Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier: odK4xtIpMy70KwysoeysRckFnTsFAh/+BpQ6ZEBMeFY=
Subject key identifier: 1B:33:D5:27:E1:28:BC:5A:D3:A2:91:E6:36:2F:4E:E9:98:F4:48:EA
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial: 0199FDD97A606E0CDE1F162A4ABB7927C0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: c9Hivsk9elrU3I8eW+Dbxb3C55c3ke0ukVdubLvC0uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7a:60:6e:0c:de:1f:16:2a:4a:bb:79:27:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=1b33d527e128bc5ad3a291e6362f4ee998f448ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:e9:69:56:83:4d:07:2c:48:04:cc:95:b0:
c2:3a:9e:fc:f4:d4:06:7e:b9:b1:c5:2d:c3:a7:bd:
2e:74:24:7c:c2:62:ca:c2:13:43:cb:69:9c:7d:8b:
47:b7:b1:bc:47:33:a7:e3:df:68:40:3d:5a:59:59:
36:8f:2a:59:78:da:f7:db:c6:6a:35:95:a7:d9:84:
16:1f:89:9e:ec:b2:d9:c5:5b:0e:ac:aa:6b:9a:bb:
50:60:21:a8:fa:3b:4f:5a:77:21:d2:d4:a2:3e:4e:
22:c0:9b:f0:88:8d:ab:a6:83:5f:4b:14:5c:64:0e:
ea:8f:ed:9f:ca:c8:db:18:51:24:7d:42:86:f6:81:
55:70:f9:05:57:b1:b7:3f:99:d1:bf:be:30:96:d6:
44:3a:dc:77:81:f6:7f:8a:b3:48:5e:4b:cc:e7:c4:
e9:37:70:d1:c9:6d:dc:ee:ca:ad:fd:ca:bf:65:e5:
93:11:29:51:84:fc:d2:59:5a:03:4b:1e:a9:b8:02:
1c:52:b8:14:91:cd:1b:68:cb:e3:3d:a2:45:ae:70:
51:7a:85:0b:ae:b9:f2:39:e1:31:3a:f0:9d:87:d6:
6a:a1:86:15:1d:e2:f0:42:c4:45:f0:15:c3:55:d3:
33:40:06:7a:4d:5c:99:9e:5f:2d:9e:de:30:48:70:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:D5:27:E1:28:BC:5A:D3:A2:91:E6:36:2F:4E:E9:98:F4:48:EA
X509v3 Authority Key Identifier:
keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:4c:cd:39:8e:32:d4:32:58:06:d3:1d:2e:b6:7e:b7:36:
46:cc:ec:70:b1:d0:6d:c9:0a:66:49:20:0d:c5:c7:a4:af:51:
9b:38:8e:69:5f:11:b2:b9:3f:55:cc:2b:35:ed:4d:b6:1c:4b:
4d:24:d7:02:81:57:4b:9c:fc:02:ac:25:68:1c:68:36:85:53:
2c:71:a5:53:70:63:b9:81:8c:07:5e:e2:09:8f:37:fb:32:8b:
6b:b1:03:3c:2c:a1:4a:ef:b4:40:20:c0:f9:03:b4:a3:c8:a1:
ab:43:d6:b9:7c:43:de:ae:dc:53:d5:58:85:60:f0:cc:d5:ad:
1c:7e:cf:85:4a:d8:e4:9b:84:b9:4b:30:64:cf:79:58:16:9a:
7f:8d:29:20:1d:6c:ba:2b:64:d6:75:0e:ab:6c:70:3c:19:f6:
18:a2:8b:89:a1:98:1e:38:ce:0c:e6:4b:52:e1:d6:c4:aa:b1:
59:f0:b4:15:48:e9:0a:7d:24:8d:8f:76:7e:aa:22:64:e1:6d:
1f:bc:ea:af:c5:0c:54:13:48:18:f7:29:ca:21:49:51:b1:fc:
48:8c:31:a4:8e:01:0c:3d:84:72:a4:4c:82:a7:92:f6:b2:12:
d6:9b:28:01:e7:17:a4:17:dd:e1:3a:2b:e0:7a:1c:33:18:88:
89:bc:68:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XpgbgzeHxYqSrt5J8DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGU4NjJmOGViNTVmNGY4MjU0ZTJjODU4YjcyZjQzMzk3
ZmUzZmEwHhcNMjUxMDE5MTkwMTUyWhcNMjUxMDIwMTkwMTUyWjAzMTEwLwYDVQQD
EygxYjMzZDUyN2UxMjhiYzVhZDNhMjkxZTYzNjJmNGVlOTk4ZjQ0OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxDpaVaDTQcsSATMlbDCOp789NQG
frmxxS3Dp70udCR8wmLKwhNDy2mcfYtHt7G8RzOn499oQD1aWVk2jypZeNr328Zq
NZWn2YQWH4me7LLZxVsOrKprmrtQYCGo+jtPWnch0tSiPk4iwJvwiI2rpoNfSxRc
ZA7qj+2fysjbGFEkfUKG9oFVcPkFV7G3P5nRv74wltZEOtx3gfZ/irNIXkvM58Tp
N3DRyW3c7sqt/cq/ZeWTESlRhPzSWVoDSx6puAIcUrgUkc0baMvjPaJFrnBReoUL
rrnyOeExOvCdh9ZqoYYVHeLwQsRF8BXDVdMzQAZ6TVyZnl8tnt4wSHDnkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsz1SfhKLxa06KR5jYvTumY9EjqMB8GA1UdIwQY
MBaAFK9Ohi+OtV9PglTiyFi3L0M5f+P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0Yzct
NTBkMmY3YTEwOTYyLzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0YzctNTBkMmY3YTEwOTYy
LzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcBMzTmO
MtQyWAbTHS62frc2RszscLHQbckKZkkgDcXHpK9RmziOaV8Rsrk/VcwrNe1NthxL
TSTXAoFXS5z8AqwlaBxoNoVTLHGlU3BjuYGMB17iCY83+zKLa7EDPCyhSu+0QCDA
+QO0o8ihq0PWuXxD3q7cU9VYhWDwzNWtHH7PhUrY5JuEuUswZM95WBaaf40pIB1s
uitk1nUOq2xwPBn2GKKLiaGYHjjODOZLUuHWxKqxWfC0FUjpCn0kjY92fqoiZOFt
H7zqr8UMVBNIGPcpyiFJUbH8SIwxpI4BDD2EcqRMgqeS9rIS1psoAecXpBfd4Tor
4HocMxiIibxoPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:01 2025 by rpki-client