Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: QVjry2Ec1PvDERdX5UBv1A81N1SqhfvadAm9WzPGo6U=
Subject key identifier: DD:90:DE:AF:5A:68:74:D8:42:68:30:7A:27:E9:A9:BE:51:E3:BC:ED
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019A51F567BA323C615ACB20D02027E30DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:28 +0000
Manifest this update: Wed 05 Nov 2025 03:00:28 +0000
Manifest next update: Thu 06 Nov 2025 03:00:28 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: AkgHbgOyfXH3FlolCzUN6nsOB7Gh1R8ACieNlvFCDok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:67:ba:32:3c:61:5a:cb:20:d0:20:27:e3:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Nov 5 03:00:28 2025 GMT
Not After : Nov 6 03:00:28 2025 GMT
Subject: CN=dd90deaf5a6874d84268307a27e9a9be51e3bced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:2f:3a:9e:55:0a:8a:24:4d:2c:bf:f1:79:
13:76:b5:eb:7e:32:ff:95:67:f1:3b:97:d7:23:1a:
ec:f0:27:9e:f1:19:87:9c:c3:72:7d:b3:73:d7:a2:
ef:d6:d2:2b:cb:ae:f8:cb:44:ce:db:28:a4:e9:e7:
90:d9:38:0f:c8:b9:5f:2b:8e:a4:a7:26:fc:ac:50:
4a:f1:2e:0b:b2:5a:a6:fd:f3:d4:4d:38:f7:2e:c3:
3e:9b:88:bf:3f:9b:5b:ab:86:88:75:e6:c1:7f:f3:
91:a3:47:0c:77:20:01:93:02:f2:fa:c4:a5:ac:32:
7e:c0:03:a1:84:8e:17:f0:1e:bc:41:da:fc:1c:b6:
a9:ab:46:ce:de:c0:9a:37:99:e3:00:8a:9c:b5:74:
6e:42:42:53:95:0e:05:f7:84:e9:82:9c:25:77:83:
93:ff:f5:01:3c:ff:07:75:fa:7e:90:c2:5c:84:e4:
e6:ef:dc:e4:c2:ad:7f:a7:72:68:69:eb:43:0d:d0:
9d:dd:33:a2:68:44:4f:92:35:5b:67:cb:33:22:4d:
2e:76:e4:17:77:18:85:d7:9e:8c:4e:99:ca:62:07:
c0:f8:6c:ef:33:fa:8a:01:64:0b:02:c1:c0:4d:fb:
28:54:ac:d9:e4:6a:03:e0:97:0f:11:53:0d:3d:22:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:90:DE:AF:5A:68:74:D8:42:68:30:7A:27:E9:A9:BE:51:E3:BC:ED
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:65:a1:35:ce:a7:95:0a:ca:5c:b9:5d:03:97:f6:29:48:
b5:e3:00:53:2f:86:be:89:2d:ee:64:40:4e:6f:32:35:db:b8:
36:1d:b1:f6:6e:96:ae:d3:ee:63:4e:11:65:de:de:ca:fe:c7:
02:4b:f8:ac:34:fb:66:19:31:64:e6:2b:af:af:1c:61:7b:2f:
8b:7f:7c:b4:27:41:a5:c4:dd:42:b4:1e:8b:a1:93:2d:4b:59:
db:82:3a:2b:09:58:27:84:15:9e:77:2b:de:c1:90:6e:50:1c:
de:f1:ba:e8:00:94:27:f1:cc:22:7c:01:ad:98:b6:76:23:8d:
0f:e3:88:5a:ec:43:a4:85:24:43:6f:f0:92:22:9f:e2:5f:a6:
e0:8e:ab:da:df:a3:c7:df:22:6c:de:e8:cd:f2:73:a0:97:a0:
bc:d1:ee:c4:18:4c:b3:be:90:e6:d8:2d:9d:fd:fb:a0:c9:4f:
8a:bc:26:76:76:ce:0d:61:b1:b5:a5:68:48:ab:5b:40:89:c7:
24:02:a1:ae:cd:15:c8:6f:f6:e2:7b:4f:c5:4a:1a:0c:b4:9a:
62:94:2a:4e:21:99:d0:61:75:3c:5e:4f:c8:96:2e:e5:72:93:
45:08:10:bd:2e:e1:e3:a1:5f:27:e7:0e:82:7e:b9:8d:d1:3c:
fb:67:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:56 2025 by rpki-client