Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: P18cfwMQISx4NXNLw0+q/Uaul6swhIhJPBrMSpPI4Y4=
Subject key identifier: AD:61:3E:77:79:77:38:51:2B:BE:9A:5C:61:85:BF:E8:3D:46:79:C3
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 019A7301A2588E633A08115AD76BB9B6479C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0C5B
Signing time: Tue 11 Nov 2025 13:01:18 +0000
Manifest this update: Tue 11 Nov 2025 13:01:18 +0000
Manifest next update: Wed 12 Nov 2025 13:01:18 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: hIafM0PY+SVWpo5uggImw5j2VuVwGJa8YrwkIAe9pj8=)
2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a2:58:8e:63:3a:08:11:5a:d7:6b:b9:b6:47:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Nov 11 13:01:18 2025 GMT
Not After : Nov 12 13:01:18 2025 GMT
Subject: CN=ad613e77797738512bbe9a5c6185bfe83d4679c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:0b:66:58:34:ec:9b:61:da:b9:df:27:77:
e6:eb:63:84:a2:f1:62:fc:12:db:fb:39:96:e8:cd:
e8:e6:3f:3a:24:a1:8e:3f:f4:23:e8:e2:71:34:db:
ed:cd:ac:31:c0:da:c4:4c:11:75:eb:a2:19:3d:7b:
8f:32:2f:19:90:44:ad:0e:ca:94:5b:7c:76:d3:ca:
93:2f:7d:20:d0:ac:52:7f:e9:be:28:36:96:3c:c6:
ec:f6:3d:7a:ca:b6:02:db:e0:2b:78:ca:f3:6d:06:
35:be:0a:2d:0e:26:46:38:00:b4:e3:64:7b:82:72:
16:9d:ec:d1:f7:62:5b:d9:d8:da:62:87:22:a9:a7:
b5:3e:95:54:36:77:03:20:93:9e:e1:4f:b0:b3:a0:
2a:1c:88:b8:a9:32:ea:ec:14:7c:96:65:0a:89:e2:
b0:75:80:0f:21:af:46:4f:ef:ca:f2:39:4f:52:a9:
7b:bb:69:df:b1:fe:0d:6c:df:5a:5c:69:df:37:e4:
81:58:10:31:08:a9:fc:91:57:ad:34:5a:7e:d5:17:
d5:4a:0a:38:ed:ac:73:ad:fb:e0:26:b9:71:ee:b7:
b5:3a:58:7b:af:52:23:ac:32:4d:bf:9a:24:a0:c6:
4d:42:cf:1f:7f:72:bc:d8:d5:9f:b2:57:24:54:de:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:3E:77:79:77:38:51:2B:BE:9A:5C:61:85:BF:E8:3D:46:79:C3
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:53:e9:b3:e3:28:d6:93:44:35:3b:67:ea:ed:c2:5c:1b:
09:e1:24:bf:45:86:71:4f:18:80:1a:d0:fd:17:86:62:66:74:
e3:fd:4f:89:91:eb:fb:fe:91:e8:90:db:1c:53:6b:42:27:e3:
86:e5:1a:f9:51:cd:88:3e:45:35:3a:be:c6:6d:62:bc:72:7d:
6b:e0:80:6c:ea:86:a7:dc:fb:14:ca:e1:ab:7e:7f:3e:40:40:
96:8d:6d:4c:dc:0f:07:2e:bf:9d:6a:47:d8:22:5b:45:6c:3c:
f6:11:63:f9:0b:c8:bd:6f:7d:5a:e9:8a:a2:1a:f6:1c:2d:cd:
e8:dd:8b:f0:89:79:0c:d6:f7:32:59:ba:e3:d5:d8:db:8b:3a:
8e:1f:d6:48:2a:96:91:8e:9d:74:9f:be:75:a7:4c:80:7f:37:
6d:17:65:0c:3f:8e:ed:ca:77:09:79:53:ea:b0:6b:bb:2b:29:
61:a1:48:21:d4:48:35:d2:21:00:63:a6:ee:26:a0:f6:f3:fc:
f3:e8:72:1d:44:52:83:fc:be:d6:ed:3f:81:7e:68:7f:80:52:
7f:bf:4d:af:3e:8a:25:10:9d:5b:90:29:3c:90:c4:8b:c7:09:
51:fd:d9:b3:a7:ae:64:8c:c0:07:c0:8b:e0:24:5d:7a:5f:fe:
16:93:a6:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAaJYjmM6CBFa12u5tkecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDkwZmFjM2NjNDJmMTk5NzQ1NWExMmU2NDMwNjQ2Mzdj
NjlkYzMwHhcNMjUxMTExMTMwMTE4WhcNMjUxMTEyMTMwMTE4WjAzMTEwLwYDVQQD
EyhhZDYxM2U3Nzc5NzczODUxMmJiZTlhNWM2MTg1YmZlODNkNDY3OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eoLZlg07Jth2rnfJ3fm62OEovFi
/BLb+zmW6M3o5j86JKGOP/Qj6OJxNNvtzawxwNrETBF166IZPXuPMi8ZkEStDsqU
W3x208qTL30g0KxSf+m+KDaWPMbs9j16yrYC2+AreMrzbQY1vgotDiZGOAC042R7
gnIWnezR92Jb2djaYociqae1PpVUNncDIJOe4U+ws6AqHIi4qTLq7BR8lmUKieKw
dYAPIa9GT+/K8jlPUql7u2nfsf4NbN9aXGnfN+SBWBAxCKn8kVetNFp+1RfVSgo4
7axzrfvgJrlx7re1Olh7r1IjrDJNv5okoMZNQs8ff3K82NWfslckVN44uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1hPnd5dzhRK76aXGGFv+g9RnnDMB8GA1UdIwQY
MBaAFAMJD6w8xC8Zl0VaEuZDBkY3xp3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAt
ZmRkMjNiNDNjNTJlLzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAtZmRkMjNiNDNjNTJl
LzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb1T6bPj
KNaTRDU7Z+rtwlwbCeEkv0WGcU8YgBrQ/ReGYmZ04/1PiZHr+/6R6JDbHFNrQifj
huUa+VHNiD5FNTq+xm1ivHJ9a+CAbOqGp9z7FMrhq35/PkBAlo1tTNwPBy6/nWpH
2CJbRWw89hFj+QvIvW99WumKohr2HC3N6N2L8Il5DNb3Mlm649XY24s6jh/WSCqW
kY6ddJ++dadMgH83bRdlDD+O7cp3CXlT6rBruyspYaFIIdRINdIhAGOm7iag9vP8
8+hyHURSg/y+1u0/gX5of4BSf79Nrz6KJRCdW5ApPJDEi8cJUf3Zs6euZIzAB8CL
4CRdel/+FpOmUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:07 2025 by rpki-client