Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: JcSx4tI8b9lkdBDfdkVvaL4cIWKNr0CC7d6pGsrVc1g=
Subject key identifier: 7B:42:49:88:C6:C9:1B:24:E2:10:D8:9D:A2:71:48:50:DF:25:EA:7E
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 019A4EF453C717B401A6375339B01D1AB6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: md0sEsAhT3+HJdZMz5aQhExq28zIXz9J7KUxgM8w2GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:53:c7:17:b4:01:a6:37:53:39:b0:1d:1a:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=7b424988c6c91b24e210d89da2714850df25ea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:5c:14:5d:a9:90:ba:82:ae:ee:74:2a:80:
a6:b2:50:65:60:94:98:4d:0f:93:e0:67:1f:01:40:
8e:81:a1:9c:c1:57:ea:25:1b:a1:c7:97:cc:d3:44:
84:2a:53:f6:67:44:26:69:38:70:da:b0:05:0f:c0:
f6:82:d9:0b:06:8a:ca:02:72:33:f9:70:c0:97:9b:
4e:f9:6a:4d:09:47:98:de:b2:a5:ca:0b:b7:8a:6e:
e3:6f:09:68:39:6b:fd:20:53:0f:33:73:50:ab:fb:
ee:bb:b6:ca:a1:f8:21:57:8e:5f:2e:fe:80:80:25:
09:46:11:82:4e:34:a6:c7:78:29:08:c9:d7:c8:48:
87:29:04:b4:de:b8:50:cf:b6:9a:42:64:b4:56:8a:
bf:3e:4d:10:49:cd:04:52:ec:b1:ce:02:7f:6f:97:
cb:77:ba:3f:b1:8e:1a:9b:21:f3:3c:42:fd:cf:7f:
89:e0:8b:fc:ff:c0:a9:60:fb:57:0b:1f:0d:d9:fb:
c4:00:0f:3f:0c:1c:b8:ac:ee:20:cc:b4:8b:06:a1:
bf:43:f5:49:95:95:b2:a6:41:b2:e3:c0:cd:88:4f:
d2:0a:12:93:86:5e:0f:ec:fb:db:1c:a8:6a:38:8f:
fd:74:32:9f:c8:cb:2b:8c:ce:5f:46:f0:3c:17:da:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:49:88:C6:C9:1B:24:E2:10:D8:9D:A2:71:48:50:DF:25:EA:7E
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a2:e6:01:dd:0c:25:49:b3:55:b9:5e:1d:84:18:6c:36:21:
87:fd:2f:3b:b9:d6:2b:46:64:07:03:a9:ab:c8:66:69:ca:36:
f4:9f:c1:9b:9b:be:bb:4b:e8:05:34:eb:22:5b:3f:b1:80:61:
58:fa:b8:01:8e:8f:40:20:c0:7c:bf:85:ed:07:5c:ea:07:bc:
99:1d:e0:f0:02:a9:2e:44:c4:7b:f0:5e:25:0c:fc:83:b8:21:
5f:84:cb:33:b1:c9:dc:d8:89:e3:74:d6:ab:ac:be:4c:37:72:
1b:ab:f4:75:d2:6b:3b:61:c3:c6:ca:a5:ad:85:6c:80:f6:ac:
78:7c:61:3c:d7:36:e2:ae:e0:19:af:43:2d:44:c1:da:55:82:
3c:79:0f:a3:5f:d7:bd:1c:e7:90:46:2d:3d:f2:25:53:e5:5b:
24:8e:f6:6f:76:63:57:c2:c4:d7:bd:7c:08:fa:17:6c:6c:53:
17:35:e5:f9:bb:34:38:8b:0a:02:ac:04:72:61:46:b4:f9:81:
a8:3a:ed:c8:77:6b:a1:3b:7a:e8:82:ad:27:14:e7:13:a6:6e:
94:5b:53:a7:4c:89:3f:1d:d4:53:46:f3:48:83:3c:78:46:b6:
ba:3a:1c:50:9d:23:d2:f5:ed:08:6f:e7:82:d6:9c:e4:21:3e:
28:84:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client