Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: /3P0/rtdbs4YwWs1vHT31GArsx6pm89fVUIOfdn4H48=
Subject key identifier: 93:E7:2B:4A:0F:01:5B:4F:51:26:20:B9:F6:9F:D6:98:07:53:59:C2
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 019A50E401C996A9404BBC0DDC660455FFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: K9VR0QCjwXvkupY2W5iTlueiWlDGzQFHkvkidxdbU1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:01:c9:96:a9:40:4b:bc:0d:dc:66:04:55:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=93e72b4a0f015b4f512620b9f69fd698075359c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:c4:61:02:28:8a:bb:48:44:7c:74:a7:dd:
5a:55:0c:66:ff:d0:86:21:16:72:67:8f:34:2c:6d:
90:c5:52:7e:05:02:e9:fa:42:59:51:91:7d:27:a1:
f0:70:d9:ef:61:26:b4:64:9f:aa:0f:43:83:3f:2d:
7e:93:23:5b:b6:26:ed:e9:79:82:60:03:1c:b6:72:
80:83:88:eb:48:2f:3a:52:05:36:9b:b4:8d:a0:0d:
d4:f4:03:8e:4e:4b:8d:fd:83:0c:aa:37:a2:63:2e:
77:51:a6:9b:fd:0d:93:06:c7:75:f5:1f:b2:35:8c:
6d:93:d5:82:35:3f:39:4d:b0:77:3c:b7:f5:a0:ba:
fa:e6:47:ed:f3:b1:9e:93:cd:de:6c:a3:c1:39:5f:
84:d1:84:cd:1e:69:51:ee:98:c2:62:b7:3c:6e:8d:
70:9d:70:f2:ad:f5:e4:b9:53:15:33:19:66:91:28:
79:1a:bf:89:03:6f:64:d8:78:c2:4d:4d:e7:bc:09:
e5:a5:0d:fd:a7:b8:49:3a:91:4b:b0:b0:84:47:5a:
c3:25:8e:85:cd:b5:e5:25:0a:d0:e2:2e:d8:10:96:
8d:6c:38:d0:99:24:bb:7a:73:62:b3:3c:85:1b:b3:
4a:e5:ec:5b:d4:2f:d1:41:b6:cc:7a:ae:06:5d:0d:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:2B:4A:0F:01:5B:4F:51:26:20:B9:F6:9F:D6:98:07:53:59:C2
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:92:aa:ea:6f:b3:0e:f0:ff:89:8a:c0:3d:ff:a4:e6:44:20:
a6:d4:b3:2c:35:1c:61:e4:bf:53:16:38:9e:75:94:1e:c0:a9:
7c:da:4f:3d:18:5d:de:81:9d:46:66:a2:9e:7e:a5:3f:ef:ce:
9e:32:2d:3c:43:a6:8f:d1:88:2c:60:ab:0a:c9:fa:0a:02:2e:
0a:05:df:f5:7e:fa:76:77:0b:4c:ed:76:8c:08:fa:e0:91:af:
e1:03:34:16:2a:3f:17:e6:12:99:3d:5a:c4:f1:b8:45:fe:16:
9b:14:ad:b5:05:eb:e6:fb:fd:1d:c4:da:65:15:41:29:7b:d9:
35:77:fd:cf:51:21:d1:83:93:7d:a2:f6:84:d2:28:ef:fb:31:
c9:53:ef:56:65:8f:af:36:7f:72:3b:9f:59:35:b5:a7:ca:ca:
12:88:97:d9:2e:89:49:38:77:86:d3:f3:2e:3e:c9:d0:fa:95:
df:d2:8a:4d:9b:49:fc:13:ea:e4:e1:f4:ff:3a:42:68:c3:20:
f1:77:4b:6b:79:06:3f:32:ed:4b:07:35:82:d5:57:49:f2:3e:
e0:75:91:15:83:39:7d:86:c8:d8:75:03:c4:61:c5:ff:4f:5c:
cb:25:88:08:75:67:62:e9:4b:12:e2:8e:36:5d:d8:86:00:ba:
19:64:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:21 2025 by rpki-client