Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: Gh3HDL7oYRDVWNsqZnRXI6stywibSCDW2OGQTARzI1E=
Subject key identifier: 15:BD:9F:EA:E2:5A:D4:2A:C3:16:B8:EE:21:A2:9B:C6:98:FE:85:5B
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 0199FAD824203B899790136F33C0C1FB0854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 100C
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: Gx4l2vrL3He2EEKUUlqH303cYDq3TZVt8OU2xzrPlBk=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:24:20:3b:89:97:90:13:6f:33:c0:c1:fb:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=15bd9feae25ad42ac316b8ee21a29bc698fe855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:ea:e3:ef:27:ad:50:df:18:e4:31:57:e8:
74:7c:c2:9d:d3:a7:68:5d:46:f2:bf:1e:25:78:57:
ab:8b:ad:77:c5:e3:ab:79:27:ac:4f:53:ea:9e:ff:
cb:2a:f0:ba:ff:c9:96:02:68:f0:5a:42:b3:e1:73:
23:f1:d4:4b:e1:51:f0:70:2a:4c:50:6b:c3:0f:2f:
5d:3b:9c:76:2f:35:d9:ce:80:d8:00:cb:8c:34:7f:
2f:5d:9a:c5:64:6c:a0:43:f4:80:a3:3c:34:8b:81:
5d:9c:25:01:d4:45:58:02:d2:66:7f:28:38:4f:6f:
84:08:da:5c:6f:fe:85:c1:7f:9f:f6:57:f0:56:09:
19:74:1d:6a:a0:9e:b5:b1:dd:51:fe:81:a9:92:fc:
8e:3c:09:d8:bb:80:24:43:de:b2:23:99:4b:55:69:
80:96:89:7e:66:bc:f1:00:c8:8e:80:dd:6a:98:54:
70:ba:53:f7:aa:44:cb:be:ea:a7:ab:d4:fc:b0:1f:
49:85:32:5d:22:1c:1c:51:98:55:2d:b9:05:a6:dc:
a7:a5:b6:07:72:82:5f:50:8d:4b:9b:46:0b:dd:86:
15:3e:a8:7f:69:ba:e0:aa:5d:ce:c6:2f:db:57:04:
56:f9:21:52:93:a9:44:62:26:79:07:00:6f:56:0a:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:9F:EA:E2:5A:D4:2A:C3:16:B8:EE:21:A2:9B:C6:98:FE:85:5B
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:22:75:84:4d:f8:51:96:12:42:51:f8:fe:5d:7b:ba:09:e8:
7b:38:31:ae:c1:28:01:1c:41:c7:e3:41:1d:58:a1:6b:a8:07:
1a:e9:31:88:ba:28:53:74:58:15:ba:fe:79:39:14:88:1a:4c:
0b:be:e9:58:1b:c4:24:1e:28:39:31:48:31:eb:53:e2:e3:2b:
a6:d9:5d:53:32:dd:68:ab:12:14:c0:25:86:67:87:b8:b4:05:
76:b6:e9:08:6f:82:cd:a1:3b:a8:62:b9:56:c3:17:aa:bc:e6:
14:ec:c5:40:40:f6:41:5e:0c:ff:c0:be:b1:9e:ef:8d:03:2d:
33:03:ec:e5:95:cf:b7:7b:db:be:3a:7d:13:b7:31:b4:94:57:
98:27:2e:ff:da:2f:91:77:0b:01:26:15:1e:34:6d:9a:dc:ed:
7d:3b:7b:19:ed:3c:44:5a:ef:f4:35:c5:8b:c6:2e:01:d9:8e:
5d:96:f6:97:db:e7:0c:3b:15:3f:b6:72:e6:83:76:e3:17:a9:
ef:78:5a:85:f9:24:99:d2:aa:a3:39:a5:e9:b8:5b:8c:9b:8f:
c1:dd:95:f9:f9:10:e5:c2:49:23:c9:aa:a0:45:ca:70:fc:ac:
c6:64:c3:03:da:75:df:87:4b:eb:7d:48:d9:15:fb:ff:c9:98:
8f:58:b6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62CQgO4mXkBNvM8DB+whUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTEyNWUyOTI2ZDM5YWM4Njk5ODIyYmM1N2E2NTgwZjVm
NTE3ZTkwHhcNMjUxMDE5MDUwMTMyWhcNMjUxMDIwMDUwMTMyWjAzMTEwLwYDVQQD
EygxNWJkOWZlYWUyNWFkNDJhYzMxNmI4ZWUyMWEyOWJjNjk4ZmU4NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz7q4+8nrVDfGOQxV+h0fMKd06do
XUbyvx4leFeri613xeOreSesT1Pqnv/LKvC6/8mWAmjwWkKz4XMj8dRL4VHwcCpM
UGvDDy9dO5x2LzXZzoDYAMuMNH8vXZrFZGygQ/SAozw0i4FdnCUB1EVYAtJmfyg4
T2+ECNpcb/6FwX+f9lfwVgkZdB1qoJ61sd1R/oGpkvyOPAnYu4AkQ96yI5lLVWmA
lol+ZrzxAMiOgN1qmFRwulP3qkTLvuqnq9T8sB9JhTJdIhwcUZhVLbkFptynpbYH
coJfUI1Lm0YL3YYVPqh/abrgql3Oxi/bVwRW+SFSk6lEYiZ5BwBvVgrjFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW9n+riWtQqwxa47iGim8aY/oVbMB8GA1UdIwQY
MBaAFGmhJeKSbTmshpmCK8V6ZYD19RfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2Qt
N2I1NjdjNjE4NWY5LzEvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2QtN2I1NjdjNjE4NWY5
LzEvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyJ1hE34
UZYSQlH4/l17ugnoezgxrsEoARxBx+NBHViha6gHGukxiLooU3RYFbr+eTkUiBpM
C77pWBvEJB4oOTFIMetT4uMrptldUzLdaKsSFMAlhmeHuLQFdrbpCG+CzaE7qGK5
VsMXqrzmFOzFQED2QV4M/8C+sZ7vjQMtMwPs5ZXPt3vbvjp9E7cxtJRXmCcu/9ov
kXcLASYVHjRtmtztfTt7Ge08RFrv9DXFi8YuAdmOXZb2l9vnDDsVP7Zy5oN24xep
73hahfkkmdKqozml6bhbjJuPwd2V+fkQ5cJJI8mqoEXKcPysxmTDA9p134dL631I
2RX7/8mYj1i2MQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:33 2025 by rpki-client