Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: 0CEJxanOU+C4OvGYFioP/ZqE9QXjr6uMywJ29xGfxSs=
Subject key identifier: DA:B7:DB:90:28:E6:F4:76:CD:7A:4B:EA:8C:C8:49:CE:7D:00:FB:DB
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 019A5DFA3226ADDFD5ACB67D52C4A2EEF1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 0211
Signing time: Fri 07 Nov 2025 11:01:08 +0000
Manifest this update: Fri 07 Nov 2025 11:01:08 +0000
Manifest next update: Sat 08 Nov 2025 11:01:08 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: txTSMX4r2DHBOigvrvQg+ICw5SA+4gpKq82yrT0odLI=)
2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:fa:32:26:ad:df:d5:ac:b6:7d:52:c4:a2:ee:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Nov 7 11:01:08 2025 GMT
Not After : Nov 8 11:01:08 2025 GMT
Subject: CN=dab7db9028e6f476cd7a4bea8cc849ce7d00fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:84:c5:28:3f:f7:59:d3:aa:94:d3:85:4f:
18:f2:1d:b0:a1:a2:58:04:d5:fc:9e:18:69:27:5b:
ca:24:52:93:a3:e4:2b:0a:df:9a:46:08:21:16:49:
7e:fa:4e:88:3a:6c:74:a7:9d:a6:3f:dd:2f:4f:f0:
61:2d:93:49:ad:19:e2:24:8b:2d:cb:7f:ee:24:54:
e8:59:34:3f:00:10:5e:d4:5a:99:4a:9e:3d:5a:6d:
dd:3d:20:35:7e:e1:68:11:31:02:95:57:23:19:27:
75:f2:ef:9b:d5:f8:f8:54:80:99:32:0c:6a:05:ba:
29:ce:c1:b8:d2:fa:85:a6:ad:52:ef:65:12:af:7c:
2a:1a:55:2f:d3:f3:6c:7a:cf:4d:e3:95:53:bb:c7:
dc:06:57:1a:45:01:5d:31:7c:e0:7c:ca:5f:11:a0:
62:7c:33:81:3e:62:18:70:c6:3e:83:7f:32:aa:1a:
c2:24:2c:20:08:1c:0b:21:23:a1:02:b0:04:6d:05:
e7:c5:3f:a1:cb:93:a7:7c:7a:ff:3f:48:b8:93:fb:
e8:30:45:d2:3e:32:a1:91:5d:3a:a8:1b:56:f0:2a:
37:ee:2a:d2:79:a7:de:96:57:cd:04:92:a8:65:a6:
3d:93:61:34:f2:32:ee:91:7d:09:23:7d:75:44:3c:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:DB:90:28:E6:F4:76:CD:7A:4B:EA:8C:C8:49:CE:7D:00:FB:DB
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:02:21:77:0b:62:61:7d:a9:76:3d:89:6c:79:9b:24:a0:6a:
96:ae:e8:8b:c3:07:54:51:bc:60:15:0c:ba:35:eb:c4:a2:4d:
dd:6b:d2:a2:45:5c:cb:1e:e2:5e:70:05:d2:f3:d6:46:ae:74:
57:c8:ed:83:d1:44:de:40:20:c8:b5:07:cc:14:a6:a3:9f:fd:
f4:42:65:c4:34:92:68:c4:ad:20:d9:22:a8:2c:e9:55:75:4e:
c5:4f:e7:e1:4d:5d:c9:5f:f6:b0:aa:10:cd:88:7f:6a:9f:25:
03:86:66:b2:bc:0d:b4:56:fe:21:7e:96:fc:fa:ce:80:fc:fb:
03:a1:10:30:f3:47:c3:1a:c1:6c:71:44:d3:01:9f:23:ad:80:
27:42:3a:51:50:fc:72:4f:d4:82:1b:c5:20:a9:77:1e:98:4c:
b0:52:32:7f:35:a1:00:5c:c4:27:3a:ef:2c:2a:49:be:11:12:
b1:28:a4:08:24:68:0b:8c:65:ca:d6:27:ab:8c:73:b1:78:fe:
0c:84:a2:37:4d:57:de:85:35:02:ed:0f:ce:da:1a:eb:61:49:
f3:60:c5:88:4d:d6:6b:34:20:49:55:41:ad:a7:2b:14:b7:af:
37:d9:f7:a2:f0:93:d4:c2:9f:ab:ec:bf:54:69:73:e9:5b:d6:
07:8a:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 19:46:44 2025 by rpki-client