Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: wYRFbmUHl6MowUEvLGpD8bLXOVHyxuVHxkHnlzE7E0w=
Subject key identifier: D5:04:62:F2:80:36:B5:A2:A3:2C:02:5F:52:BB:A6:74:C3:23:39:62
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 0199239F6FE6736B3819E399B4AC31546D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 12C2
Signing time: Sun 07 Sep 2025 10:01:15 +0000
Manifest this update: Sun 07 Sep 2025 10:01:15 +0000
Manifest next update: Mon 08 Sep 2025 10:01:15 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: ma/0OTyB8YBVIxLOeoolDZrIct34nRfX7p8CIoS7m4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:6f:e6:73:6b:38:19:e3:99:b4:ac:31:54:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Sep 7 10:01:15 2025 GMT
Not After : Sep 8 10:01:15 2025 GMT
Subject: CN=d50462f28036b5a2a32c025f52bba674c3233962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:8e:57:7c:96:09:26:c5:f2:1d:09:f3:36:
60:45:46:1d:ae:51:5e:1b:d0:d2:1e:97:ee:2e:9f:
26:1a:2d:cc:9f:25:9c:3a:ec:bb:90:39:66:b3:cb:
da:5b:95:e5:0c:97:09:94:6c:d2:03:a1:d2:10:ca:
be:5c:ee:ab:7e:f8:65:c2:c7:f9:67:64:7b:1b:73:
51:28:9f:cf:29:8f:15:0a:a3:76:93:9d:c9:4f:ab:
bb:88:f9:b1:63:50:0d:ef:5b:71:7f:4d:ad:bb:45:
50:75:26:5b:be:d0:ce:c0:07:bb:63:1f:a1:cf:01:
96:70:5a:0e:90:e0:37:2a:8c:49:c5:f1:de:93:dc:
fc:18:03:6f:82:14:43:f0:c7:8c:1f:39:a3:99:40:
9d:a9:80:f4:8a:8f:43:fd:41:bd:df:7f:a3:d7:e4:
e8:f0:17:e8:d6:be:8c:f9:b7:a2:79:3c:cd:29:48:
86:07:21:25:42:ce:6e:03:58:2a:98:4b:c8:b7:78:
36:92:ec:53:31:42:e0:52:8f:ce:cf:fb:30:72:ca:
e7:a1:67:b9:ee:af:db:e4:84:be:5f:53:93:2e:59:
5e:58:fc:c9:4d:89:6c:0f:fb:55:58:57:01:47:b4:
e8:c2:b4:ac:1f:e8:c6:14:93:4d:f1:90:48:92:8d:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:62:F2:80:36:B5:A2:A3:2C:02:5F:52:BB:A6:74:C3:23:39:62
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:33:f4:60:94:63:3c:60:a0:6c:47:94:c3:c1:0d:e5:24:
78:82:8d:cb:7c:e7:4f:d1:3d:19:50:16:49:ff:ae:e3:7e:35:
ff:71:71:04:e0:6b:18:28:91:04:b3:ab:87:ab:ce:8a:45:3c:
3a:17:e7:43:44:a6:85:17:41:2d:77:1e:7c:e8:18:1e:41:80:
94:df:36:ae:aa:34:2e:e7:a1:d9:87:60:3d:a2:75:ba:24:15:
72:2f:d6:e1:cb:00:36:82:99:22:6a:2d:2e:ff:9d:3d:63:33:
54:f3:06:cd:7c:6b:cc:49:68:18:08:15:5b:10:0c:bb:b3:63:
41:11:bf:0e:fc:6d:55:bb:9b:af:5f:cf:df:d8:46:00:3a:85:
84:da:c7:7d:de:b5:d4:29:64:74:67:cb:e4:90:0d:02:f6:bd:
87:64:1e:7d:43:1c:48:3a:3b:4b:7a:40:de:a9:d2:f8:ca:d0:
6e:e1:78:95:5b:9e:96:45:ab:51:22:f5:53:a5:03:89:dd:07:
b8:83:9e:9a:a9:e4:b7:58:e7:5d:51:33:77:c5:ec:a4:84:d9:
3f:71:f8:32:98:34:af:01:90:f0:73:6c:a5:fc:96:64:a0:9b:
2b:b3:af:99:83:97:8c:e0:16:0c:d0:78:db:f9:db:fd:2e:f4:
4a:22:ad:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn2/mc2s4GeOZtKwxVG0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2
YTAxZjMwHhcNMjUwOTA3MTAwMTE1WhcNMjUwOTA4MTAwMTE1WjAzMTEwLwYDVQQD
EyhkNTA0NjJmMjgwMzZiNWEyYTMyYzAyNWY1MmJiYTY3NGMzMjMzOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/aOV3yWCSbF8h0J8zZgRUYdrlFe
G9DSHpfuLp8mGi3MnyWcOuy7kDlms8vaW5XlDJcJlGzSA6HSEMq+XO6rfvhlwsf5
Z2R7G3NRKJ/PKY8VCqN2k53JT6u7iPmxY1AN71txf02tu0VQdSZbvtDOwAe7Yx+h
zwGWcFoOkOA3KoxJxfHek9z8GANvghRD8MeMHzmjmUCdqYD0io9D/UG933+j1+To
8Bfo1r6M+beieTzNKUiGByElQs5uA1gqmEvIt3g2kuxTMULgUo/Oz/swcsrnoWe5
7q/b5IS+X1OTLlleWPzJTYlsD/tVWFcBR7TowrSsH+jGFJNN8ZBIko0NCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUEYvKANrWioywCX1K7pnTDIzliMB8GA1UdIwQY
MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt
OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0
LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic4z9GCU
YzxgoGxHlMPBDeUkeIKNy3znT9E9GVAWSf+u4341/3FxBOBrGCiRBLOrh6vOikU8
OhfnQ0SmhRdBLXcefOgYHkGAlN82rqo0Lueh2YdgPaJ1uiQVci/W4csANoKZImot
Lv+dPWMzVPMGzXxrzEloGAgVWxAMu7NjQRG/DvxtVbubr1/P39hGADqFhNrHfd61
1ClkdGfL5JANAva9h2QefUMcSDo7S3pA3qnS+MrQbuF4lVuelkWrUSL1U6UDid0H
uIOemqnkt1jnXVEzd8XspITZP3H4Mpg0rwGQ8HNspfyWZKCbK7OvmYOXjOAWDNB4
2/nb/S70SiKt1w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:46 2025 by rpki-client