Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: lr6l5uuXaeuAInexJG5ZzhC6qwZzHSoOD9P8sOxUH7g=
Subject key identifier: 20:71:8F:6B:11:A4:61:29:DE:6F:E6:FA:88:2B:7A:9D:D4:5E:9A:69
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 0199228C5C2BFA505926DB58F24A321D73CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0D8E
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: 7VKtZuBgDB208ZW+Jn9eFh1Ow/FPaCFeI/yfeRsgd7Y=)
2: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (hash: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5c:2b:fa:50:59:26:db:58:f2:4a:32:1d:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=20718f6b11a46129de6fe6fa882b7a9dd45e9a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:20:6f:c7:e2:1b:bd:96:84:8c:27:4c:76:
e4:da:0b:e6:58:9a:8a:b2:b4:52:e9:02:75:cb:3e:
1f:13:f3:c1:29:ab:8f:17:85:1d:9f:83:6e:74:65:
5f:e6:ca:0c:66:49:77:4b:85:06:7f:96:ae:98:a1:
a1:6f:3c:eb:d7:4e:11:6e:a0:d4:6f:60:6f:90:bb:
58:8b:a4:26:bf:63:d9:d4:71:b8:52:74:d4:1a:a9:
fe:e3:4d:d1:e0:13:b3:4f:44:f0:9d:c1:58:b5:53:
86:a7:55:65:8f:fa:40:32:9a:d9:8f:2b:67:27:3d:
8d:e7:47:d3:95:eb:d2:08:c8:f6:31:2a:91:d3:1e:
07:82:ee:92:23:77:f2:4c:0c:e8:3a:41:4e:cd:f3:
2e:27:2e:2c:98:5e:93:28:a8:ab:d1:f0:00:44:20:
68:62:de:3c:05:0e:24:f4:e0:c3:42:07:07:bf:0b:
4b:93:b7:d8:4b:9f:36:4c:46:c6:39:7f:ad:14:ef:
dc:84:0a:05:3a:b2:0f:42:72:f6:de:dc:76:02:32:
09:35:65:a2:5a:e6:df:3a:2e:c9:28:99:a2:ae:dd:
ca:dc:ba:9d:d8:0d:c9:2f:5f:5e:4f:51:6e:a9:94:
a7:9e:52:f4:18:89:c0:b2:e8:9d:4b:6b:e8:2a:88:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:8F:6B:11:A4:61:29:DE:6F:E6:FA:88:2B:7A:9D:D4:5E:9A:69
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2f:12:e5:2e:f3:18:19:86:02:ca:88:2c:92:8b:88:79:2b:
a8:84:5e:fa:34:ad:cd:3b:2a:ba:6f:ad:45:e9:b7:ef:eb:83:
d3:e3:53:08:19:2e:b0:e7:a1:c7:03:4e:30:07:5a:a6:b3:02:
ef:89:79:a2:f4:67:1a:6f:04:70:eb:36:ca:c5:90:b4:40:8a:
57:c7:ab:83:4b:24:aa:6d:7a:e6:ba:f7:96:f1:92:b0:60:eb:
6a:9e:6e:e3:2f:55:59:d7:5c:d5:af:99:54:bc:12:6a:d8:e4:
1d:cd:dc:83:1f:2a:7e:e4:11:ef:f0:4b:d2:ae:7b:41:01:bb:
33:75:70:9f:10:7a:fc:de:28:27:cc:6e:5d:c9:77:ec:50:b7:
11:94:99:f5:49:8d:ba:c3:b5:a3:be:91:f8:10:66:3e:7b:9b:
27:ba:71:64:ef:de:f1:52:cb:fc:36:f1:78:18:e9:8a:d9:24:
4b:86:dd:6c:e0:44:ab:21:8a:53:1d:f5:4d:bf:87:ac:53:70:
93:20:1a:a1:7f:ac:e5:1e:1e:0c:0d:8c:3e:17:55:ce:1c:86:
f4:44:52:0c:1a:7e:74:88:59:aa:5c:c5:84:bd:8a:bf:b4:49:
fd:12:57:5c:b5:06:d0:7b:50:c7:63:b5:8d:cb:87:55:ee:66:
65:9c:28:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFwr+lBZJttY8koyHXPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0
NDNlNWIwHhcNMjUwOTA3MDUwMDQ3WhcNMjUwOTA4MDUwMDQ3WjAzMTEwLwYDVQQD
EygyMDcxOGY2YjExYTQ2MTI5ZGU2ZmU2ZmE4ODJiN2E5ZGQ0NWU5YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu98gb8fiG72WhIwnTHbk2gvmWJqK
srRS6QJ1yz4fE/PBKauPF4Udn4NudGVf5soMZkl3S4UGf5aumKGhbzzr104RbqDU
b2BvkLtYi6Qmv2PZ1HG4UnTUGqn+403R4BOzT0TwncFYtVOGp1Vlj/pAMprZjytn
Jz2N50fTlevSCMj2MSqR0x4Hgu6SI3fyTAzoOkFOzfMuJy4smF6TKKir0fAARCBo
Yt48BQ4k9ODDQgcHvwtLk7fYS582TEbGOX+tFO/chAoFOrIPQnL23tx2AjIJNWWi
WubfOi7JKJmirt3K3Lqd2A3JL19eT1FuqZSnnlL0GInAsuidS2voKojnhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBxj2sRpGEp3m/m+ogrep3UXpppMB8GA1UdIwQY
MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt
YThiZWI1NjU3ZDc2LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2
LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwC8S5S7z
GBmGAsqILJKLiHkrqIRe+jStzTsqum+tRem37+uD0+NTCBkusOehxwNOMAdaprMC
74l5ovRnGm8EcOs2ysWQtECKV8erg0skqm165rr3lvGSsGDrap5u4y9VWddc1a+Z
VLwSatjkHc3cgx8qfuQR7/BL0q57QQG7M3VwnxB6/N4oJ8xuXcl37FC3EZSZ9UmN
usO1o76R+BBmPnubJ7pxZO/e8VLL/DbxeBjpitkkS4bdbOBEqyGKUx31Tb+HrFNw
kyAaoX+s5R4eDA2MPhdVzhyG9ERSDBp+dIhZqlzFhL2Kv7RJ/RJXXLUG0HtQx2O1
jcuHVe5mZZwoIA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:23 2025 by rpki-client