Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File: o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier: +dEwkrrmlRD0ElN8q3XKq/baKOPxbv8WMYCL0gFN8pI=
Subject key identifier: 58:36:14:9C:6A:22:01:82:FB:EF:EB:1F:BA:CE:B4:D7:82:C6:7A:44
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer: /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial: 019A71B942842E65AF04579AC1D0CC4B3D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number: 1014
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: J9Uiu47aVVWyDvrj6xqAhnWjBcMtpUT4GN0kX1/+9CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:42:84:2e:65:af:04:57:9a:c1:d0:cc:4b:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=5836149c6a220182fbefeb1fbaceb4d782c67a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:7c:ab:58:cb:a4:3d:ec:cb:db:04:95:ca:
ac:f1:86:9e:a6:88:14:91:f7:01:d2:d0:5f:3e:e3:
55:d0:e0:aa:ba:2b:f7:0d:da:55:37:4b:b9:ab:9c:
0d:4b:45:8a:0a:9b:a6:69:0c:59:6b:d5:28:b6:11:
cd:5b:88:66:d3:48:f6:06:e9:d1:b6:65:c1:18:c3:
27:6f:67:02:d5:74:6f:30:8b:77:f1:ba:1f:62:8f:
f7:d3:66:a1:b9:a3:cd:61:03:e6:61:fb:d8:04:87:
75:24:3c:2b:e7:f0:32:b5:4d:c7:13:2c:6a:f7:05:
5b:93:19:aa:a0:7e:6a:c7:c0:e5:e1:87:7d:35:40:
af:be:1c:f4:0e:61:7c:8d:c9:9b:6b:2e:de:41:7a:
96:d1:95:24:73:d0:92:0f:23:04:bf:85:04:c5:89:
14:69:c9:f0:f2:56:eb:df:e5:4c:5a:54:ef:95:bc:
d3:11:3e:69:8a:30:40:e1:ae:2c:4c:08:5c:83:67:
15:a4:d9:a9:a4:84:90:78:02:90:a0:44:60:82:a1:
85:af:29:3e:47:54:50:8f:67:be:91:61:e1:d0:2e:
46:1c:eb:cc:8a:60:60:f9:9d:9d:91:d9:8e:f7:34:
8d:fd:c5:c2:24:03:55:06:94:d2:0b:67:5f:74:76:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:36:14:9C:6A:22:01:82:FB:EF:EB:1F:BA:CE:B4:D7:82:C6:7A:44
X509v3 Authority Key Identifier:
keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:aa:fb:4c:1d:32:c5:75:a2:e2:f9:cd:5b:7a:00:a4:52:
71:3d:f3:fd:09:6c:26:6b:c4:b9:2d:26:1d:42:5b:85:ce:89:
3e:b0:af:e7:c0:cb:10:1d:b5:a9:37:f5:8b:c0:11:a2:6f:28:
20:20:a5:69:ad:1d:27:c5:a9:b0:b3:88:00:bb:78:8c:0b:80:
98:c5:ac:98:ba:a9:63:84:8b:40:72:ba:e0:40:75:eb:c2:6e:
85:81:84:ea:bd:74:27:7c:89:c9:b1:57:44:93:97:a7:54:38:
65:f6:5f:c8:7d:6d:df:b5:ef:98:6c:37:8f:f5:cf:ce:36:58:
47:4e:1e:1f:e9:1f:93:ed:aa:68:08:56:d6:f7:3a:31:7e:8c:
8d:8d:40:6a:ee:ed:93:2a:1e:3f:f6:3e:84:30:13:09:64:d8:
79:52:0f:f0:7f:c5:4b:b8:d7:12:1b:e6:f6:a2:b0:da:02:3d:
b6:83:8c:a9:ef:ff:57:cd:02:82:7f:39:14:2b:0d:c6:0c:95:
9d:9e:f4:ca:c1:c8:03:7d:4e:2f:17:0c:6b:01:fd:1f:a7:14:
f2:cb:51:6a:b7:c4:33:d4:10:33:00:b6:3e:82:d5:a6:f2:fc:
22:ba:dc:e4:8e:ff:5b:ce:1c:36:9f:ae:38:f9:e4:b9:9c:11:
87:0b:87:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUKELmWvBFeawdDMSz2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZkYTY5Y2FiMWJmZjUyM2NhM2VmNTc0Yjg3Y2ExMzBm
ZGVhMmMwHhcNMjUxMTExMDcwMjM3WhcNMjUxMTEyMDcwMjM3WjAzMTEwLwYDVQQD
Eyg1ODM2MTQ5YzZhMjIwMTgyZmJlZmViMWZiYWNlYjRkNzgyYzY3YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXB8q1jLpD3sy9sElcqs8YaepogU
kfcB0tBfPuNV0OCquiv3DdpVN0u5q5wNS0WKCpumaQxZa9UothHNW4hm00j2BunR
tmXBGMMnb2cC1XRvMIt38bofYo/302ahuaPNYQPmYfvYBId1JDwr5/AytU3HEyxq
9wVbkxmqoH5qx8Dl4Yd9NUCvvhz0DmF8jcmbay7eQXqW0ZUkc9CSDyMEv4UExYkU
acnw8lbr3+VMWlTvlbzTET5pijBA4a4sTAhcg2cVpNmppISQeAKQoERggqGFryk+
R1RQj2e+kWHh0C5GHOvMimBg+Z2dkdmO9zSN/cXCJANVBpTSC2dfdHb6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg2FJxqIgGC++/rH7rOtNeCxnpEMB8GA1UdIwQY
MBaAFKOv2mnKsb/1I8o+9XS4fKEw/eosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMt
ZWNkNjFiZDAyYjQ2LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMtZWNkNjFiZDAyYjQ2
LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuOq+0wd
MsV1ouL5zVt6AKRScT3z/QlsJmvEuS0mHUJbhc6JPrCv58DLEB21qTf1i8ARom8o
ICClaa0dJ8WpsLOIALt4jAuAmMWsmLqpY4SLQHK64EB168JuhYGE6r10J3yJybFX
RJOXp1Q4ZfZfyH1t37XvmGw3j/XPzjZYR04eH+kfk+2qaAhW1vc6MX6MjY1Aau7t
kyoeP/Y+hDATCWTYeVIP8H/FS7jXEhvm9qKw2gI9toOMqe//V80Cgn85FCsNxgyV
nZ70ysHIA31OLxcMawH9H6cU8stRarfEM9QQMwC2PoLVpvL8Irrc5I7/W84cNp+u
OPnkuZwRhwuHBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:20 2025 by rpki-client