Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: UJTI/s3VWdltFo4oxNRVWFkheREKsTKGxBekQ8vUNSM=
Subject key identifier: 5F:EE:40:76:6C:53:73:6A:9E:25:E8:0B:6E:E0:57:5A:E1:20:C4:97
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 019A70A4D2A8B4C1E918C33D8369B8E62EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: ED
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: jxuq/iMrQyukaDwJUFsKCX0OHsn1PlYRU+lh3bb1ohg=)
2: tlGel_aESKh9Q5NcAJwydSlGFxg.roa (hash: +7ZMdrX7ZPoXi90BV30MCP++snK3AB9I77yJbSA2Q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d2:a8:b4:c1:e9:18:c3:3d:83:69:b8:e6:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=5fee40766c53736a9e25e80b6ee0575ae120c497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:e8:79:9d:9a:ca:88:3b:08:fa:a1:54:fa:
c8:b2:96:05:2b:ff:59:3c:03:ab:69:5b:58:5c:d4:
10:e3:0d:fa:30:bc:06:c0:a3:b1:ce:ad:52:a7:af:
37:4a:c5:f2:20:af:99:05:50:f7:44:98:e6:b8:cf:
ca:97:94:66:5b:55:ce:75:b8:b7:2d:cd:0a:70:e0:
1a:f1:65:53:ab:9e:13:14:c3:49:44:55:b1:55:e9:
81:b8:67:70:c4:da:8b:cb:9e:6e:55:2d:03:ef:f5:
66:56:00:3b:e0:48:f4:01:5d:27:44:09:a7:38:0d:
80:f2:fa:d7:16:af:9e:dc:6d:fc:35:32:86:1b:ab:
27:ae:f9:3b:e2:4d:6b:8b:c3:d9:8e:87:43:58:79:
8c:6d:e0:74:9e:b1:9f:3a:1e:ad:df:d8:8d:10:a3:
50:a7:05:be:cf:f5:9b:50:9f:d9:cb:10:9f:31:90:
84:32:0e:ff:17:1a:f1:a8:dd:58:8b:85:6f:b9:60:
65:36:3f:1d:8c:64:a4:ee:c4:30:b3:c8:00:59:bb:
7b:dd:89:43:a8:59:69:36:e0:7a:a0:d4:d6:82:f4:
a0:45:32:1a:e1:75:2a:0d:1f:b9:7b:3b:18:5d:9e:
59:84:a4:13:a5:48:ea:73:bc:39:41:5f:39:1a:a1:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:40:76:6C:53:73:6A:9E:25:E8:0B:6E:E0:57:5A:E1:20:C4:97
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:40:6d:02:e3:39:d2:1b:13:99:17:0a:9e:c2:86:07:a9:28:
0a:c2:7d:fc:fd:af:5b:85:7a:c9:39:7e:1a:d0:02:5c:a7:0c:
63:cc:4d:b5:e4:4a:1d:74:b3:4c:b0:48:cb:88:fc:63:28:54:
08:03:c5:00:c9:a7:3a:42:78:04:a6:cc:f9:fb:81:4f:c0:60:
fd:eb:45:bc:65:e3:94:0c:bf:4e:db:de:cc:f0:67:7e:5a:9c:
4a:b9:15:be:1c:4e:97:d1:88:de:a0:32:c1:c8:94:07:53:8c:
79:dd:55:2e:ef:30:84:58:25:3c:d8:b0:1c:46:29:6f:d3:1e:
54:eb:6c:1e:0d:ef:8b:3f:b8:11:e7:c3:92:4e:f4:03:39:af:
04:65:5d:16:22:91:2e:b0:88:eb:97:3c:dd:70:7a:27:73:39:
30:4c:25:5f:b9:14:14:87:b1:5e:06:b6:f6:3a:ad:2b:80:9b:
5d:90:77:4a:84:35:d9:10:fa:66:cd:70:01:af:fe:de:74:41:
fc:0b:16:87:80:46:30:39:47:fb:bf:30:1a:11:ae:89:01:96:
f7:26:c5:33:78:63:64:69:bc:57:18:b7:d1:20:6b:9f:07:d9:
a9:63:fd:5b:aa:3b:19:89:3f:25:86:8e:12:b6:c9:51:89:04:
e5:a7:53:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNKotMHpGMM9g2m45i7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODdhNGUyY2ZhOGVjZDAyYjUwNzMwMmIzYzZkYjE3ZjIx
MTc0MmYwHhcNMjUxMTExMDIwMDQxWhcNMjUxMTEyMDIwMDQxWjAzMTEwLwYDVQQD
Eyg1ZmVlNDA3NjZjNTM3MzZhOWUyNWU4MGI2ZWUwNTc1YWUxMjBjNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurzoeZ2ayog7CPqhVPrIspYFK/9Z
PAOraVtYXNQQ4w36MLwGwKOxzq1Sp683SsXyIK+ZBVD3RJjmuM/Kl5RmW1XOdbi3
Lc0KcOAa8WVTq54TFMNJRFWxVemBuGdwxNqLy55uVS0D7/VmVgA74Ej0AV0nRAmn
OA2A8vrXFq+e3G38NTKGG6snrvk74k1ri8PZjodDWHmMbeB0nrGfOh6t39iNEKNQ
pwW+z/WbUJ/ZyxCfMZCEMg7/FxrxqN1Yi4VvuWBlNj8djGSk7sQws8gAWbt73YlD
qFlpNuB6oNTWgvSgRTIa4XUqDR+5ezsYXZ5ZhKQTpUjqc7w5QV85GqEkfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/uQHZsU3NqniXoC27gV1rhIMSXMB8GA1UdIwQY
MBaAFAKHpOLPqOzQK1BzArPG2xfyEXQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAt
OWVmOTY3ZmM3N2Q4LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAtOWVmOTY3ZmM3N2Q4
LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUBtAuM5
0hsTmRcKnsKGB6koCsJ9/P2vW4V6yTl+GtACXKcMY8xNteRKHXSzTLBIy4j8YyhU
CAPFAMmnOkJ4BKbM+fuBT8Bg/etFvGXjlAy/TtvezPBnflqcSrkVvhxOl9GI3qAy
wciUB1OMed1VLu8whFglPNiwHEYpb9MeVOtsHg3viz+4EefDkk70AzmvBGVdFiKR
LrCI65c83XB6J3M5MEwlX7kUFIexXga29jqtK4CbXZB3SoQ12RD6Zs1wAa/+3nRB
/AsWh4BGMDlH+78wGhGuiQGW9ybFM3hjZGm8Vxi30SBrnwfZqWP9W6o7GYk/JYaO
ErbJUYkE5adTZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:56 2025 by rpki-client