Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: dkwkrOyx6LrzLjM/RDJ2fmRDUXWVra6DHY4t8OFHA8o=
Subject key identifier: E8:8A:AA:B7:04:DA:2E:C7:40:B2:F8:9C:3B:FE:66:65:BB:37:0E:BE
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019A7149DCC72D170EDB727691E23C4195B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 05BB
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: hPTVudgM5CXESL1ugFBm7PxLtfhYV8yFQFLWcvwl0gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dc:c7:2d:17:0e:db:72:76:91:e2:3c:41:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=e88aaab704da2ec740b2f89c3bfe6665bb370ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:06:c8:af:74:11:56:97:6c:23:0a:fa:d9:
e1:5a:73:d3:e5:72:45:c4:10:45:42:f9:94:ae:fa:
0f:05:23:34:54:92:4d:2e:54:9d:75:d4:e4:ac:81:
d2:4f:ed:ba:01:0d:15:ba:6e:5b:9d:d9:19:b4:9f:
ad:4f:98:09:53:ce:1f:90:fa:bc:18:1a:d5:28:f7:
50:af:c7:d8:ae:b4:e6:4f:88:df:d8:d9:34:98:05:
06:4b:c0:3d:1c:d5:91:52:c4:11:ad:01:01:47:eb:
6b:8e:f0:09:7a:d6:98:71:fc:7a:25:16:6f:51:c5:
82:79:51:3f:c9:ad:24:d4:db:ad:20:03:b6:9b:5b:
08:23:33:de:b4:9d:2c:b9:f2:22:39:47:59:c2:c4:
86:2e:8e:ff:6b:4d:b7:d1:97:72:0c:9d:6a:a5:a8:
84:1b:47:fb:93:d1:77:8e:a1:14:72:96:79:60:e4:
39:64:2c:38:39:be:84:a6:80:0c:de:89:31:b8:ac:
51:14:48:6f:f1:f7:8a:46:58:a9:8f:bb:a3:c3:0c:
34:53:00:72:8e:10:70:be:43:df:cc:3c:f4:ac:97:
c5:70:89:61:f2:1f:fb:c5:9e:ac:47:78:fd:da:36:
81:4b:ad:10:be:84:da:49:2e:2a:4e:21:b4:75:71:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8A:AA:B7:04:DA:2E:C7:40:B2:F8:9C:3B:FE:66:65:BB:37:0E:BE
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:8b:b3:4c:09:ac:51:41:39:e2:69:8e:3f:64:4f:73:a9:
d7:a8:52:7b:1e:f9:83:98:3f:13:7d:c8:11:31:e0:df:a4:bb:
8b:c1:30:c1:da:55:9b:fd:18:56:1f:fb:f1:8b:6f:0c:ef:b3:
66:60:24:77:cc:ad:9b:c5:ac:5f:d4:9d:66:5a:7d:04:ee:5b:
e2:9a:88:d7:d5:7d:37:e1:e2:04:c8:24:7a:d4:85:a2:a2:40:
4c:64:df:7f:dc:1e:1e:9f:ea:a7:01:31:2a:35:85:b7:9d:ff:
03:77:87:c8:4b:ae:f5:08:59:40:71:1f:9d:57:b0:3c:74:41:
2d:92:5d:c8:89:c5:cc:e8:55:46:2f:63:61:24:13:62:fd:7f:
ed:d6:f4:67:32:8c:e4:96:b3:99:81:85:61:94:e6:78:c0:28:
d0:db:1e:52:83:7f:c4:29:ba:0d:44:46:b7:bb:34:30:bf:d5:
3e:67:cd:2a:a6:ed:1b:dd:87:7c:93:85:21:0b:a4:80:b9:61:
82:ce:23:55:0f:c3:1a:2c:fd:f8:42:a5:77:30:7d:59:92:bb:
de:b4:69:57:af:e5:99:95:42:66:35:64:07:03:20:33:53:70:
88:be:48:74:1f:4c:68:d2:57:b7:b2:c6:0d:12:fb:90:aa:86:
1c:64:da:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSdzHLRcO23J2keI8QZWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTY5YWE2ZWU3NGUzMGVmZGI4MTliOWNiMWJmMjFlNzg2
ZTZmYTMwHhcNMjUxMTExMDUwMDU3WhcNMjUxMTEyMDUwMDU3WjAzMTEwLwYDVQQD
EyhlODhhYWFiNzA0ZGEyZWM3NDBiMmY4OWMzYmZlNjY2NWJiMzcwZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjcGyK90EVaXbCMK+tnhWnPT5XJF
xBBFQvmUrvoPBSM0VJJNLlSdddTkrIHST+26AQ0Vum5bndkZtJ+tT5gJU84fkPq8
GBrVKPdQr8fYrrTmT4jf2Nk0mAUGS8A9HNWRUsQRrQEBR+trjvAJetaYcfx6JRZv
UcWCeVE/ya0k1NutIAO2m1sIIzPetJ0sufIiOUdZwsSGLo7/a0230ZdyDJ1qpaiE
G0f7k9F3jqEUcpZ5YOQ5ZCw4Ob6EpoAM3okxuKxRFEhv8feKRlipj7ujwww0UwBy
jhBwvkPfzDz0rJfFcIlh8h/7xZ6sR3j92jaBS60QvoTaSS4qTiG0dXHu4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiKqrcE2i7HQLL4nDv+ZmW7Nw6+MB8GA1UdIwQY
MBaAFAPmmqbudOMO/bgZucsb8h54bm+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEt
MDVhODNlZDcwYmMzLzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEtMDVhODNlZDcwYmMz
LzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7uLs0wJ
rFFBOeJpjj9kT3Op16hSex75g5g/E33IETHg36S7i8EwwdpVm/0YVh/78YtvDO+z
ZmAkd8ytm8WsX9SdZlp9BO5b4pqI19V9N+HiBMgketSFoqJATGTff9weHp/qpwEx
KjWFt53/A3eHyEuu9QhZQHEfnVewPHRBLZJdyInFzOhVRi9jYSQTYv1/7db0ZzKM
5JazmYGFYZTmeMAo0NseUoN/xCm6DURGt7s0ML/VPmfNKqbtG92HfJOFIQukgLlh
gs4jVQ/DGiz9+EKldzB9WZK73rRpV6/lmZVCZjVkBwMgM1NwiL5IdB9MaNJXt7LG
DRL7kKqGHGTanA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client