
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: 4wAsHTmZZoYmHrJg0Hht+2cPg2NAhkCbqs5Egp1T97o=
Subject key identifier: 18:41:0C:AA:86:46:C0:FA:09:CF:08:2C:9F:F7:07:45:B4:65:94:87
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 019924444B458658520FC3A2FF49575FF8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0D52
Signing time: Sun 07 Sep 2025 13:01:19 +0000
Manifest this update: Sun 07 Sep 2025 13:01:19 +0000
Manifest next update: Mon 08 Sep 2025 13:01:19 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: /CP23asEu+423M9uVABDTD1s8kMjJjGrQi8srQTqLew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:4b:45:86:58:52:0f:c3:a2:ff:49:57:5f:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Sep 7 13:01:19 2025 GMT
Not After : Sep 8 13:01:19 2025 GMT
Subject: CN=18410caa8646c0fa09cf082c9ff70745b4659487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:02:2d:5a:dd:96:53:e6:22:5e:65:4a:80:
4e:f1:9e:28:6e:63:e0:ac:aa:e3:82:85:51:19:ea:
a0:cd:7d:6e:92:27:c9:9a:38:c0:63:24:12:de:76:
82:2c:82:8a:3f:3d:87:1e:a2:66:25:9f:1e:51:73:
c0:11:26:46:ab:ec:47:87:89:2f:ed:27:40:58:bf:
d6:55:01:cd:b5:56:92:32:c9:1a:50:37:ab:8a:a6:
ec:b4:64:97:a4:18:19:5b:06:51:f5:c6:91:df:f8:
61:d1:17:f4:49:9f:01:5d:6d:51:ec:db:05:74:6c:
ea:d8:52:53:36:12:c2:5f:8b:4d:9b:1a:7f:59:fe:
c9:ba:ed:eb:d8:d9:5c:5f:7e:bf:c3:85:40:f0:e4:
71:7e:55:1b:12:cb:3d:4b:67:99:00:1d:8e:0d:4c:
ef:fa:47:3b:06:29:42:e1:bd:cb:e1:c0:22:34:d5:
1b:94:1b:da:42:0b:84:3c:7b:8b:25:00:15:40:f6:
f5:d4:cb:9d:e4:69:65:63:da:e0:9f:9b:82:cb:13:
60:5b:b7:03:fd:d1:da:b2:ac:14:81:39:d5:b2:33:
4e:84:bd:cc:a9:eb:d6:3b:84:81:c3:c9:5d:44:05:
7b:6e:15:49:70:d7:e7:07:da:78:73:17:ff:db:e8:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:0C:AA:86:46:C0:FA:09:CF:08:2C:9F:F7:07:45:B4:65:94:87
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3f:75:cd:8c:fc:05:6a:2c:95:36:c9:37:74:4c:dc:23:f6:
1b:41:38:8a:96:d9:78:0d:ef:99:ae:e7:3c:bf:86:60:d5:5e:
b9:56:15:34:d3:05:17:a4:3d:8a:18:a0:3a:2a:80:c0:6c:90:
27:13:3e:17:1d:d7:97:cc:17:27:a1:0d:f9:fa:d8:ee:8d:ff:
72:af:ed:d5:15:61:94:7b:d2:21:fb:ca:6a:49:3e:a8:0f:47:
e1:f7:52:a3:fc:c2:94:26:9a:a2:09:d2:f9:e3:2c:3d:eb:2f:
99:ff:c1:a9:74:09:37:de:8c:b9:6e:4e:05:b5:d1:7a:bb:cf:
ac:de:17:53:84:29:ce:97:5c:27:17:a3:c8:33:d3:0e:0c:67:
e5:df:14:58:9d:48:f8:6d:b1:37:ea:82:d7:1f:5c:41:47:30:
64:e1:e8:c8:f1:a8:36:fc:43:a2:b8:d2:45:14:2a:a1:09:a1:
09:11:7a:b5:f6:5a:9d:7b:c4:94:e2:f0:16:dd:62:de:9e:2b:
8f:e6:f6:bf:bb:2a:78:44:1f:51:93:3c:7d:20:44:e8:a1:b5:
51:42:00:40:84:5c:4f:67:ef:71:93:1b:b0:5f:85:18:d3:69:
d7:06:70:38:62:3e:e7:a2:cf:71:13:26:b4:a1:9b:47:30:ce:
6f:e4:92:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkREtFhlhSD8Oi/0lXX/i3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjUwMTZmZjg5ZGEwYzhjYWZlZTIxNWVmNjI0MWMzMGJj
OTMwMDMwHhcNMjUwOTA3MTMwMTE5WhcNMjUwOTA4MTMwMTE5WjAzMTEwLwYDVQQD
EygxODQxMGNhYTg2NDZjMGZhMDljZjA4MmM5ZmY3MDc0NWI0NjU5NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP4CLVrdllPmIl5lSoBO8Z4obmPg
rKrjgoVRGeqgzX1ukifJmjjAYyQS3naCLIKKPz2HHqJmJZ8eUXPAESZGq+xHh4kv
7SdAWL/WVQHNtVaSMskaUDeriqbstGSXpBgZWwZR9caR3/hh0Rf0SZ8BXW1R7NsF
dGzq2FJTNhLCX4tNmxp/Wf7Juu3r2NlcX36/w4VA8ORxflUbEss9S2eZAB2ODUzv
+kc7BilC4b3L4cAiNNUblBvaQguEPHuLJQAVQPb11Mud5GllY9rgn5uCyxNgW7cD
/dHasqwUgTnVsjNOhL3MqevWO4SBw8ldRAV7bhVJcNfnB9p4cxf/2+ivYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhBDKqGRsD6Cc8ILJ/3B0W0ZZSHMB8GA1UdIwQY
MBaAFGr1AW/4naDIyv7iFe9iQcMLyTADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYt
ZGYwYzc0ZDU0NWQyLzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYtZGYwYzc0ZDU0NWQy
LzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz91zYz8
BWoslTbJN3RM3CP2G0E4ipbZeA3vma7nPL+GYNVeuVYVNNMFF6Q9ihigOiqAwGyQ
JxM+Fx3Xl8wXJ6EN+frY7o3/cq/t1RVhlHvSIfvKakk+qA9H4fdSo/zClCaaognS
+eMsPesvmf/BqXQJN96MuW5OBbXRervPrN4XU4QpzpdcJxejyDPTDgxn5d8UWJ1I
+G2xN+qC1x9cQUcwZOHoyPGoNvxDorjSRRQqoQmhCRF6tfZanXvElOLwFt1i3p4r
j+b2v7sqeEQfUZM8fSBE6KG1UUIAQIRcT2fvcZMbsF+FGNNp1wZwOGI+56LPcRMm
tKGbRzDOb+SSTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client