Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: URQamwDjJckzLvE2o3XPrBPRFTnULugQcB29C70b9TA=
Subject key identifier: 7A:51:58:92:9B:B7:A4:A4:8B:04:65:AC:5B:AC:B9:5E:28:03:0D:23
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019A71B8078306DDB82FA552E628266064F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 0FE0
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: rBUAENip7DfvifGq2rmuabuf0v1qOyk9jWt0YmSLcw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:83:06:dd:b8:2f:a5:52:e6:28:26:60:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=7a5158929bb7a4a48b0465ac5bacb95e28030d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:a0:b8:0e:23:27:ea:fa:e7:2f:81:16:ba:
c3:69:02:51:01:32:f1:da:5f:6d:3c:f7:f4:35:fe:
ae:a0:1c:25:c8:0e:e9:8c:3f:18:b0:49:2b:df:22:
df:00:7d:dd:41:6d:6d:2e:42:94:1b:25:52:e2:55:
3a:e0:f0:0a:30:6b:31:1e:a7:28:39:0a:d7:92:16:
fc:4d:17:7b:a7:03:9b:d0:7f:85:ea:95:54:34:ca:
1b:55:21:69:5b:a3:c9:2e:e4:e1:e1:59:17:45:c8:
75:8d:b2:98:85:b3:25:31:0d:11:1f:65:2b:35:38:
6d:ca:f7:27:80:9b:49:89:ce:6b:d7:a2:8e:8b:fb:
7f:42:a8:39:ea:5e:59:74:aa:ff:95:55:33:eb:5f:
6b:0c:85:94:47:14:3b:ff:91:3f:55:09:fe:13:4f:
7e:1e:10:4a:f2:52:da:3a:e7:f7:ac:1f:22:28:1a:
53:cb:42:6a:a1:03:64:ea:f6:d0:fd:f4:48:3f:ac:
29:f2:c3:46:3f:2d:ec:26:ac:b9:06:44:b4:08:62:
30:64:4f:f4:c0:1d:21:7a:fc:c5:cd:18:1a:c2:f2:
02:56:a3:69:c7:1e:ea:37:b6:d6:4f:bd:46:2f:e2:
9e:ac:57:e7:b7:e9:e9:db:9e:03:6b:6c:4b:ff:ac:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:51:58:92:9B:B7:A4:A4:8B:04:65:AC:5B:AC:B9:5E:28:03:0D:23
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:55:54:dd:f8:ce:86:4e:d3:79:72:2c:9d:45:f2:ee:7f:f6:
40:2e:88:e8:61:eb:34:e8:f7:f3:8a:5b:b8:98:ef:7d:20:36:
5b:9a:66:de:75:9b:81:41:9b:a9:06:14:59:a6:c1:2f:11:bd:
90:ba:d5:92:5e:f6:81:a9:8c:6e:17:0d:73:e9:e8:5c:88:1f:
e5:41:f3:9c:39:68:58:f4:b5:d6:c1:10:66:d0:af:36:3a:35:
92:bd:00:3e:ba:72:9d:c2:12:6c:a5:f7:e0:14:29:5d:fd:d7:
77:c8:4e:46:d9:ec:e9:85:37:01:0e:4a:1f:ca:a5:55:c9:64:
a0:cb:92:a3:72:7a:13:57:ec:f6:c6:12:a8:8f:f2:fa:c5:a4:
85:0c:00:ef:63:bc:4a:7e:8f:6c:5c:e9:a5:09:69:7d:87:e5:
7d:ea:22:51:d2:a8:fe:a7:28:96:90:5b:ae:c9:fd:f3:8b:10:
8e:27:b9:bc:16:58:e0:22:e9:36:6e:e4:c3:a0:f0:cb:af:6c:
1c:2e:67:28:09:94:56:ce:89:53:f1:f0:7f:b9:03:d0:1e:cf:
9c:58:8f:a2:f3:8c:ce:c9:63:a5:6e:39:1e:96:4d:9d:b4:ff:
ac:f3:8a:a9:af:53:d4:10:a0:7f:ff:85:eb:cc:c8:ce:75:85:
02:a0:4c:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAeDBt24L6VS5igmYGT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw
YWIzODcwHhcNMjUxMTExMDcwMTE3WhcNMjUxMTEyMDcwMTE3WjAzMTEwLwYDVQQD
Eyg3YTUxNTg5MjliYjdhNGE0OGIwNDY1YWM1YmFjYjk1ZTI4MDMwZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG+guA4jJ+r65y+BFrrDaQJRATLx
2l9tPPf0Nf6uoBwlyA7pjD8YsEkr3yLfAH3dQW1tLkKUGyVS4lU64PAKMGsxHqco
OQrXkhb8TRd7pwOb0H+F6pVUNMobVSFpW6PJLuTh4VkXRch1jbKYhbMlMQ0RH2Ur
NThtyvcngJtJic5r16KOi/t/Qqg56l5ZdKr/lVUz619rDIWURxQ7/5E/VQn+E09+
HhBK8lLaOuf3rB8iKBpTy0JqoQNk6vbQ/fRIP6wp8sNGPy3sJqy5BkS0CGIwZE/0
wB0hevzFzRgawvICVqNpxx7qN7bWT71GL+KerFfnt+np254Da2xL/6wSwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpRWJKbt6SkiwRlrFusuV4oAw0jMB8GA1UdIwQY
MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt
ZWQwN2Y1Y2FkNmQ3LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3
LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4lVU3fjO
hk7TeXIsnUXy7n/2QC6I6GHrNOj384pbuJjvfSA2W5pm3nWbgUGbqQYUWabBLxG9
kLrVkl72gamMbhcNc+noXIgf5UHznDloWPS11sEQZtCvNjo1kr0APrpyncISbKX3
4BQpXf3Xd8hORtns6YU3AQ5KH8qlVclkoMuSo3J6E1fs9sYSqI/y+sWkhQwA72O8
Sn6PbFzppQlpfYflfeoiUdKo/qcolpBbrsn984sQjie5vBZY4CLpNm7kw6Dwy69s
HC5nKAmUVs6JU/Hwf7kD0B7PnFiPovOMzsljpW45HpZNnbT/rPOKqa9T1BCgf/+F
68zIznWFAqBMrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:50 2025 by rpki-client