Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: I4nXWGzB5UmID7Y0tQsZoO4AhZTNB/+NSMme6Zk3ZxE=
Subject key identifier: DF:40:11:9E:3F:68:3D:18:4E:B9:AC:0B:E5:1E:67:E6:C0:6C:4E:2A
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 0199FBEAF900BEF8E053E710ADA918D3B34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1144
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: lsLl0a3hNL7Y8gM2khyoAUd5P7gpZAm7Uaow1fo/hng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f9:00:be:f8:e0:53:e7:10:ad:a9:18:d3:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=df40119e3f683d184eb9ac0be51e67e6c06c4e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:ac:e1:b8:5d:3e:a8:fa:5d:19:1e:48:8b:
b1:28:c5:ac:98:76:6d:57:f5:bb:a2:ef:07:61:cf:
22:a6:19:27:cf:99:f6:d8:5f:3c:2c:b0:4a:a6:73:
5f:89:d3:83:a8:85:70:3e:d7:75:06:91:07:76:a7:
8e:b7:e6:12:61:14:d4:b6:3e:d5:23:b7:0a:b2:5d:
b4:7d:c9:da:bc:65:0c:1c:8e:2b:7b:37:5f:d8:bc:
50:92:71:59:b4:2b:48:45:71:0f:8d:7a:c9:d7:aa:
c8:4a:0e:fe:d6:35:e5:77:81:62:bb:44:a0:2a:62:
3a:3e:e3:fe:48:bc:0f:7b:4a:1a:aa:3a:04:ff:e1:
68:35:49:6c:9b:1e:8f:ee:c7:ba:fe:4c:f5:10:70:
10:81:e4:25:16:98:9c:08:8a:a2:c7:ab:4c:57:97:
13:64:ff:b8:ff:ad:4a:21:05:5f:0d:91:89:52:be:
6a:04:00:77:fb:f1:4c:5d:89:c4:3c:7e:c4:58:e1:
b4:c4:4f:d1:76:13:9c:ce:02:84:66:99:7b:b9:8b:
c3:d4:99:4d:cd:e1:d9:89:6e:0f:ef:1a:b0:41:cb:
19:df:3f:bb:12:15:af:65:57:74:a0:c0:de:db:ef:
b6:87:c4:55:ad:44:a1:9f:7a:0c:4b:59:08:5e:b2:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:11:9E:3F:68:3D:18:4E:B9:AC:0B:E5:1E:67:E6:C0:6C:4E:2A
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:88:7a:62:e2:ca:ac:0e:d5:28:53:4c:b5:ab:83:bd:ae:a8:
5c:b5:43:21:58:dd:6b:08:94:69:f9:3c:a9:1c:9a:4e:69:ae:
a8:95:03:b6:e2:20:b5:f9:00:c9:85:50:a6:1c:d8:93:cc:f0:
d5:ae:a3:a8:a4:bb:0f:06:62:3b:74:76:ac:d3:8d:3c:71:56:
67:8e:76:32:01:4a:07:ca:b1:cc:7c:21:ec:be:df:30:47:7d:
2c:7c:60:62:c6:d8:45:0e:81:22:4c:b0:27:20:d0:00:58:89:
ce:ab:44:7d:34:b9:5f:8c:88:62:a5:38:a3:c4:c5:9d:af:4b:
6e:f1:3e:cc:a1:26:17:9e:35:b4:05:70:87:82:9e:c3:72:0c:
99:00:0d:86:67:0f:25:c6:ec:1e:f4:d4:6e:96:29:df:b7:ac:
f4:78:13:20:4d:4d:91:e3:44:a9:63:56:6d:1b:80:9d:09:bd:
d4:91:e5:52:f5:f0:c0:d0:08:5a:3d:8b:4d:b9:d4:aa:66:eb:
9b:20:70:5a:1b:f6:9e:dd:e7:61:2b:f3:91:4d:18:fb:8f:ac:
bc:41:b9:64:66:d8:69:b3:89:88:a5:eb:17:d6:57:30:5e:2a:
58:aa:d0:64:a5:ab:9d:73:91:a4:d9:01:fc:a1:78:b8:db:07:
9f:a2:a1:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vkAvvjgU+cQrakY07NOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODU0YTU3YWIwZDhhM2M5MjJjOGY2YTc5YWE4ZmU4YTZh
MmMwOWUwHhcNMjUxMDE5MTAwMTQ0WhcNMjUxMDIwMTAwMTQ0WjAzMTEwLwYDVQQD
EyhkZjQwMTE5ZTNmNjgzZDE4NGViOWFjMGJlNTFlNjdlNmMwNmM0ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF6s4bhdPqj6XRkeSIuxKMWsmHZt
V/W7ou8HYc8iphknz5n22F88LLBKpnNfidODqIVwPtd1BpEHdqeOt+YSYRTUtj7V
I7cKsl20fcnavGUMHI4rezdf2LxQknFZtCtIRXEPjXrJ16rISg7+1jXld4Fiu0Sg
KmI6PuP+SLwPe0oaqjoE/+FoNUlsmx6P7se6/kz1EHAQgeQlFpicCIqix6tMV5cT
ZP+4/61KIQVfDZGJUr5qBAB3+/FMXYnEPH7EWOG0xE/RdhOczgKEZpl7uYvD1JlN
zeHZiW4P7xqwQcsZ3z+7EhWvZVd0oMDe2++2h8RVrUShn3oMS1kIXrKYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9AEZ4/aD0YTrmsC+UeZ+bAbE4qMB8GA1UdIwQY
MBaAFGmFSlerDYo8kiyPanmqj+imosCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQt
NTIzOGIwMzU0NWNhLzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQtNTIzOGIwMzU0NWNh
LzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4h6YuLK
rA7VKFNMtauDva6oXLVDIVjdawiUafk8qRyaTmmuqJUDtuIgtfkAyYVQphzYk8zw
1a6jqKS7DwZiO3R2rNONPHFWZ452MgFKB8qxzHwh7L7fMEd9LHxgYsbYRQ6BIkyw
JyDQAFiJzqtEfTS5X4yIYqU4o8TFna9LbvE+zKEmF541tAVwh4Kew3IMmQANhmcP
JcbsHvTUbpYp37es9HgTIE1NkeNEqWNWbRuAnQm91JHlUvXwwNAIWj2LTbnUqmbr
myBwWhv2nt3nYSvzkU0Y+4+svEG5ZGbYabOJiKXrF9ZXMF4qWKrQZKWrnXORpNkB
/KF4uNsHn6Kh8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:31 2025 by rpki-client