Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File: AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier: /2h/bEmrLG9/2axqNCu+5TnvybVC+tcCC6NDSj9t9FY=
Subject key identifier: A7:AD:FA:1B:A8:D1:49:00:22:C9:FE:84:54:90:D7:6C:97:F6:64:25
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 019A71EE6F110297368BD731393070A5A066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number: 15B5
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: vcYNy6bNNWvMG1tEGPjehepQw0VY9LtDfX0GqiPQYT0=)
2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6f:11:02:97:36:8b:d7:31:39:30:70:a5:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=a7adfa1ba8d1490022c9fe845490d76c97f66425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:1d:c5:e8:cf:d4:72:f9:5e:a4:58:9b:ba:
fe:ad:d6:5c:68:9d:87:be:15:68:b9:b9:2f:81:7e:
ee:a1:49:75:06:45:9c:1c:a4:07:3b:54:f9:80:72:
46:65:93:6f:c3:6e:1a:20:e6:30:a0:c9:52:28:2e:
40:a9:86:60:d4:45:07:32:54:12:55:3f:8e:7e:56:
ac:9d:5e:34:ae:ee:a6:9e:97:4a:16:04:3d:72:13:
fd:37:e6:a6:7a:bb:47:6e:5f:e1:77:46:19:ef:3a:
9e:3c:76:9f:3b:3b:fd:e3:4a:3d:31:dd:a0:36:53:
9e:aa:58:4c:05:b6:fb:16:3a:68:3c:2f:1e:84:32:
ee:10:93:af:dc:5a:54:cf:32:d4:f8:da:4c:9d:58:
a7:ed:b8:c2:8b:b6:47:ec:81:5a:53:3e:15:db:b3:
8b:a0:88:7a:27:3e:60:6d:78:ae:95:ed:ae:59:fe:
4c:25:68:08:2b:dc:9c:e5:2d:6d:39:1a:47:b5:86:
87:2e:17:df:4e:bd:c9:22:6c:c5:7d:b3:9f:a8:68:
c2:da:4b:b8:f4:08:66:45:1e:71:04:57:3a:c1:7d:
ed:cf:7b:54:87:b7:5d:78:16:3d:ec:fe:ab:fe:b2:
14:d8:28:22:d0:97:73:bb:49:c4:63:e8:70:69:b2:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:FA:1B:A8:D1:49:00:22:C9:FE:84:54:90:D7:6C:97:F6:64:25
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:f3:0b:2a:6d:1d:b4:d2:91:78:d6:e6:93:9b:a0:0a:d3:
61:9b:93:7c:02:09:b8:47:c0:1c:08:1e:8d:12:11:e3:1b:2b:
eb:f6:84:94:27:2e:99:35:6b:69:1d:1a:e1:88:e6:5e:29:63:
57:41:65:9a:ce:01:16:98:a1:16:7a:3f:f7:9e:ee:29:fc:92:
7e:33:79:08:37:49:22:89:2c:b9:90:09:d6:5e:7b:aa:2d:05:
77:17:74:f9:01:ca:7b:8c:58:4e:4d:0f:98:88:bf:5d:82:dd:
e5:df:b1:07:74:c2:a0:b0:a4:df:94:02:3a:27:31:f4:ca:e5:
d3:72:3a:35:11:e1:8c:2a:b5:c0:d1:98:64:f5:2f:1f:61:d3:
e6:03:22:f3:b2:77:69:de:15:d6:35:f3:66:e6:5a:9e:0e:b5:
ce:b2:37:f1:41:a2:f1:79:0a:a7:a0:91:77:9b:e3:70:83:73:
b5:d4:26:db:25:5f:07:3a:26:c5:a9:af:5d:90:f9:ee:86:9d:
81:dc:be:6c:4a:34:cf:0c:51:a1:b7:38:2c:4d:b1:c1:3d:64:
7d:29:d3:c1:02:9d:fb:ab:7b:60:fa:3d:c4:aa:bc:03:25:bb:
b5:8f:3f:59:99:a4:c4:0c:5e:59:bb:ee:5b:69:10:b7:4e:08:
22:a4:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:40 2025 by rpki-client