Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: Z58O7s72jdImzkvIm56Yh7U87n57y8Dq5nbu98chfHk=
Subject key identifier: 95:7E:B4:B6:32:48:61:59:3A:7C:32:67:D1:2C:C0:41:62:EA:F1:B8
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019A4E1878D022431C2AA13CBA5C7173FA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 13A3
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: 35i0W-439ceXCAfaqLUm_3h3G24.roa (hash: xuOhVj3IlTLiG4QrKiExJxP+JLiXYysTKsGNlxVTku4=)
2: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
3: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=)
4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: JW4TxGSYys5Pot6kpobMhk59Kg5PT+aS6KoLe0Ox84E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:78:d0:22:43:1c:2a:a1:3c:ba:5c:71:73:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=957eb4b6324861593a7c3267d12cc04162eaf1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:5f:bb:e0:65:0c:41:6b:d2:cc:c4:b1:7c:
d5:0c:2f:56:0c:aa:ef:06:90:84:5a:45:5b:6d:22:
73:5b:cd:5c:6d:91:61:4f:70:c9:8e:ce:71:62:2f:
f3:28:6b:54:02:36:98:b9:4d:d2:cc:f5:04:29:da:
83:26:47:40:e6:54:b1:8a:30:3b:05:d3:8c:21:c9:
cc:76:8f:32:67:9a:41:89:2c:ab:6a:f6:f8:55:34:
07:11:88:21:91:20:12:8b:f1:9b:54:a6:b4:3c:bd:
2c:f7:4f:05:0b:95:40:5c:b5:7b:86:86:a6:9e:28:
f4:5a:05:8e:b6:e7:4b:31:9d:a6:9d:f9:e3:33:56:
00:4f:06:03:72:94:ff:7c:90:4a:1a:21:22:ba:9e:
3b:9e:b9:3f:95:f8:cb:2b:63:17:af:29:c8:92:69:
90:70:0b:2d:40:86:6a:8b:d6:03:33:a9:08:f8:df:
4e:99:84:67:7a:19:bc:ea:d0:fd:aa:7f:89:8d:4e:
8e:e0:83:c8:49:95:c8:89:78:c0:f9:f1:d4:44:e8:
26:7f:b1:e2:f2:d2:1b:2d:29:f9:64:f0:2f:db:d5:
3e:b8:f4:95:55:83:f0:1a:ff:a1:e8:d0:9a:7d:a0:
db:c7:c2:0f:ec:4a:3f:e6:18:2c:aa:a1:eb:7f:f3:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:B4:B6:32:48:61:59:3A:7C:32:67:D1:2C:C0:41:62:EA:F1:B8
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:70:71:26:67:ba:23:7a:4f:0d:8e:3f:8c:a2:0a:8c:d1:
0d:e4:1e:6c:2a:fc:a2:eb:9b:d7:5b:21:08:e6:d9:12:94:69:
0f:e5:50:a3:f6:9c:0e:33:4a:d2:a4:44:f1:f2:4e:f0:ac:01:
31:2d:54:97:43:9f:b1:80:4f:c9:a0:39:47:4c:20:2d:b0:f8:
20:a3:bc:3a:a7:53:35:16:09:f8:aa:54:5c:d6:af:c6:50:e4:
d9:db:d3:c3:44:87:3b:04:e1:82:fe:ea:df:fa:bc:fb:cb:3b:
c6:1b:b7:3e:69:95:44:c8:c0:df:3c:ee:b0:73:dd:b5:63:0d:
d1:1e:56:6f:60:49:fd:45:3e:b0:8a:d8:3d:4a:9f:f7:45:79:
d1:41:47:c0:34:61:7d:83:c4:49:d9:65:43:2b:af:33:af:3a:
28:d8:6c:95:73:1d:c7:ef:76:51:74:fb:83:13:2a:3f:30:0f:
b2:6f:40:a4:06:02:c3:8d:ea:81:7d:bf:09:26:1c:f3:18:2f:
75:8d:7b:a0:79:2a:91:48:12:49:5f:45:88:f7:52:ba:a7:07:
17:6c:4d:84:68:ef:22:0e:ed:bf:59:95:d0:e4:65:bf:84:05:
80:26:4c:86:ce:c0:44:08:70:50:26:1d:fd:87:8f:77:80:78:
1a:02:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client