Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: YmndBivjg9vOj3v+G3F0krA/08beYN38CUHmvF5/C98=
Subject key identifier: C2:30:42:E9:26:34:43:4C:C6:85:C1:8C:36:CD:8F:92:6D:A9:FF:CE
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 019A4EF455E052AFE2865FD16DE673676FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0E1F
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: Cjy9IwCo9EyDT1jSytgryTu2s06Nw8Uk1dgALNGgeRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:55:e0:52:af:e2:86:5f:d1:6d:e6:73:67:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=c23042e92634434cc685c18c36cd8f926da9ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:2c:14:4e:37:88:c4:9a:b0:b5:7b:91:88:
f1:a9:15:98:52:53:27:81:c8:ad:02:83:7f:ac:b8:
ae:49:5b:51:12:40:2e:a6:dd:4c:d9:e3:c3:fd:a1:
d2:6f:96:9a:e9:9f:f3:d1:5b:d0:d6:0a:7b:c7:95:
e0:dc:06:cd:af:ec:6a:c8:75:e2:b9:86:97:5c:75:
7b:bd:a5:cc:c9:c0:e2:5a:b8:1d:2f:c8:5d:f7:a1:
f3:c8:45:6b:66:69:e6:c6:e8:d6:91:35:4a:07:fa:
3f:0c:3a:80:bb:65:a3:99:92:3d:29:5a:c3:a3:35:
5b:73:20:48:45:04:d0:36:19:8b:6c:93:06:30:8f:
86:cd:3f:a0:95:f3:34:28:da:e6:9d:6f:ed:fa:04:
df:57:db:d2:03:0a:61:31:30:aa:96:63:02:cf:14:
8f:bf:b6:3f:b2:cb:02:67:1f:bb:d3:fa:a6:a9:39:
0d:3d:4f:7b:a0:be:3a:0e:b2:76:5c:70:b6:ea:af:
ac:c4:ba:6b:cd:0d:b7:fd:01:14:92:43:4e:60:9d:
2b:a5:fb:9e:fb:8d:1a:df:2a:be:f2:c6:d9:60:b4:
f4:78:d0:78:3b:9c:aa:0d:31:73:a7:ed:62:9a:a9:
1f:90:47:52:f6:11:cf:15:81:52:b5:cc:c0:9d:89:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:42:E9:26:34:43:4C:C6:85:C1:8C:36:CD:8F:92:6D:A9:FF:CE
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:b8:11:8d:48:c6:96:af:c1:00:1c:24:54:2c:63:a7:4b:
f4:08:47:dc:eb:04:18:c1:d6:a7:cb:fa:89:7c:65:af:f9:d7:
9f:98:4c:e6:f5:15:f5:be:ed:58:51:5f:b2:e3:43:45:20:90:
7c:65:11:f0:65:91:7e:df:8d:9b:4d:e9:8e:93:80:43:87:7c:
46:03:be:10:25:84:f0:37:93:cf:e5:a4:52:9d:ed:4a:a7:a2:
89:af:20:00:38:56:3d:0e:af:eb:dc:e2:cb:27:55:dc:c5:6c:
4c:e7:5f:56:5e:6a:06:2a:f5:ec:11:6e:66:4d:99:98:22:1f:
9d:74:22:8a:3d:5f:67:d1:6c:cd:2b:6a:25:d3:7c:ad:a4:70:
81:68:76:17:b9:90:06:63:aa:29:7f:18:77:bc:40:59:9d:67:
32:b6:4e:72:11:6e:c7:d6:f1:21:3f:43:77:52:1d:2b:5f:6d:
01:3c:ee:d9:9c:2b:45:da:bd:1e:03:37:fb:da:8f:5b:a5:9b:
6d:31:16:4e:14:43:be:e6:c5:d1:ad:ca:05:6c:bc:28:21:a2:
22:88:ee:b7:5a:fb:c8:0e:0d:93:cb:11:2f:0c:5a:27:80:ce:
c6:8f:f5:e8:12:44:c2:ae:4f:2e:e0:85:35:6e:83:16:ca:66:
2f:5d:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:48 2025 by rpki-client