Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: QafxJ8zl2/UK5mHiWSGZbYtF+aPj/trbOgTeuWZNkdg=
Subject key identifier: 9F:6F:E4:54:8D:33:74:BF:8A:EC:A2:B6:CC:19:16:70:51:BA:4E:6D
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019A0034F0AE3801F68DB5C348C4DE186D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 082B
Signing time: Mon 20 Oct 2025 06:01:00 +0000
Manifest this update: Mon 20 Oct 2025 06:01:00 +0000
Manifest next update: Tue 21 Oct 2025 06:01:00 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: JWy6P4F2aw96u+stQG/c66GXmCs+DjMfL8N8jf1fHjQ=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:f0:ae:38:01:f6:8d:b5:c3:48:c4:de:18:6d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Oct 20 06:01:00 2025 GMT
Not After : Oct 21 06:01:00 2025 GMT
Subject: CN=9f6fe4548d3374bf8aeca2b6cc19167051ba4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:82:02:27:11:01:9a:6a:fd:45:94:a4:82:
8e:fa:9d:b5:a5:0a:1b:7b:ad:a2:61:0f:c5:12:2f:
eb:8f:19:f7:53:cf:ae:8e:7a:c7:11:8c:20:90:04:
73:1a:3e:05:dd:88:5e:16:31:d1:82:46:24:5b:e8:
d4:b1:6c:4a:78:30:67:32:54:af:bf:69:44:10:11:
c7:ea:6c:2c:01:f0:10:28:c8:60:1c:74:3c:11:df:
13:22:cb:8a:55:6a:4c:95:e5:25:59:09:60:e9:01:
f5:78:46:be:c6:f9:de:9f:78:be:b2:9b:4f:f3:8f:
e5:f3:2e:c0:9a:72:dc:23:58:ee:7a:b9:6c:6d:26:
8e:e3:1e:56:03:8c:02:ed:73:a0:76:8a:11:4b:74:
f3:4e:ab:f5:22:72:a8:24:2d:59:9e:4e:19:cf:58:
6f:54:a9:fb:a7:fd:f0:02:b4:e3:5f:b7:59:98:ee:
fa:2f:cd:da:7c:95:be:c3:c4:76:fb:51:71:1a:11:
67:b6:55:dd:c8:6c:05:36:31:70:6f:fc:b2:fe:81:
96:5e:2b:81:3e:e8:25:e4:eb:a5:a3:48:91:81:db:
48:c8:3d:ae:b0:b5:fd:a7:50:d3:25:26:f9:45:f4:
f4:3b:f1:80:da:ff:ad:50:f4:c7:57:5a:d6:82:f3:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:E4:54:8D:33:74:BF:8A:EC:A2:B6:CC:19:16:70:51:BA:4E:6D
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:1a:48:95:a8:7f:8e:2a:91:38:53:e2:1c:0d:39:0a:b7:
27:e0:da:8f:22:e6:2f:12:ac:c4:47:ec:ef:76:df:97:ab:55:
b9:97:f1:f7:2d:50:00:4b:8c:c7:60:7f:67:e3:58:00:20:cd:
83:36:5d:f7:a0:5b:c7:a2:39:b8:de:51:0e:48:33:da:b9:b1:
14:63:77:f8:fe:65:9c:80:96:f7:29:ea:23:8f:15:8b:4c:ae:
28:98:2c:9d:74:9e:8f:9f:84:02:0c:17:6d:41:c8:21:b4:d5:
a5:73:20:86:4e:76:52:90:fa:f1:e3:9e:e3:af:da:71:81:1e:
e2:56:4f:26:44:25:61:1f:bb:68:4c:ba:a8:79:83:01:f4:26:
d8:71:c5:b4:68:4a:85:16:83:c9:b0:c0:59:b1:32:19:a5:b8:
72:6e:55:a8:0c:c1:14:50:f9:73:a8:23:af:f3:60:40:20:f9:
5c:d3:44:08:ea:a4:60:3e:4b:9c:46:82:76:7b:ee:49:24:5d:
33:5f:0b:7e:7e:81:70:91:16:51:ae:00:e5:8a:e7:f4:e6:97:
98:d7:d7:c3:d3:2b:24:ce:ad:45:a2:82:ee:a2:89:24:8f:8d:
82:34:57:03:9b:ba:cd:61:8b:1a:34:84:3e:ff:80:44:f0:47:
dd:0f:c0:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANPCuOAH2jbXDSMTeGG1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODI1YzdhOWUyNzAxYjZiYTM2NzBkMDhkMmExMGE5ZWEx
NWQzZTMwHhcNMjUxMDIwMDYwMTAwWhcNMjUxMDIxMDYwMTAwWjAzMTEwLwYDVQQD
Eyg5ZjZmZTQ1NDhkMzM3NGJmOGFlY2EyYjZjYzE5MTY3MDUxYmE0ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/uCAicRAZpq/UWUpIKO+p21pQob
e62iYQ/FEi/rjxn3U8+ujnrHEYwgkARzGj4F3YheFjHRgkYkW+jUsWxKeDBnMlSv
v2lEEBHH6mwsAfAQKMhgHHQ8Ed8TIsuKVWpMleUlWQlg6QH1eEa+xvnen3i+sptP
84/l8y7AmnLcI1juerlsbSaO4x5WA4wC7XOgdooRS3TzTqv1InKoJC1Znk4Zz1hv
VKn7p/3wArTjX7dZmO76L83afJW+w8R2+1FxGhFntlXdyGwFNjFwb/yy/oGWXiuB
Pugl5Oulo0iRgdtIyD2usLX9p1DTJSb5RfT0O/GA2v+tUPTHV1rWgvMM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9v5FSNM3S/iuyitswZFnBRuk5tMB8GA1UdIwQY
MBaAFAGCXHqeJwG2ujZw0I0qEKnqFdPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2It
OGYxMGQ1Yjk2ZmQ0LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2ItOGYxMGQ1Yjk2ZmQ0
LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK8aSJWo
f44qkThT4hwNOQq3J+DajyLmLxKsxEfs73bfl6tVuZfx9y1QAEuMx2B/Z+NYACDN
gzZd96Bbx6I5uN5RDkgz2rmxFGN3+P5lnICW9ynqI48Vi0yuKJgsnXSej5+EAgwX
bUHIIbTVpXMghk52UpD68eOe46/acYEe4lZPJkQlYR+7aEy6qHmDAfQm2HHFtGhK
hRaDybDAWbEyGaW4cm5VqAzBFFD5c6gjr/NgQCD5XNNECOqkYD5LnEaCdnvuSSRd
M18Lfn6BcJEWUa4A5Yrn9OaXmNfXw9MrJM6tRaKC7qKJJI+NgjRXA5u6zWGLGjSE
Pv+ARPBH3Q/ARA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:41 2025 by rpki-client