Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: z5FiyNtdwdHfI9gx/0xmYBE8/RpqotOO5mm4vQOsxX4=
Subject key identifier: 74:1E:B7:50:BA:78:E0:61:3C:77:49:98:9E:76:32:EE:CB:33:33:92
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019A4FD08CADA2B84F6258A08D9366C828F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0A2B
Signing time: Tue 04 Nov 2025 17:00:58 +0000
Manifest this update: Tue 04 Nov 2025 17:00:58 +0000
Manifest next update: Wed 05 Nov 2025 17:00:58 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: x7JljFX6Asvc0AYK/DoHpVHK9BVFU3VR9214WgbT+gA=)
2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8c:ad:a2:b8:4f:62:58:a0:8d:93:66:c8:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Nov 4 17:00:58 2025 GMT
Not After : Nov 5 17:00:58 2025 GMT
Subject: CN=741eb750ba78e0613c7749989e7632eecb333392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:b0:fb:d1:d8:e8:76:05:d4:6b:dd:3e:9b:
30:5c:29:89:87:74:43:ee:c3:6a:57:90:c7:70:f0:
55:c6:49:45:4a:4d:69:92:59:b3:cd:fa:d5:72:3e:
32:a8:cd:be:db:9e:fa:02:7d:24:1f:ec:26:43:aa:
f3:15:4b:e8:87:79:62:d3:fc:e4:53:fe:7a:b1:9b:
8c:3f:01:b3:d6:8c:bb:67:9d:d5:4f:dc:a9:22:04:
d7:fe:2d:62:b3:93:e0:c6:48:19:0c:92:0e:d1:98:
ec:ef:be:37:f6:64:b1:d0:1f:0f:f5:0c:92:c9:65:
6f:06:f0:35:3a:c7:58:39:6b:23:27:78:79:7b:b4:
9c:56:14:ae:79:7e:b3:9e:ad:bb:0e:40:7c:89:1c:
15:2a:1e:96:5d:14:e0:73:1d:ef:d0:4b:96:ab:e5:
13:87:be:e5:c4:18:b2:ce:02:37:40:a5:46:96:39:
7a:99:34:2c:61:27:43:ae:35:ba:ae:d8:61:be:17:
52:f9:a9:d9:47:86:1b:0f:9c:d7:ec:49:b9:2b:c6:
f4:63:50:4d:81:2a:7c:14:54:b3:e7:e3:74:cc:17:
1e:86:ae:0a:5b:7c:62:d9:60:35:98:6f:ac:db:c3:
70:f1:67:17:0f:7e:08:45:fe:36:2b:65:79:22:75:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:B7:50:BA:78:E0:61:3C:77:49:98:9E:76:32:EE:CB:33:33:92
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:ba:cf:4a:74:8f:d6:7a:7a:f0:d5:9e:02:9d:b9:76:a4:
b2:bd:38:13:d5:ad:26:46:24:8e:97:17:2a:42:d0:81:22:25:
76:93:16:ff:4a:e1:e4:2b:17:d7:34:e2:6a:bb:9c:83:f0:fe:
37:be:c8:09:51:05:d7:dc:f6:8c:52:c8:61:0a:aa:c8:94:c7:
10:9d:de:b0:4f:f3:4c:82:bb:5c:f5:01:cb:be:b6:19:ba:14:
2a:e4:62:9f:9b:da:f0:f3:6b:26:78:d8:62:a5:03:57:a7:37:
8f:85:b6:63:f4:da:c7:a3:18:65:80:1d:9e:04:14:56:72:6e:
6a:bf:1f:4f:db:60:aa:b8:fd:0d:6e:48:5c:8d:48:d3:db:de:
ea:78:c0:c6:ed:7a:74:c9:37:97:c8:df:77:34:fb:83:f4:2c:
38:26:4b:4f:38:02:b4:e9:49:8f:ff:a9:e4:b7:d8:96:1c:48:
cd:e7:3e:29:9f:e7:39:6d:2f:db:1e:de:b4:d0:00:48:6c:a8:
bf:da:45:71:af:1d:e9:2b:c0:27:08:ed:15:dd:ea:86:bb:3d:
2e:ac:4c:39:e5:14:e8:0f:05:80:07:37:da:99:1b:bc:37:58:
13:d4:47:92:cb:ff:45:f3:b0:40:0b:6b:79:d4:f3:39:98:e9:
d5:f2:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:31 2025 by rpki-client