Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
File: AyuMVE4N68_W11VNFZXwRMIFB4M.mft (raw, json)
Hash identifier: 6DHGljdzXJB1IklGDhOA0t9oZWdvGtg7ACcM7N7vZwI=
Subject key identifier: ED:FE:6D:57:18:A2:5B:77:A6:1E:BF:4F:CC:9E:E5:1A:98:21:CE:69
Authority key identifier: 03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
Certificate issuer: /CN=032b8c544e0debcfd6d7554d1595f044c2050783
Certificate serial: 019A72259D15B4414AABDB3F10A11873E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: 1-9t0f5pWOLIrwK_cL4cCfcUs--g.roa (hash: e1mtbJ2ht6De/xDwLJN90SOW2t+nYcE6pdn+FIjcDXQ=)
2: AyuMVE4N68_W11VNFZXwRMIFB4M.crl (hash: bKmCZ48qbYxM0iqe0gSSjKyy/hrkP6jN51Y8HTrQsm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:15:b4:41:4a:ab:db:3f:10:a1:18:73:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b8c544e0debcfd6d7554d1595f044c2050783
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=edfe6d5718a25b77a61ebf4fcc9ee51a9821ce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:f5:ac:a4:29:36:2d:a5:7e:a3:3e:fa:33:
7e:9d:f6:29:73:de:a1:35:84:c5:b8:01:0b:68:69:
c9:95:8a:3e:f5:88:cc:cf:3e:d3:a0:82:1f:20:b4:
7c:d1:63:59:9a:62:bc:5c:ad:bf:94:ff:4b:c1:3f:
ad:01:37:39:30:32:8e:b1:81:00:92:42:cb:a1:ed:
b2:e7:ca:b6:d6:04:d6:ce:82:c0:81:fd:c5:6e:f5:
43:2f:58:c7:2e:ec:ee:c6:a4:be:24:77:1d:bc:dd:
7a:78:59:38:d6:ff:b7:73:24:69:b8:99:e5:1e:52:
4a:ce:66:9d:03:8e:f2:ce:94:f0:ef:1e:2c:b5:89:
84:c7:22:53:79:0a:8e:69:5e:01:31:d1:62:1f:3a:
79:de:29:e8:bd:d6:d5:92:34:26:68:a7:80:05:87:
02:4c:d2:e1:02:d6:53:f6:7d:18:7c:23:ed:e2:4f:
39:da:0b:91:ce:c7:f2:89:59:c9:9a:f3:cb:06:1c:
94:56:57:7f:97:be:e8:42:c8:23:4b:75:33:1f:8a:
72:91:56:8b:c4:61:f7:6e:9c:58:d9:87:f1:05:9b:
70:c2:b5:ff:84:34:02:7c:a0:bd:98:eb:bf:52:e6:
b0:b2:34:99:2c:c7:20:a5:ee:81:56:68:3d:26:a8:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:6D:57:18:A2:5B:77:A6:1E:BF:4F:CC:9E:E5:1A:98:21:CE:69
X509v3 Authority Key Identifier:
keyid:03:2B:8C:54:4E:0D:EB:CF:D6:D7:55:4D:15:95:F0:44:C2:05:07:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyuMVE4N68_W11VNFZXwRMIFB4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/054d47-a112-48c6-b4aa-fb1942b5aff4/1/AyuMVE4N68_W11VNFZXwRMIFB4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:04:d4:3c:c1:fe:2f:c3:9d:f0:2e:7d:d8:e6:00:83:e0:
a6:06:06:08:24:5e:9c:50:f4:fa:84:0f:90:e4:f7:06:f6:fb:
a6:a1:56:b5:21:b0:a5:a4:52:90:b4:47:1f:ec:2e:86:8a:7b:
e4:4d:e7:71:33:a9:9a:f3:a8:dd:72:fe:ca:5c:fe:b7:c5:91:
91:51:56:cc:3c:90:8d:6d:63:f8:93:1d:ca:21:c1:5e:6c:98:
e4:e9:8b:ab:46:e3:d1:c2:2e:b5:db:48:27:fa:14:39:d0:9f:
ad:91:b7:8a:16:50:44:8c:09:cb:12:1b:27:c5:d9:03:3d:4f:
c1:ef:ae:80:65:ef:36:cc:c5:9b:38:f5:78:65:48:ad:1c:48:
e0:42:e7:f5:c5:38:58:fc:05:f8:ec:5d:d9:2e:5a:68:e4:e0:
f6:e5:58:08:e0:13:bd:77:bf:0c:72:af:77:ca:2e:7b:95:d4:
c7:d8:bc:44:2b:dc:be:53:f2:d8:eb:12:7a:d0:f5:b8:a0:47:
c5:51:8d:61:a6:5f:d1:a1:f7:75:21:41:e0:18:df:0b:75:c6:
c3:9e:45:52:45:93:c0:81:a7:4a:64:d9:a4:36:a3:2d:f4:eb:
0a:54:88:71:65:5c:74:4c:11:fb:08:c6:f2:07:5f:2b:8c:71:
14:78:55:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZ0VtEFKq9s/EKEYc+MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmI4YzU0NGUwZGViY2ZkNmQ3NTU0ZDE1OTVmMDQ0YzIw
NTA3ODMwHhcNMjUxMTExMDkwMDU4WhcNMjUxMTEyMDkwMDU4WjAzMTEwLwYDVQQD
EyhlZGZlNmQ1NzE4YTI1Yjc3YTYxZWJmNGZjYzllZTUxYTk4MjFjZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD71rKQpNi2lfqM++jN+nfYpc96h
NYTFuAELaGnJlYo+9YjMzz7ToIIfILR80WNZmmK8XK2/lP9LwT+tATc5MDKOsYEA
kkLLoe2y58q21gTWzoLAgf3FbvVDL1jHLuzuxqS+JHcdvN16eFk41v+3cyRpuJnl
HlJKzmadA47yzpTw7x4stYmExyJTeQqOaV4BMdFiHzp53inovdbVkjQmaKeABYcC
TNLhAtZT9n0YfCPt4k852guRzsfyiVnJmvPLBhyUVld/l77oQsgjS3UzH4pykVaL
xGH3bpxY2YfxBZtwwrX/hDQCfKC9mOu/UuawsjSZLMcgpe6BVmg9JqhfeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3+bVcYolt3ph6/T8ye5RqYIc5pMB8GA1UdIwQY
MBaAFAMrjFRODevP1tdVTRWV8ETCBQeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEt
ZmIxOTQyYjVhZmY0LzEvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wNTRkNDctYTExMi00OGM2LWI0YWEtZmIxOTQyYjVhZmY0
LzEvQXl1TVZFNE42OF9XMTFWTkZaWHdSTUlGQjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ4E1DzB
/i/DnfAufdjmAIPgpgYGCCRenFD0+oQPkOT3Bvb7pqFWtSGwpaRSkLRHH+wuhop7
5E3ncTOpmvOo3XL+ylz+t8WRkVFWzDyQjW1j+JMdyiHBXmyY5OmLq0bj0cIutdtI
J/oUOdCfrZG3ihZQRIwJyxIbJ8XZAz1Pwe+ugGXvNszFmzj1eGVIrRxI4ELn9cU4
WPwF+Oxd2S5aaOTg9uVYCOATvXe/DHKvd8oue5XUx9i8RCvcvlPy2OsSetD1uKBH
xVGNYaZf0aH3dSFB4BjfC3XGw55FUkWTwIGnSmTZpDajLfTrClSIcWVcdEwR+wjG
8gdfK4xxFHhVAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:42 2025 by rpki-client