Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: VhHMQsImjBx+tti2Xq5hMP33+LBRn3ntiBlZJwgoigs=
Subject key identifier: AC:3F:0E:2C:17:B9:91:6E:5A:4E:67:B2:17:E5:61:DA:E4:0B:93:44
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 019A71131155A10FB9ECB27443A85353D2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 02F7
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: 4jedwJKrJgViNU81IC0lKoDwksNP0BJnqvqL2weU3p8=)
2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:11:55:a1:0f:b9:ec:b2:74:43:a8:53:53:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=ac3f0e2c17b9916e5a4e67b217e561dae40b9344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:c0:b5:cb:1b:d1:87:c0:ae:04:01:23:84:
a7:62:21:69:ea:ec:12:73:4a:6e:16:83:f9:44:2f:
d5:fa:00:22:2b:40:f2:bb:28:51:f7:f9:16:e4:67:
b5:e2:92:bc:dd:cd:de:24:9c:ca:b9:c7:bc:1c:95:
04:3a:26:08:07:f4:22:a6:65:64:19:b4:a4:ef:16:
67:18:66:99:20:46:8c:fc:e0:b4:81:85:6c:a5:62:
19:8b:30:3d:7c:e3:2e:84:e1:b6:43:73:23:51:07:
45:28:bc:50:f2:6b:c0:ca:13:7b:56:6c:c7:97:4e:
ec:be:e5:74:ee:39:99:39:c1:74:da:49:38:fb:fb:
83:cc:32:8f:74:48:c7:c9:83:d4:d6:f7:5d:b1:bf:
cf:ae:24:ba:6e:71:cd:74:76:31:06:41:52:04:67:
3c:c6:11:ad:67:76:d5:c1:dd:d2:a7:0e:77:73:ab:
a2:6f:ad:52:54:61:f8:73:d6:3f:c3:2f:aa:db:1b:
45:2b:79:16:0f:5f:bb:a5:39:f5:d9:37:3b:59:b4:
ae:9d:a0:55:cf:35:78:71:73:80:0b:cb:7a:b5:51:
b2:a1:14:31:5f:ba:6d:da:15:47:a0:74:1b:71:70:
7a:ab:33:e7:e7:4c:16:b9:71:63:16:59:ff:08:df:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:0E:2C:17:B9:91:6E:5A:4E:67:B2:17:E5:61:DA:E4:0B:93:44
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f4:69:1c:78:2c:e8:43:f0:9a:5c:d2:e8:01:77:86:b6:03:
e2:e7:e9:f0:2d:7e:23:3f:8b:e7:45:f5:ef:26:67:03:1e:3c:
cf:f0:c3:2a:28:1b:5a:32:e4:70:ff:23:1d:d5:e9:92:be:2c:
e3:4f:09:2a:ad:5d:2d:63:2c:2a:98:a2:d3:b9:b2:53:d6:50:
b1:f7:fa:24:b1:72:c6:ab:6a:a2:e2:da:25:4f:b8:4e:97:93:
ef:d4:65:d1:f4:df:cf:90:72:a2:66:4f:b5:3a:49:1a:af:6b:
41:01:fa:f9:74:69:5d:99:43:ff:21:3f:b1:ad:6a:f8:58:11:
5c:81:ab:b9:ff:2c:a7:a7:82:41:fb:78:18:84:c8:2f:13:a8:
4b:03:a4:ac:e0:c6:53:4d:31:a0:fa:de:3d:ff:7b:ab:84:87:
35:6e:27:c3:8e:55:b2:c9:19:09:00:45:56:5a:9b:52:c8:19:
3a:15:f3:cc:ee:5c:07:52:bf:b5:4f:76:86:c1:84:81:21:45:
4a:96:bc:29:8a:42:36:35:e2:6e:b1:c2:bd:aa:0c:1b:35:6f:
c1:39:f1:d7:43:f6:f2:6d:cd:3b:3a:8d:cb:ad:19:d8:b8:07:
78:bc:71:3e:fc:94:f7:55:3e:0f:8e:65:c1:ea:1a:e1:04:2d:
13:12:97:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExFVoQ+57LJ0Q6hTU9KkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh
MzI3OWIwHhcNMjUxMTExMDQwMTA2WhcNMjUxMTEyMDQwMTA2WjAzMTEwLwYDVQQD
EyhhYzNmMGUyYzE3Yjk5MTZlNWE0ZTY3YjIxN2U1NjFkYWU0MGI5MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FvAtcsb0YfArgQBI4SnYiFp6uwS
c0puFoP5RC/V+gAiK0DyuyhR9/kW5Ge14pK83c3eJJzKuce8HJUEOiYIB/QipmVk
GbSk7xZnGGaZIEaM/OC0gYVspWIZizA9fOMuhOG2Q3MjUQdFKLxQ8mvAyhN7VmzH
l07svuV07jmZOcF02kk4+/uDzDKPdEjHyYPU1vddsb/PriS6bnHNdHYxBkFSBGc8
xhGtZ3bVwd3Spw53c6uib61SVGH4c9Y/wy+q2xtFK3kWD1+7pTn12Tc7WbSunaBV
zzV4cXOAC8t6tVGyoRQxX7pt2hVHoHQbcXB6qzPn50wWuXFjFln/CN8onwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw/DiwXuZFuWk5nshflYdrkC5NEMB8GA1UdIwQY
MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et
Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh
LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvRpHHgs
6EPwmlzS6AF3hrYD4ufp8C1+Iz+L50X17yZnAx48z/DDKigbWjLkcP8jHdXpkr4s
408JKq1dLWMsKpii07myU9ZQsff6JLFyxqtqouLaJU+4TpeT79Rl0fTfz5ByomZP
tTpJGq9rQQH6+XRpXZlD/yE/sa1q+FgRXIGruf8sp6eCQft4GITILxOoSwOkrODG
U00xoPrePf97q4SHNW4nw45VsskZCQBFVlqbUsgZOhXzzO5cB1K/tU92hsGEgSFF
Spa8KYpCNjXibrHCvaoMGzVvwTnx10P28m3NOzqNy60Z2LgHeLxxPvyU91U+D45l
weoa4QQtExKXqg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:53 2025 by rpki-client