Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: OTta4yJOH1YrU8Exyt4RcUiLn/jJClV7sXOTK4DOeGI=
Subject key identifier: A4:86:8E:0A:30:3E:37:E4:FD:5E:67:0A:3E:26:9E:58:1C:B2:76:B2
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019A4DAA9EB6F7912C218D3E948DDFF19338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:18 +0000
Manifest this update: Tue 04 Nov 2025 07:00:18 +0000
Manifest next update: Wed 05 Nov 2025 07:00:18 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: ihAbELUHKx5qCBj07AdjqQPlG+r3OVxcAUZlATp0BqY=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9e:b6:f7:91:2c:21:8d:3e:94:8d:df:f1:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Nov 4 07:00:18 2025 GMT
Not After : Nov 5 07:00:18 2025 GMT
Subject: CN=a4868e0a303e37e4fd5e670a3e269e581cb276b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:0d:d2:c3:0a:14:ba:db:e3:d7:5f:51:e4:
ae:ae:fd:cd:99:81:9b:e4:4a:d6:66:ca:78:08:43:
60:07:b2:34:4c:fc:1a:66:82:69:09:38:96:f2:db:
a2:a2:ee:1e:8b:e4:5f:da:03:d7:58:0f:ff:1d:04:
5e:20:3c:09:3c:5c:cf:b5:b6:5e:cb:cc:d5:ac:f2:
04:73:07:8e:66:a1:dd:95:6f:51:7a:87:b9:7b:59:
aa:48:02:24:83:c1:eb:bf:bb:de:f0:d2:14:85:1f:
20:9a:0e:c0:83:49:ee:1d:57:2d:4a:5e:b6:cb:aa:
eb:4e:ae:f4:96:ab:a4:07:ce:17:8c:26:76:1e:fa:
a3:f1:2f:29:23:c0:30:35:d8:6f:5c:61:93:e6:70:
77:82:25:30:c0:36:ae:bf:1b:34:0b:f4:c0:85:cd:
65:18:e2:95:95:ee:50:d7:d5:e8:d9:87:ef:98:59:
af:95:30:35:ce:1b:12:60:cf:af:29:04:f0:64:d9:
cf:a7:f8:b9:7f:da:1c:b0:de:af:b3:cb:24:a7:f7:
eb:06:0d:df:c7:49:c0:85:6a:8f:d0:b4:d8:5f:08:
63:02:1c:bc:e6:cd:1c:6a:f5:57:6f:0d:f5:74:33:
ea:86:10:aa:ae:26:a8:44:2f:db:14:9c:72:f5:aa:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:8E:0A:30:3E:37:E4:FD:5E:67:0A:3E:26:9E:58:1C:B2:76:B2
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:51:ac:d2:0b:b8:8f:79:55:b0:3f:f7:f8:33:f6:a3:24:
bf:47:b8:6a:d7:dc:41:52:ba:24:3a:c4:f3:0c:a3:24:01:99:
19:e2:64:47:1e:06:5b:b4:7b:4e:a4:e5:47:df:00:b4:6e:76:
a1:67:bb:f7:4c:77:a3:87:0d:a3:29:d4:63:1d:c3:66:50:00:
f6:d6:3a:b3:f3:6a:7d:db:f6:08:5a:a0:d5:ea:76:3c:9a:5f:
76:fa:15:e2:53:dd:b3:67:e2:96:6c:a6:5a:19:95:99:bb:df:
1b:94:b6:69:c6:dd:d3:6e:5d:fc:16:1a:ef:66:3b:6d:4a:33:
ef:42:de:54:2a:eb:91:95:4c:48:24:fd:41:af:0b:58:81:4d:
3c:78:31:ee:d6:e8:6b:ff:32:95:01:4a:14:2a:b7:f0:c7:e9:
a1:ed:a9:fe:04:3d:09:b9:bd:a8:3d:b7:10:94:c7:b3:5e:97:
23:6b:68:36:5e:f0:73:4c:bd:07:e5:0c:7a:d6:e5:27:e6:c4:
56:32:26:6d:e9:4b:44:8f:35:f4:be:e1:1a:1d:c9:2e:54:ea:
e5:b9:51:46:12:ee:19:70:42:1a:a5:42:e1:c0:e9:80:d4:63:
17:f4:47:ba:12:5d:d0:9f:c3:4f:7c:9c:bd:4d:62:dd:eb:a6:
ae:b5:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:40 2025 by rpki-client