Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: J1ED3PZ+WLXoQ8tUew/KzRZdCp27tf3xaVNjm6bZ2dM=
Subject key identifier: 5D:4B:CB:23:EE:2F:D2:97:82:B5:68:8C:5E:A9:85:A0:EF:95:2E:D7
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019A01111CFEFABB43BCEDE0282642C72483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 10:01:29 +0000
Manifest this update: Mon 20 Oct 2025 10:01:29 +0000
Manifest next update: Tue 21 Oct 2025 10:01:29 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: o4ASKtYMPCcucxdPCRPdPU7S0Gc/U4wXAxeiyXALkUY=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:1c:fe:fa:bb:43:bc:ed:e0:28:26:42:c7:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Oct 20 10:01:29 2025 GMT
Not After : Oct 21 10:01:29 2025 GMT
Subject: CN=5d4bcb23ee2fd29782b5688c5ea985a0ef952ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:4f:2e:af:89:c2:0d:3b:cd:bf:07:75:da:
a0:64:14:5b:e9:ae:bc:89:a3:0b:14:3f:cb:4d:79:
97:67:1a:c9:7c:2a:c3:09:f3:15:ad:9a:9e:db:2b:
1a:07:d2:e4:f7:35:d3:31:4b:f9:bd:fd:4e:a5:7e:
cb:dd:eb:7e:6a:3a:c1:bf:fe:3f:e4:5f:39:ed:a9:
c2:66:0d:ec:a2:e1:83:aa:18:23:8c:04:c6:66:c2:
26:99:d2:ae:85:77:f7:c6:81:22:71:de:8c:54:58:
8f:67:7a:2f:82:99:0c:0a:a0:84:81:ee:cf:8b:b8:
81:ec:74:2e:2f:ab:3d:1e:e8:71:16:3f:d4:52:83:
fe:c7:aa:be:f2:88:d1:13:58:dd:00:39:0e:de:24:
f3:45:52:d9:23:18:d9:cd:64:ac:c0:2f:7e:bc:e4:
7f:de:e7:19:f5:18:8f:b0:f2:cc:bf:02:eb:3c:67:
d1:39:23:98:21:ea:30:9b:a0:52:10:8e:22:29:60:
a0:0f:92:34:5f:19:c2:e8:0b:87:7f:88:22:3b:82:
2a:4d:be:cb:ea:00:2b:5d:81:05:b6:7c:3f:90:e1:
17:ef:86:41:37:f6:96:97:61:82:1a:b0:9d:3f:fc:
3d:cf:cb:54:d7:20:cf:75:f1:32:e2:e0:87:0c:ca:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:CB:23:EE:2F:D2:97:82:B5:68:8C:5E:A9:85:A0:EF:95:2E:D7
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ed:69:0c:67:51:a1:cb:1e:ba:b6:4f:d1:db:15:9c:c1:07:
74:1a:c9:44:54:1c:6e:3a:79:ba:8e:0c:2f:83:36:61:2d:52:
37:64:40:89:e3:5a:a8:cf:78:9d:ea:25:52:f1:c9:3d:3f:fd:
cb:e3:75:eb:b2:d4:a1:b0:96:4f:86:71:c8:76:58:07:f2:64:
33:be:ba:8e:79:a8:8f:c4:bd:ec:3b:bf:68:44:3a:cd:6b:37:
64:8b:52:32:0b:19:cc:d6:b2:3c:9e:74:b2:90:fc:67:7a:9a:
ff:9d:a9:71:b0:8e:7f:ee:c0:1a:05:91:62:fe:2e:33:e7:86:
21:98:2b:ac:cc:71:76:33:66:c1:ca:eb:fc:f2:e6:13:1c:c0:
d1:4a:2f:9a:4b:3a:38:ee:a9:89:96:05:88:4a:b4:f4:86:04:
04:a1:5d:2b:15:b4:cb:e7:b3:83:e6:c3:6e:5a:e8:44:e6:0b:
6d:87:7c:ec:46:6b:8c:59:b4:57:0c:f5:fd:44:86:49:92:3f:
cc:a5:bb:58:f7:98:cc:dc:20:e6:00:1b:7d:28:6d:33:3e:97:
64:92:7f:3f:58:68:47:34:c7:5c:cb:3c:05:1c:f7:fd:7d:88:
4a:6c:39:99:39:90:df:d0:d5:74:b4:d7:ac:65:40:7b:dc:52:
bb:8b:39:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBERz++rtDvO3gKCZCxySDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUxMDIwMTAwMTI5WhcNMjUxMDIxMTAwMTI5WjAzMTEwLwYDVQQD
Eyg1ZDRiY2IyM2VlMmZkMjk3ODJiNTY4OGM1ZWE5ODVhMGVmOTUyZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDBPLq+Jwg07zb8HddqgZBRb6a68
iaMLFD/LTXmXZxrJfCrDCfMVrZqe2ysaB9Lk9zXTMUv5vf1OpX7L3et+ajrBv/4/
5F857anCZg3souGDqhgjjATGZsImmdKuhXf3xoEicd6MVFiPZ3ovgpkMCqCEge7P
i7iB7HQuL6s9HuhxFj/UUoP+x6q+8ojRE1jdADkO3iTzRVLZIxjZzWSswC9+vOR/
3ucZ9RiPsPLMvwLrPGfROSOYIeowm6BSEI4iKWCgD5I0XxnC6AuHf4giO4IqTb7L
6gArXYEFtnw/kOEX74ZBN/aWl2GCGrCdP/w9z8tU1yDPdfEy4uCHDMolzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1LyyPuL9KXgrVojF6phaDvlS7XMB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO1pDGdR
ocseurZP0dsVnMEHdBrJRFQcbjp5uo4ML4M2YS1SN2RAieNaqM94neolUvHJPT/9
y+N167LUobCWT4ZxyHZYB/JkM766jnmoj8S97Du/aEQ6zWs3ZItSMgsZzNayPJ50
spD8Z3qa/52pcbCOf+7AGgWRYv4uM+eGIZgrrMxxdjNmwcrr/PLmExzA0Uovmks6
OO6piZYFiEq09IYEBKFdKxW0y+ezg+bDblroROYLbYd87EZrjFm0Vwz1/USGSZI/
zKW7WPeYzNwg5gAbfShtMz6XZJJ/P1hoRzTHXMs8BRz3/X2ISmw5mTmQ39DVdLTX
rGVAe9xSu4s5dA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:14 2025 by rpki-client