Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: cj4M5xqf30ffzaKXRWwomjHv/s6fwFt4/3b0sZ+BaD4=
Subject key identifier: DF:E0:9A:0E:D9:32:11:4D:53:D8:22:25:08:1B:AE:C4:AB:1A:8A:40
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019A213FE7DB15971EA01F243EA595A864B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0219
Signing time: Sun 26 Oct 2025 16:00:27 +0000
Manifest this update: Sun 26 Oct 2025 16:00:27 +0000
Manifest next update: Mon 27 Oct 2025 16:00:27 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: oEfZTeUNP5JIuzYfS/XSw1YhnAXG3pgr8/cJ0cMOP6k=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:e7:db:15:97:1e:a0:1f:24:3e:a5:95:a8:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Oct 26 16:00:27 2025 GMT
Not After : Oct 27 16:00:27 2025 GMT
Subject: CN=dfe09a0ed932114d53d82225081baec4ab1a8a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:df:59:2a:b7:9a:32:92:a9:9e:ee:b9:71:
ad:b8:38:aa:7c:bc:d1:8a:03:07:79:64:95:a7:b9:
60:2d:80:c0:4c:86:f2:00:8c:1c:85:f3:e0:00:f1:
e6:3b:1d:7a:0d:5d:28:24:52:7d:d4:c5:1a:cc:78:
4e:41:a8:1b:65:97:55:65:bf:98:d1:5b:76:4a:3e:
83:26:95:a9:53:23:a9:51:3a:ce:c4:1e:29:6d:02:
27:3b:bc:3e:8b:e6:6c:9f:67:bd:3f:2d:da:cb:ee:
c7:70:1e:d3:bd:93:bd:e3:1d:55:0d:15:cb:45:77:
00:fa:9d:4f:9b:37:02:03:c0:03:49:d9:bf:2a:7b:
8c:29:a1:2c:94:a3:6f:c8:7b:99:c2:69:7f:3e:4d:
d4:d4:59:7f:0f:4a:93:87:a5:16:d3:02:b6:9b:b4:
4a:f3:ac:37:7a:11:05:d2:4a:77:5b:87:00:66:7f:
fe:0e:6c:e6:f0:a9:fa:08:47:b0:a8:1e:93:8a:45:
b4:00:6a:a3:b1:3d:da:85:9b:cf:4d:7d:87:09:00:
20:98:00:11:3d:88:4f:f2:ac:0e:8a:b0:5b:26:14:
3c:d4:92:fd:9b:b5:4f:a7:1d:e8:52:09:b5:86:ee:
ef:5f:9c:7b:dc:81:9f:be:d0:47:65:ec:db:1c:55:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:9A:0E:D9:32:11:4D:53:D8:22:25:08:1B:AE:C4:AB:1A:8A:40
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:20:ca:bb:e2:06:1e:81:cc:93:2f:3f:24:fd:f8:68:45:
8f:e4:21:26:57:9b:e6:08:7e:ca:5d:3d:77:13:c5:e9:ef:58:
54:82:04:12:73:b5:86:2b:86:82:65:4b:c9:42:a2:0e:32:6f:
5c:8c:bf:13:c3:6b:ac:bd:ca:f6:97:a4:11:34:1f:0e:8d:3e:
ae:96:a0:e8:d9:53:c3:54:3f:4e:46:a8:57:91:fe:1a:e1:c7:
c8:c3:6f:d1:8d:75:e1:ec:7a:94:b8:22:aa:0c:67:c3:43:98:
08:bc:1c:25:43:69:f6:45:f9:fc:f5:08:af:2f:9b:5e:f3:a6:
57:8f:b6:52:13:04:79:c2:74:5c:37:d4:2d:38:9b:4b:c5:c5:
b7:c6:5b:1c:a5:7f:12:05:da:c6:cb:b4:bc:2b:ef:b1:97:3a:
3d:4d:fe:2f:67:09:e0:28:4f:f6:97:63:c1:f7:47:6e:30:1a:
24:5d:0c:db:96:34:8b:3a:c0:b3:5b:08:b5:09:75:ea:28:f6:
7a:d2:64:40:36:f6:c6:af:a8:12:7d:13:3f:7e:fe:d8:39:3c:
34:2e:b1:04:7a:5c:cd:0b:52:2d:af:97:e0:75:a4:37:bc:15:
b5:36:7a:f8:5b:ec:e9:19:6a:9e:fc:1c:7f:3d:fc:8b:22:1c:
b8:35:3e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohP+fbFZceoB8kPqWVqGS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj
ZWYzMWYwHhcNMjUxMDI2MTYwMDI3WhcNMjUxMDI3MTYwMDI3WjAzMTEwLwYDVQQD
EyhkZmUwOWEwZWQ5MzIxMTRkNTNkODIyMjUwODFiYWVjNGFiMWE4YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnbfWSq3mjKSqZ7uuXGtuDiqfLzR
igMHeWSVp7lgLYDATIbyAIwchfPgAPHmOx16DV0oJFJ91MUazHhOQagbZZdVZb+Y
0Vt2Sj6DJpWpUyOpUTrOxB4pbQInO7w+i+Zsn2e9Py3ay+7HcB7TvZO94x1VDRXL
RXcA+p1PmzcCA8ADSdm/KnuMKaEslKNvyHuZwml/Pk3U1Fl/D0qTh6UW0wK2m7RK
86w3ehEF0kp3W4cAZn/+Dmzm8Kn6CEewqB6TikW0AGqjsT3ahZvPTX2HCQAgmAAR
PYhP8qwOirBbJhQ81JL9m7VPpx3oUgm1hu7vX5x73IGfvtBHZezbHFUEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/gmg7ZMhFNU9giJQgbrsSrGopAMB8GA1UdIwQY
MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt
ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3
LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj0gyrvi
Bh6BzJMvPyT9+GhFj+QhJleb5gh+yl09dxPF6e9YVIIEEnO1hiuGgmVLyUKiDjJv
XIy/E8NrrL3K9pekETQfDo0+rpag6NlTw1Q/TkaoV5H+GuHHyMNv0Y114ex6lLgi
qgxnw0OYCLwcJUNp9kX5/PUIry+bXvOmV4+2UhMEecJ0XDfULTibS8XFt8ZbHKV/
EgXaxsu0vCvvsZc6PU3+L2cJ4ChP9pdjwfdHbjAaJF0M25Y0izrAs1sItQl16ij2
etJkQDb2xq+oEn0TP37+2Dk8NC6xBHpczQtSLa+X4HWkN7wVtTZ6+Fvs6Rlqnvwc
fz38iyIcuDU+uQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 21:25:14 2025 by rpki-client