Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
File: aaX4To643Eyfm9j9rug-yK9uAl4.mft (raw, json)
Hash identifier: bzvw1t0Wgwv0oZuLwbKF/nPYtkQLFY+rDt7+LACzMlg=
Subject key identifier: EC:2B:83:21:61:B0:87:99:9D:AB:63:0D:B7:8E:AE:2A:62:D4:90:26
Authority key identifier: 69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
Certificate issuer: /CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Certificate serial: 019A71EE972C38F0916DD1AAB1E3BFCD3B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: aaX4To643Eyfm9j9rug-yK9uAl4.crl (hash: SMUtnqe3hDsTTkzMGxMBJZThhNVgCL5mmY681JECIC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:97:2c:38:f0:91:6d:d1:aa:b1:e3:bf:cd:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=ec2b832161b087999dab630db78eae2a62d49026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:9b:b9:13:4a:b0:6d:a4:69:66:3f:a6:94:
fe:b4:94:e3:01:80:97:a8:70:93:a4:4a:a1:c7:48:
37:56:b2:df:19:0c:ad:5b:94:9f:e0:97:96:75:e2:
85:47:8a:c9:d0:67:dd:ae:59:1d:2b:08:f6:4e:3f:
7f:4a:bd:e6:2f:a2:a5:cb:bd:c8:59:a1:27:37:a7:
91:24:c8:5f:d1:6a:0f:05:e8:dc:f2:90:9f:da:ef:
9c:76:43:e3:d7:9d:b7:b3:7f:91:5d:d1:82:23:cc:
d0:23:67:83:57:13:bb:ba:29:61:e2:0a:f0:e9:8b:
30:0b:54:8b:8b:a3:aa:3e:84:f5:58:10:c4:06:7b:
73:83:0b:84:6a:45:7e:7e:c8:7d:af:38:20:67:dc:
74:fd:48:f6:02:14:cd:aa:7a:29:16:cc:7c:90:01:
88:a5:b9:0c:00:35:53:e7:c9:7f:e5:59:be:96:a8:
9d:fc:b5:8b:37:f2:f0:01:37:9a:1b:2d:74:0d:73:
a9:89:22:47:2e:46:40:0d:81:77:02:b6:d5:5b:4e:
83:e1:3b:1a:51:d5:dd:9d:7a:29:94:6e:5e:99:8c:
ec:25:5e:7e:19:46:a1:70:bf:82:93:41:fa:9a:ed:
bd:ce:1f:8e:e2:97:bb:03:32:99:d0:a2:a2:ad:d7:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:83:21:61:B0:87:99:9D:AB:63:0D:B7:8E:AE:2A:62:D4:90:26
X509v3 Authority Key Identifier:
keyid:69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f5:f9:75:e7:73:2a:f0:d6:76:69:68:9c:b9:df:8e:b6:f4:
8f:09:72:78:9e:3d:3f:16:4b:eb:31:73:2e:b6:3d:ee:ac:03:
60:de:5d:58:d8:8f:d8:06:a5:9e:f4:93:23:3c:27:35:de:b4:
68:0d:b8:b7:36:cb:4c:d4:81:73:8a:2e:a5:31:b9:c5:93:9d:
8e:7f:a4:3a:7e:5b:7c:1c:32:de:60:22:74:7f:60:53:61:4f:
23:f1:80:e2:59:1c:52:8f:56:73:e3:1a:51:81:de:77:b0:fb:
9f:24:d2:a3:c0:09:1f:91:8e:47:c8:d8:d7:ed:c1:d4:e6:ca:
59:34:95:aa:e9:b1:63:70:4f:05:78:17:85:e7:bd:a0:eb:34:
fe:99:3e:62:40:d8:1e:62:36:4b:2e:3b:42:6c:16:47:68:80:
82:38:e3:a9:25:88:44:59:d0:44:a4:00:89:72:86:9a:7a:3f:
35:e9:39:f8:d6:45:0f:11:0a:f3:46:7b:b5:e7:ea:1a:cb:d7:
53:98:b8:b3:ed:84:cf:80:d9:79:27:7f:a2:d7:6f:26:9d:5b:
9c:7a:06:82:39:a2:82:40:bf:da:8a:42:c7:a1:1a:ea:c0:31:
4e:92:c3:c7:e5:67:49:f2:15:5c:1b:1b:9c:9b:89:19:6b:d9:
6f:d5:38:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pcsOPCRbdGqseO/zTtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTVmODRlOGViOGRjNGM5ZjliZDhmZGFlZTgzZWM4YWY2
ZTAyNWUwHhcNMjUxMTExMDgwMDUyWhcNMjUxMTEyMDgwMDUyWjAzMTEwLwYDVQQD
EyhlYzJiODMyMTYxYjA4Nzk5OWRhYjYzMGRiNzhlYWUyYTYyZDQ5MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ6buRNKsG2kaWY/ppT+tJTjAYCX
qHCTpEqhx0g3VrLfGQytW5Sf4JeWdeKFR4rJ0GfdrlkdKwj2Tj9/Sr3mL6Kly73I
WaEnN6eRJMhf0WoPBejc8pCf2u+cdkPj1523s3+RXdGCI8zQI2eDVxO7uilh4grw
6YswC1SLi6OqPoT1WBDEBntzgwuEakV+fsh9rzggZ9x0/Uj2AhTNqnopFsx8kAGI
pbkMADVT58l/5Vm+lqid/LWLN/LwATeaGy10DXOpiSJHLkZADYF3ArbVW06D4Tsa
UdXdnXoplG5emYzsJV5+GUahcL+Ck0H6mu29zh+O4pe7AzKZ0KKirdcFpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwrgyFhsIeZnatjDbeOripi1JAmMB8GA1UdIwQY
MBaAFGml+E6OuNxMn5vY/a7oPsivbgJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQt
YWQ1ZTZiNzg1N2MwLzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQtYWQ1ZTZiNzg1N2Mw
LzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvX5dedz
KvDWdmlonLnfjrb0jwlyeJ49PxZL6zFzLrY97qwDYN5dWNiP2AalnvSTIzwnNd60
aA24tzbLTNSBc4oupTG5xZOdjn+kOn5bfBwy3mAidH9gU2FPI/GA4lkcUo9Wc+Ma
UYHed7D7nyTSo8AJH5GOR8jY1+3B1ObKWTSVqumxY3BPBXgXhee9oOs0/pk+YkDY
HmI2Sy47QmwWR2iAgjjjqSWIRFnQRKQAiXKGmno/Nek5+NZFDxEK80Z7tefqGsvX
U5i4s+2Ez4DZeSd/otdvJp1bnHoGgjmigkC/2opCx6Ea6sAxTpLDx+VnSfIVXBsb
nJuJGWvZb9U4yQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:34 2025 by rpki-client