Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: lO0238bt7Byc5KvgdZqUdRe0E2hDJx9TrJkCMqZHUGk=
Subject key identifier: 9F:31:B5:24:A0:1D:76:DE:FD:53:A6:9C:02:17:51:1F:DA:F2:E3:BD
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 0199FD6B06F4C8D6560EBCCFFFE445C0770B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 13B0
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: y9S9b5blP46PWOkn2JcCD4p19/vrzN/xQnCu1txV2JA=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:06:f4:c8:d6:56:0e:bc:cf:ff:e4:45:c0:77:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=9f31b524a01d76defd53a69c0217511fdaf2e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:5b:cd:19:8a:b9:06:83:f5:75:ab:a6:a2:
0c:f2:f2:8a:09:7b:00:df:35:d2:5e:a0:37:53:3e:
7a:e2:d3:85:6e:77:e8:ee:c4:55:ce:48:40:a5:86:
aa:e3:21:00:8b:c6:d8:c6:29:49:49:69:b6:d1:3d:
14:e7:b5:d8:6a:1a:27:2a:dc:9e:b6:e1:d9:20:bb:
2f:bb:4e:55:2d:3f:94:e9:96:51:9c:dd:bf:4b:41:
1c:5b:85:98:7f:9a:f3:8e:3c:22:5f:93:83:57:09:
06:02:5a:94:d5:c1:36:40:51:76:48:4f:79:59:a6:
b7:1a:52:04:49:49:d6:fd:66:a2:ce:f5:ed:1f:be:
12:7b:06:51:66:47:8c:83:c3:5f:b7:94:63:b0:ac:
a4:48:d5:0a:cb:bb:65:92:4b:60:7d:30:d1:63:4c:
7b:79:ef:28:05:2a:3d:07:57:36:8f:de:19:48:5d:
ed:9d:73:64:63:16:6a:d2:f6:92:dc:d9:b5:01:e4:
11:93:3c:e1:a2:b4:20:76:66:10:c8:22:35:13:b9:
43:04:6e:a9:44:c0:92:20:fd:4d:c7:95:db:02:2a:
90:16:8e:ed:f5:a2:3d:00:f6:c4:4e:1b:d8:3a:63:
f3:8c:f6:ca:81:b6:3e:ae:f1:65:1c:8f:be:99:d9:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:B5:24:A0:1D:76:DE:FD:53:A6:9C:02:17:51:1F:DA:F2:E3:BD
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:49:56:f6:9b:38:d9:fd:ae:e5:bd:39:17:0d:8b:1d:f9:
91:3f:72:eb:a4:7d:85:21:39:03:cd:13:2b:b6:aa:b0:f1:2e:
df:f3:80:65:e9:fd:5e:00:3d:99:4f:80:2b:16:a6:bf:a7:34:
38:65:5c:20:b4:27:32:28:f4:6b:6d:b7:cf:05:94:63:91:77:
e3:2f:9c:a4:ee:94:ec:23:b5:83:34:cb:94:a6:e9:30:b4:b0:
ae:8d:1e:fd:ba:d8:f0:ae:8c:44:1a:24:e6:65:29:79:95:fb:
f7:49:8d:4e:f2:0e:a9:35:26:2b:e0:37:11:a7:bd:48:09:1f:
d4:da:a9:22:f5:1f:21:91:2b:7d:a6:ef:7b:71:d4:64:5d:ed:
9d:ff:8f:64:54:8e:5d:2a:18:2d:11:c9:73:e4:a2:31:38:d6:
c3:c8:91:17:8f:a9:c7:a4:aa:24:b2:0f:3f:4e:92:95:05:ab:
e2:5d:35:bf:dc:df:06:4b:d8:6b:4c:b6:9c:b9:32:20:01:a4:
86:48:2d:7a:0a:1c:41:f0:0f:c5:17:b8:94:03:59:0b:4b:9d:
d2:33:11:29:61:da:b9:d3:46:79:73:7e:e8:de:bb:59:61:90:
d3:29:d1:d6:e8:aa:f3:73:ea:49:12:0d:57:60:f5:f0:9f:84:
81:d8:5a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9awb0yNZWDrzP/+RFwHcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYyZWY2ZGI1MDI5OTRkN2IwYzhlNDljZDRhNzc3YmRi
OTM1NzIwHhcNMjUxMDE5MTcwMTEzWhcNMjUxMDIwMTcwMTEzWjAzMTEwLwYDVQQD
Eyg5ZjMxYjUyNGEwMWQ3NmRlZmQ1M2E2OWMwMjE3NTExZmRhZjJlM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcdbzRmKuQaD9XWrpqIM8vKKCXsA
3zXSXqA3Uz564tOFbnfo7sRVzkhApYaq4yEAi8bYxilJSWm20T0U57XYahonKtye
tuHZILsvu05VLT+U6ZZRnN2/S0EcW4WYf5rzjjwiX5ODVwkGAlqU1cE2QFF2SE95
Waa3GlIESUnW/WaizvXtH74SewZRZkeMg8Nft5RjsKykSNUKy7tlkktgfTDRY0x7
ee8oBSo9B1c2j94ZSF3tnXNkYxZq0vaS3Nm1AeQRkzzhorQgdmYQyCI1E7lDBG6p
RMCSIP1Nx5XbAiqQFo7t9aI9APbEThvYOmPzjPbKgbY+rvFlHI++mdlk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8xtSSgHXbe/VOmnAIXUR/a8uO9MB8GA1UdIwQY
MBaAFAFfLvbbUCmU17DI5JzUp3e9uTVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzIt
ZmFmZjIxMWVhNGM2LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzItZmFmZjIxMWVhNGM2
LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJENJVvab
ONn9ruW9ORcNix35kT9y66R9hSE5A80TK7aqsPEu3/OAZen9XgA9mU+AKxamv6c0
OGVcILQnMij0a223zwWUY5F34y+cpO6U7CO1gzTLlKbpMLSwro0e/brY8K6MRBok
5mUpeZX790mNTvIOqTUmK+A3Eae9SAkf1NqpIvUfIZErfabve3HUZF3tnf+PZFSO
XSoYLRHJc+SiMTjWw8iRF4+px6SqJLIPP06SlQWr4l01v9zfBkvYa0y2nLkyIAGk
hkgtegocQfAPxRe4lANZC0ud0jMRKWHaudNGeXN+6N67WWGQ0ynR1uiq83PqSRIN
V2D18J+EgdhaIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:26 2025 by rpki-client