Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: f70h7EwAxa10dhcmKZiQIPX+NziQieiY0fffbvgqAZI=
Subject key identifier: 4D:9B:20:F5:93:10:F7:B9:87:2A:CD:84:40:FA:2B:D9:5F:7B:30:DB
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019A4E4F7C8FB32FD418279E6A04AE8A9743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0F74
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: kdWJ4GFlu9MdPFG/z4UmjJQOwp4mrITcXDGW72sfpcs=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7c:8f:b3:2f:d4:18:27:9e:6a:04:ae:8a:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=4d9b20f59310f7b9872acd8440fa2bd95f7b30db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:f3:c0:fc:d7:55:e1:ca:01:61:87:00:f8:
f3:17:38:1b:bd:f0:07:bf:0f:d5:50:ea:48:98:a4:
5e:92:c3:6b:87:f3:12:06:bf:bd:fc:d2:11:81:b1:
62:b7:27:9c:6c:22:d4:d2:95:9d:dd:f4:05:cc:e2:
b7:e6:c2:75:f0:e9:6c:2f:72:7c:3d:bb:4f:eb:50:
85:05:11:28:2c:06:96:c1:9c:ec:30:16:38:de:f6:
5a:75:7b:ae:a1:00:73:27:59:84:9b:e2:86:f4:58:
6b:85:dd:25:4e:0d:bd:01:d7:c0:7e:09:8f:26:2a:
2b:4c:55:2d:b9:d0:af:08:9f:18:4b:8a:1f:43:d5:
de:1e:95:88:02:1c:22:a7:e4:12:6d:bd:05:a3:25:
9d:7f:e4:85:5e:a2:0b:25:93:f8:85:17:7b:23:56:
06:1f:c1:39:dd:0f:fd:cc:e0:d8:63:cf:ea:fd:78:
1b:5f:9e:42:9d:63:72:16:fc:9c:54:06:d4:c6:5e:
bd:b0:27:87:5b:f0:70:ad:5d:e8:c3:b1:68:5b:3a:
d7:a5:e2:00:25:13:4e:31:4e:2e:c4:5f:a3:15:72:
2b:f0:4e:36:2d:00:f0:3e:f4:bf:bd:76:9b:65:47:
53:99:16:14:aa:58:d1:07:58:d5:bc:92:bd:cb:49:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:20:F5:93:10:F7:B9:87:2A:CD:84:40:FA:2B:D9:5F:7B:30:DB
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:07:72:ab:ab:ac:3a:2f:79:e7:31:03:97:77:37:58:00:
61:41:b7:0f:7b:dc:3d:bc:cc:67:f3:15:3a:5f:23:35:cb:82:
f2:a0:e4:13:68:fb:01:65:a8:c8:95:b6:95:12:6f:d1:e6:b1:
1b:3f:08:a7:7b:39:1f:68:eb:6e:ae:7d:33:34:09:93:1c:b9:
12:e9:db:dd:0c:00:ae:1f:2c:8e:b8:ac:e4:d4:a5:56:68:3e:
05:45:2f:63:3e:a3:88:6f:06:1c:1a:af:53:62:fc:84:e8:53:
dd:93:a1:94:ae:d3:19:f9:d1:28:4a:a1:3a:5e:5c:38:57:1c:
34:58:a8:9f:40:4a:03:11:a9:1a:63:d8:d8:9b:18:57:3f:51:
59:58:a2:55:5b:b7:27:e1:6c:f0:77:bc:0b:08:7f:87:3b:e5:
ea:65:a6:f5:ac:71:90:a9:5a:df:f8:ad:2e:70:da:24:58:ba:
0e:b6:06:9f:3c:ed:e7:3f:1b:85:38:9b:82:86:d7:74:cf:05:
d5:f5:90:04:1d:b7:ba:70:84:81:55:79:5b:13:c4:71:d2:66:
6f:06:b3:f5:98:c6:d0:76:0e:b5:a0:dc:37:76:d2:6a:17:03:
22:11:c7:b1:d4:a8:a6:f6:96:60:b8:60:bf:9c:34:e8:ee:24:
9a:84:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:28 2025 by rpki-client