Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: xjzIVmRCzrtM0AKm3ecCVYwbUVwYE0SyJSDyfP3kyfs=
Subject key identifier: 5D:B7:1F:1B:E3:C1:FF:95:92:7F:0D:B6:A8:1F:63:BC:7D:22:E6:C9
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019A4EF4828D1D73823B8BEDC480015B5FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0D81
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: a4E53DvLoU2duNip7V+KqPyNS2JUBe/2sB23l1nirvs=)
2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:82:8d:1d:73:82:3b:8b:ed:c4:80:01:5b:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=5db71f1be3c1ff95927f0db6a81f63bc7d22e6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:33:b4:c0:a6:fd:c2:67:2f:f7:0e:46:0b:
59:8f:48:4c:11:15:03:7b:9e:c4:e9:26:71:14:55:
7c:cc:41:ef:63:01:66:fc:36:d0:63:71:34:79:c4:
6e:f1:82:b2:9f:39:3d:1b:ec:27:6e:48:5c:12:62:
9d:4e:d9:11:a9:99:c3:a7:75:59:5e:90:42:86:48:
c1:e3:b3:d5:f5:ca:e0:1a:f6:11:3a:ea:cf:f7:22:
71:d6:8a:c6:b2:4a:d0:2d:db:3b:5d:10:d3:0b:0e:
5a:98:dc:d1:a9:37:2d:06:d0:a4:5c:e1:92:ba:5c:
c5:56:3c:39:42:d7:e3:39:b9:e4:ce:e2:0f:74:2f:
80:6f:ec:ac:f0:7f:ac:95:ed:05:72:85:3e:43:27:
d7:86:45:74:4a:d5:65:ad:b4:c3:09:8d:0b:6a:93:
b0:48:af:91:00:a1:8a:8a:2e:35:5c:ac:47:b3:1c:
60:f6:e8:fa:f0:e9:6c:34:b2:ca:a1:50:7f:33:ce:
32:17:7f:69:01:a7:55:48:22:ff:eb:fd:5b:8d:3b:
35:67:3f:75:61:aa:31:95:bf:c0:0f:2c:30:11:58:
a9:72:7b:84:fd:b2:7a:8c:00:8d:7f:9d:e7:2f:24:
c5:4b:44:52:07:4f:24:4e:e5:11:9b:04:e0:18:d5:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:1F:1B:E3:C1:FF:95:92:7F:0D:B6:A8:1F:63:BC:7D:22:E6:C9
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:1c:25:86:78:77:a7:f1:12:eb:2e:bb:62:38:73:b1:17:
79:e6:c4:4c:88:ed:95:89:6d:ec:5e:12:71:2e:54:da:a1:58:
59:8f:60:0c:86:36:d6:eb:af:b5:30:0c:86:da:d2:57:b5:f9:
19:7f:29:ec:ee:74:bf:c6:35:07:60:d9:4d:16:d7:74:59:c3:
19:53:0a:a2:46:aa:c0:13:37:ce:65:1c:26:5e:e7:08:85:e8:
60:fe:57:02:6b:03:ff:a1:a3:1b:37:97:89:2f:35:0e:07:09:
4b:fe:b3:83:0e:34:c1:9e:ba:b9:61:53:70:17:92:51:4a:18:
b3:91:05:97:5c:e8:55:e7:85:b3:25:41:97:28:0b:28:b0:06:
c3:b9:e6:28:83:7e:16:96:65:7b:ef:aa:20:f6:e6:4c:80:42:
82:43:cf:09:f4:00:c0:c3:fe:84:12:8f:49:c9:59:1b:77:d1:
d9:e7:89:2d:df:7c:5d:27:b1:86:d6:1f:7c:32:f4:67:75:f7:
be:98:c2:a8:ca:bc:d5:58:61:20:c4:44:cf:8b:86:75:8f:f8:
d1:17:ea:c4:4f:40:3f:19:49:4b:72:98:af:06:88:ac:3d:c1:
1b:de:a8:8c:44:17:cf:28:e1:94:de:3b:77:df:f7:ac:3a:50:
29:59:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:11 2025 by rpki-client