Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: 77iqyG5eg/qyubJ9trBfAXnH6yKSdH9xD/VEErl6/fE=
Subject key identifier: 14:F4:0A:8B:19:5D:33:AA:92:37:B4:B7:24:4C:EC:9E:B6:8B:EE:8F
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 0199FCC61008F2CAA829A67C95D40374AB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0DFF
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: znVAjTbIpWqlT+ec4ubwoxvI9wsJI7rRxN3Lv5aE9p8=)
2: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (hash: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:10:08:f2:ca:a8:29:a6:7c:95:d4:03:74:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=14f40a8b195d33aa9237b4b7244cec9eb68bee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:aa:08:61:3a:8f:cb:cd:01:be:01:1e:0c:
d7:31:48:a4:78:0e:ba:00:c1:9f:16:b6:51:89:9a:
42:9d:c4:88:6f:9d:bb:40:ec:cd:cc:48:73:cf:32:
74:a6:41:42:d4:0a:9f:5e:55:7a:6f:5a:f2:e9:7c:
2e:b4:5a:32:6a:bb:7a:f0:0d:d3:e9:08:a5:a5:a3:
6b:86:50:a8:3d:49:09:cc:3f:e4:ce:2b:a3:be:69:
f7:fc:5a:53:a4:e0:2c:da:e9:ee:35:65:f4:1d:01:
63:29:10:63:17:03:1f:e3:76:e5:5f:d3:3e:0a:86:
f6:95:64:f9:51:cd:6d:c4:bf:d9:57:65:90:f3:70:
95:b1:55:96:fb:44:dd:9a:d4:ee:86:c7:3d:e5:08:
01:c9:0c:db:38:4d:56:a0:83:4a:d1:38:b3:0c:13:
b6:8c:b2:aa:aa:d7:d4:c1:14:75:5e:1a:53:66:0d:
ee:34:c6:20:2c:f6:6e:a4:ea:62:0d:ad:95:91:64:
03:36:4e:58:b7:eb:59:83:ee:19:68:e6:4a:02:6f:
f9:3c:66:da:54:30:1f:4f:7a:2b:fe:ae:56:37:51:
2e:d6:6d:ec:e8:65:c1:6e:00:d2:30:c7:a1:d2:c6:
f7:f9:4f:45:9a:72:49:33:3a:14:7f:0f:a0:00:d8:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:0A:8B:19:5D:33:AA:92:37:B4:B7:24:4C:EC:9E:B6:8B:EE:8F
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:73:61:e7:43:2b:c8:e5:d7:f2:33:ab:19:d5:10:f6:93:d3:
ac:e7:eb:70:79:e0:33:b9:f0:7a:a6:4a:48:3d:bd:52:63:1f:
78:37:3b:09:43:5a:9e:d8:aa:bb:53:f1:2a:64:9e:b4:48:47:
a8:49:4d:a1:bc:be:a7:7e:f5:4e:43:24:17:8d:2e:cc:b7:1e:
86:3e:60:8d:26:7e:a9:0b:c5:35:d9:d5:2b:b2:67:9e:1b:db:
3a:88:a1:15:4c:02:9e:9f:94:85:1d:0e:8d:6a:3d:07:65:90:
be:c3:f4:22:4c:d6:4e:06:da:bb:51:f1:7e:dc:51:be:e0:db:
a4:97:35:43:41:25:78:9b:6b:0c:35:56:46:e3:cf:c0:0e:13:
8f:98:38:21:1c:f6:11:a1:7e:43:b4:74:97:f2:dd:e9:17:46:
85:30:8f:e4:84:e6:a6:8b:9f:64:ef:92:08:07:08:9b:dc:fa:
9f:d5:b0:98:58:31:2d:7b:3a:6f:cc:d7:1c:47:91:7e:ee:cf:
3c:88:c8:21:ab:42:30:78:56:7d:2c:eb:75:bf:b1:96:73:90:
0b:01:80:11:ed:b6:8c:51:15:8c:fa:37:28:15:44:d7:62:d4:
72:e5:fd:d0:94:45:68:fe:66:9f:66:e2:e0:26:3e:94:d6:2c:
b8:e5:04:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhAI8sqoKaZ8ldQDdKtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0
NDNlNWIwHhcNMjUxMDE5MTQwMTAyWhcNMjUxMDIwMTQwMTAyWjAzMTEwLwYDVQQD
EygxNGY0MGE4YjE5NWQzM2FhOTIzN2I0YjcyNDRjZWM5ZWI2OGJlZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCqCGE6j8vNAb4BHgzXMUikeA66
AMGfFrZRiZpCncSIb527QOzNzEhzzzJ0pkFC1AqfXlV6b1ry6XwutFoyart68A3T
6QilpaNrhlCoPUkJzD/kziujvmn3/FpTpOAs2unuNWX0HQFjKRBjFwMf43blX9M+
Cob2lWT5Uc1txL/ZV2WQ83CVsVWW+0TdmtTuhsc95QgByQzbOE1WoINK0TizDBO2
jLKqqtfUwRR1XhpTZg3uNMYgLPZupOpiDa2VkWQDNk5Yt+tZg+4ZaOZKAm/5PGba
VDAfT3or/q5WN1Eu1m3s6GXBbgDSMMeh0sb3+U9FmnJJMzoUfw+gANjQ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT0CosZXTOqkje0tyRM7J62i+6PMB8GA1UdIwQY
MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt
YThiZWI1NjU3ZDc2LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2
LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03Nh50Mr
yOXX8jOrGdUQ9pPTrOfrcHngM7nweqZKSD29UmMfeDc7CUNantiqu1PxKmSetEhH
qElNoby+p371TkMkF40uzLcehj5gjSZ+qQvFNdnVK7JnnhvbOoihFUwCnp+UhR0O
jWo9B2WQvsP0IkzWTgbau1HxftxRvuDbpJc1Q0EleJtrDDVWRuPPwA4Tj5g4IRz2
EaF+Q7R0l/Ld6RdGhTCP5ITmpoufZO+SCAcIm9z6n9WwmFgxLXs6b8zXHEeRfu7P
PIjIIatCMHhWfSzrdb+xlnOQCwGAEe22jFEVjPo3KBVE12LUcuX90JRFaP5mn2bi
4CY+lNYsuOUEig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:17 2025 by rpki-client