Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: YzCcr3Cf5Pkt+fmkm6oVAAsRm/UOTkKqYiLmaf+SsjI=
Subject key identifier: 7A:27:D9:DE:90:9C:AA:89:2A:B5:7D:88:C8:1A:FF:21:12:8A:CF:CF
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 019A53ACD9CF1997A1187ED2BCA0A62197BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 021D
Signing time: Wed 05 Nov 2025 11:00:28 +0000
Manifest this update: Wed 05 Nov 2025 11:00:28 +0000
Manifest next update: Thu 06 Nov 2025 11:00:28 +0000
Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: WkoFWUeAyojfcoJd4dwKuxowWlQCOSrWiPVGfx9yfhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:d9:cf:19:97:a1:18:7e:d2:bc:a0:a6:21:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Nov 5 11:00:28 2025 GMT
Not After : Nov 6 11:00:28 2025 GMT
Subject: CN=7a27d9de909caa892ab57d88c81aff21128acfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:9c:dd:2e:72:f6:de:31:9f:e0:26:c9:cb:
6d:34:34:49:be:7a:c9:79:ad:42:d0:16:01:b3:a6:
a9:b6:f9:52:e1:6f:42:f0:55:7f:39:ae:3f:b2:30:
9f:f4:4e:d1:72:a1:f6:11:a4:af:39:ad:56:21:c7:
c3:3f:1a:20:cf:c7:f1:50:05:b3:c1:ba:cf:36:fb:
d3:8d:c7:25:4c:38:ac:5b:23:86:ca:0c:5b:0c:32:
8e:fe:15:91:11:63:2e:9a:d7:d6:7f:36:11:17:ca:
cc:f6:0b:79:d7:1a:ef:4e:ea:73:d5:38:14:da:d4:
2c:31:5c:86:dd:ca:21:89:20:45:40:60:06:a8:f3:
01:da:79:92:1e:b9:e4:06:9f:77:d9:09:ba:e3:e1:
95:6a:c3:84:bc:04:83:2a:92:5d:72:50:f0:14:2c:
57:ad:a9:69:5f:8d:68:8e:17:b3:d7:e0:32:f7:9d:
9b:98:af:b2:59:bf:f3:94:81:98:f2:65:d4:8c:4c:
04:98:a8:85:1e:68:08:80:91:c7:91:15:d5:1b:71:
9a:3d:4e:1d:67:c1:b1:77:99:10:94:db:5b:a6:d3:
a4:03:14:23:90:52:1d:bd:d1:ba:ee:60:9a:9b:47:
42:5f:fc:2e:b2:d7:7f:4e:24:5b:5c:d9:d7:e8:8d:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:D9:DE:90:9C:AA:89:2A:B5:7D:88:C8:1A:FF:21:12:8A:CF:CF
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:99:39:03:50:28:26:53:1c:5c:1b:ac:86:d3:6a:d4:62:25:
3d:4b:0d:76:31:1b:a7:fd:68:1c:86:30:f3:dd:3a:4a:01:ca:
33:43:1a:a7:39:2d:6b:ea:10:63:52:11:95:72:06:b5:dc:f5:
44:fe:17:09:85:9a:d5:ac:a9:08:5b:56:76:28:e6:12:90:4c:
54:94:36:26:ba:92:15:63:01:e5:1b:74:df:65:ed:e3:f9:72:
06:55:1e:6d:da:62:81:d9:c3:41:da:b4:59:ee:62:d1:fb:5a:
c5:d3:24:60:5d:e5:33:85:b7:99:5a:92:ce:f9:b5:88:ab:78:
e6:13:e2:b3:95:8e:fb:f1:bf:56:b4:77:e7:79:07:fd:e3:7d:
99:42:98:f3:13:c6:98:24:65:89:bd:f1:7e:19:48:7b:67:05:
3a:28:6d:66:ac:21:7c:ff:d9:cf:c6:1e:b4:25:ce:60:72:cc:
ff:95:2d:fb:a0:a6:fc:d6:da:22:7d:77:5d:50:02:1b:b3:a3:
5c:01:3c:28:b0:0d:c3:dd:92:0a:07:44:95:22:19:76:b0:01:
56:f6:df:75:3f:fe:13:4c:2d:ed:86:b5:bc:5d:fe:e0:81:be:
38:fe:08:14:2a:38:8b:ae:0b:af:89:04:ea:b8:83:16:8c:6d:
16:76:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:11:45 2025 by rpki-client