Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: UumIFcoUBIS7H06m8/3Gat/Iu7B+M7SP/IxSvLF6oQA=
Subject key identifier: 61:91:22:91:A6:DD:32:C6:9E:B1:B7:44:C2:24:E2:72:CC:34:61:26
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019A4D73E37C261D2305903B48D6AC353312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1419
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: lpry5jRuhX05ZmD6cCpSbPnSUC530B21mbD5RJAwGF8=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e3:7c:26:1d:23:05:90:3b:48:d6:ac:35:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=61912291a6dd32c69eb1b744c224e272cc346126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:5f:42:7a:8a:62:a1:ed:5d:e7:ba:a8:4f:
f1:4c:db:f6:e1:e3:4c:b3:bc:1c:25:66:fe:4e:b7:
20:b7:ba:c1:52:ad:b8:d5:9b:c2:b7:2c:bb:71:d7:
51:21:20:25:22:fb:89:48:61:34:6a:29:f3:51:94:
3a:49:ae:23:24:a0:0c:5e:c7:cb:74:70:49:19:88:
e5:14:6a:18:df:a3:67:64:83:87:f2:a6:f3:b3:29:
59:e3:c4:a3:24:3a:f3:da:0e:95:1e:cc:e0:dd:5a:
3e:66:f7:43:64:66:fc:60:4a:0a:d6:59:43:6e:0a:
2b:37:55:53:44:37:3e:cc:a5:30:1e:9d:64:41:64:
e8:bc:cc:c6:bd:aa:f9:4f:2c:34:df:f0:f3:29:67:
07:d3:97:a7:e2:6d:32:13:99:cf:3b:15:ce:7f:94:
fe:59:93:1f:c4:d8:b1:ca:05:06:3e:34:23:46:fe:
c2:d3:f4:dd:87:9b:14:33:2b:b1:fc:ac:45:31:79:
c1:46:c0:56:15:72:70:78:c6:d9:91:91:81:65:47:
98:3d:83:c7:8c:ba:ee:00:d6:b9:10:5e:00:fe:c7:
62:86:55:df:c2:e4:d4:29:98:21:c7:7f:7f:7b:fe:
56:ea:d6:04:c7:03:0d:de:56:67:c7:78:61:5d:28:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:22:91:A6:DD:32:C6:9E:B1:B7:44:C2:24:E2:72:CC:34:61:26
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2e:1c:98:a0:77:53:31:a4:a1:60:42:58:a7:ff:90:0e:41:
bb:b4:81:0a:af:c8:16:cc:59:02:80:16:cc:d9:0d:74:e5:ad:
4e:68:2c:df:63:d9:82:fc:70:4a:59:46:8e:7c:83:ec:ad:5d:
95:ae:04:36:2a:d1:b8:f8:3d:97:e8:50:a2:39:1a:5c:cf:d7:
0e:1f:74:27:51:62:0e:40:4d:07:d5:ee:68:e0:c3:fc:aa:96:
61:09:9b:20:89:12:c0:e5:70:5d:be:75:fd:8b:ed:ed:76:3c:
f4:7f:c5:63:0f:45:78:37:c9:3e:96:15:21:fa:e1:40:ef:74:
ef:6e:1f:49:42:ab:2c:ed:1a:13:78:e4:0b:36:3c:a1:d1:51:
b3:3c:29:6e:d8:e0:5e:38:36:2b:7c:1e:de:23:bb:63:2d:2f:
cc:3a:07:8d:db:8b:50:c5:8f:73:79:2c:8f:3b:08:01:5b:03:
77:a9:87:4c:29:69:c1:59:9f:d8:20:57:70:81:e3:9e:ab:76:
6c:96:63:14:c2:d6:3f:14:3b:41:25:e7:6a:9c:f9:f6:ea:43:
65:ae:c0:e8:b8:3b:bf:fd:20:1f:97:83:34:ea:74:b7:f2:bb:
ff:18:26:46:ab:70:ed:22:9c:2e:75:9f:b0:6f:c8:5b:41:dd:
40:7d:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client