Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: VQuxmqB6vfsvF4pLsrQH2jFoRu8RYNCjP0YoDvHLmWk=
Subject key identifier: 49:D6:6F:A7:0D:C4:15:A6:05:F8:45:99:E7:70:EA:27:E9:76:59:99
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019A503E00E5F976C0A2419DEAB7E0392C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: F9Heh3HnJMCdwhCTY/piLDaAZ4Z7huO8RA8Uhx/sDok=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:00:e5:f9:76:c0:a2:41:9d:ea:b7:e0:39:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=49d66fa70dc415a605f84599e770ea27e9765999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:4f:71:77:eb:ef:cb:de:ff:fa:ee:0b:d6:
58:38:c7:8d:e3:ac:23:9c:cd:9d:fa:e6:a2:72:24:
7b:8c:a6:c8:43:6e:6b:6d:98:ee:ad:57:05:cc:9d:
d0:2e:18:bf:75:35:e6:93:aa:a8:46:6f:b0:65:41:
de:1b:53:52:9f:54:20:2c:66:9a:75:10:23:6d:ad:
1f:81:b3:26:22:cf:c3:d6:ee:11:4a:4f:3e:9e:e8:
5e:37:bf:fc:b9:a6:45:7b:e0:c5:11:91:0a:39:a9:
f8:8e:66:7d:98:2f:f7:95:f0:0e:6e:ee:2a:d0:71:
1f:14:cb:c3:a8:3d:be:d9:b2:c2:c8:f9:92:5a:2d:
dd:e3:c1:40:e5:b8:4b:ec:38:32:4d:f7:47:87:4a:
79:60:05:76:d5:49:31:a8:5a:a1:16:fe:b5:29:fc:
d8:8a:1b:68:d9:98:bd:53:93:a1:56:33:1a:74:a8:
ad:ec:fb:41:c1:de:7c:65:f5:aa:c9:8b:99:ca:89:
1f:e7:e3:65:3c:f0:00:7d:c3:ca:98:b5:f7:0e:7b:
fd:a0:dc:4d:14:54:b4:e1:5f:35:ae:e3:c4:0c:f8:
90:0f:99:7a:bb:ea:50:68:5c:12:50:cb:e4:1b:8e:
0e:5f:31:2e:4c:c1:67:3f:76:bb:f6:d2:ea:65:d0:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:6F:A7:0D:C4:15:A6:05:F8:45:99:E7:70:EA:27:E9:76:59:99
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2f:f3:72:b6:f6:7a:29:b3:e3:aa:52:11:3e:b3:19:92:b3:
a1:b3:ea:33:dc:9b:bf:74:d5:e3:69:63:78:f1:90:b1:e3:7c:
d5:a6:ff:ab:41:79:64:77:24:37:a2:28:e6:cf:67:7b:da:32:
c7:d2:a2:04:8b:ec:d9:73:d8:be:4e:86:ed:f3:e0:8a:39:b0:
d8:df:2e:12:74:46:fc:b9:64:32:16:c8:bc:bc:8c:60:d5:72:
7c:db:80:fd:b6:bf:54:1f:5b:fa:e7:1d:c8:69:23:2f:0b:56:
6d:8c:dc:e8:80:f8:71:f1:d3:07:31:97:4e:b6:18:68:3e:1d:
4f:c5:34:14:b4:ac:2a:77:ed:6b:07:66:f3:88:88:ca:26:14:
e3:4c:4c:0d:1c:b4:33:3b:a6:9f:9b:44:8f:2e:c5:44:9e:47:
72:57:25:05:74:0e:7f:86:d5:6a:36:33:e2:ac:81:52:f8:0a:
e9:e6:2f:1f:3c:0e:8b:66:3f:0b:c1:e3:e2:a0:16:1b:6b:0f:
d7:43:6b:02:9f:02:eb:a3:4e:0e:de:c9:46:aa:c3:d8:ac:3c:
e8:77:92:e4:e4:86:da:96:ce:12:8f:61:a1:ce:22:d5:c4:96:
20:98:85:0a:3a:01:6a:da:63:31:a7:73:7b:9d:84:6a:8d:08:
59:c2:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:00 2025 by rpki-client