:97:9d:5c:
47:7b:44:d8:1b:58:66:de:0f:c0:4c:97:6f:c9:04:07:a6:66:
32:f9:d8:7c:3b:56:12:73:3f:79:91:63:62:c4:bc:75:e1:33:
2f:9a:01:9b:72:87:9d:a4:3f:20:8e:cc:60:e8:be:55:bb:26:
58:2f:76:fc:6a:09:75:99:2a:ef:3e:7c:c8:e6:ce:6f:f1:1f:
c1:0b:0a:ca:61:d9:ac:ba:bc:39:f7:e2:65:eb:52:43:39:0d:
67:86:92:ef:e3:a9:1a:c6:cd:c3:f6:3b:de:f2:a1:00:75:35:
d2:08:73:cc:18:f9:e2:1c:f9:c1:58:96:2f:88:d7:8e:56:c5:
fb:69:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:52 2025 by rpki-client