Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: D9fv9vNWotkyIeoaySUK8dMtmsLwEWS+/80recQE2o8=
Subject key identifier: E3:8F:F3:90:CF:B1:78:18:78:9B:A2:89:40:0C:DC:66:BC:7D:5C:59
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 0198D583ADB716DAFDEE2B5041C3C45BF3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 0595
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: sxq0bLbRmAOJqm2L5hDp7bc7qiCg6LEO0pEdeicPPQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ad:b7:16:da:fd:ee:2b:50:41:c3:c4:5b:f3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=e38ff390cfb17818789ba289400cdc66bc7d5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:df:94:f8:38:16:95:d0:91:b7:ca:85:80:
1a:04:aa:40:93:63:85:ff:ea:fa:72:24:9b:89:40:
86:65:ae:fb:43:2b:7f:ab:10:17:c3:8d:79:28:01:
5c:8a:82:7f:13:26:ee:3e:d3:df:94:ae:27:56:75:
5e:1e:2b:f0:fb:23:63:3d:71:0a:2f:5f:8c:55:b8:
f9:40:9c:13:1b:22:3d:12:02:14:c4:2a:35:6d:e9:
e7:be:85:c0:49:71:e8:63:78:eb:ad:a7:35:69:45:
b8:f4:97:0e:e7:e1:c9:c1:dc:49:05:5f:d4:32:5b:
dd:f4:00:25:86:93:4e:fe:1f:eb:d2:11:31:73:74:
e6:90:9c:33:ac:11:0b:e6:c6:90:25:87:8e:a1:7d:
cd:a1:a4:84:28:d8:bf:32:88:2c:3e:a0:3e:25:8b:
ca:40:c1:87:dc:de:15:29:4e:e4:ed:60:eb:ee:4e:
89:03:e5:45:f4:02:63:16:83:cf:d2:a4:04:fa:11:
4b:cf:26:3e:01:f1:95:1c:c7:48:67:44:2c:3a:ff:
da:2b:b9:cb:94:80:1a:10:c1:87:25:e4:7e:56:be:
38:0f:bb:f9:a9:a4:08:90:2e:ba:a8:7c:0c:d3:fa:
ed:af:b6:31:8f:d2:f8:68:69:58:f7:ec:cf:d9:8e:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:F3:90:CF:B1:78:18:78:9B:A2:89:40:0C:DC:66:BC:7D:5C:59
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:a1:da:6d:81:8f:4e:30:11:4b:31:2b:4c:af:b7:78:ec:
55:42:a5:48:b8:23:72:47:47:88:b1:7d:20:68:4a:70:f8:37:
2a:1d:06:1c:6e:51:24:41:9b:3a:f2:48:49:56:83:9c:c6:8d:
ce:66:93:e2:6f:e5:1f:d0:d8:ac:0f:90:12:70:1a:32:98:7e:
b9:60:3c:b3:46:32:f9:1d:ae:cb:50:5f:67:85:d3:37:1e:ad:
44:de:e3:33:37:37:75:30:db:bc:00:df:61:2d:10:82:38:4f:
f2:6b:da:11:52:e5:60:52:24:a7:b9:d1:48:54:d1:3b:af:21:
59:b1:5e:47:fa:db:a7:fa:cd:f5:92:e7:51:24:e1:1b:60:e9:
86:55:6f:a1:3f:0a:d4:7c:27:f9:4c:27:d6:9d:62:3e:76:d6:
29:89:41:60:b8:25:4e:4c:8b:b8:57:87:27:cd:92:8d:7a:f3:
69:a5:ea:d7:50:16:78:6d:de:d6:a1:04:19:96:88:8b:83:9f:
68:ad:91:da:5a:a4:6d:f1:5c:4b:19:08:6a:ab:ea:5e:60:f7:
02:50:37:fd:e9:ca:06:f5:f3:5b:f7:29:a2:ea:08:33:2b:36:
03:b1:30:f7:e4:09:99:73:84:ce:89:10:df:30:91:13:5d:6c:
45:1d:4a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg623Ftr97itQQcPEW/PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0
YTY0YTUwHhcNMjUwODIzMDYwMDMzWhcNMjUwODI0MDYwMDMzWjAzMTEwLwYDVQQD
EyhlMzhmZjM5MGNmYjE3ODE4Nzg5YmEyODk0MDBjZGM2NmJjN2Q1YzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizrflPg4FpXQkbfKhYAaBKpAk2OF
/+r6ciSbiUCGZa77Qyt/qxAXw415KAFcioJ/EybuPtPflK4nVnVeHivw+yNjPXEK
L1+MVbj5QJwTGyI9EgIUxCo1bennvoXASXHoY3jrrac1aUW49JcO5+HJwdxJBV/U
Mlvd9AAlhpNO/h/r0hExc3TmkJwzrBEL5saQJYeOoX3NoaSEKNi/MogsPqA+JYvK
QMGH3N4VKU7k7WDr7k6JA+VF9AJjFoPP0qQE+hFLzyY+AfGVHMdIZ0QsOv/aK7nL
lIAaEMGHJeR+Vr44D7v5qaQIkC66qHwM0/rtr7Yxj9L4aGlY9+zP2Y4GZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOP85DPsXgYeJuiiUAM3Ga8fVxZMB8GA1UdIwQY
MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt
N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3
LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMOh2m2B
j04wEUsxK0yvt3jsVUKlSLgjckdHiLF9IGhKcPg3Kh0GHG5RJEGbOvJISVaDnMaN
zmaT4m/lH9DYrA+QEnAaMph+uWA8s0Yy+R2uy1BfZ4XTNx6tRN7jMzc3dTDbvADf
YS0QgjhP8mvaEVLlYFIkp7nRSFTRO68hWbFeR/rbp/rN9ZLnUSThG2DphlVvoT8K
1Hwn+Uwn1p1iPnbWKYlBYLglTkyLuFeHJ82SjXrzaaXq11AWeG3e1qEEGZaIi4Of
aK2R2lqkbfFcSxkIaqvqXmD3AlA3/enKBvXzW/cpouoIMys2A7Ew9+QJmXOEzokQ
3zCRE11sRR1KRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:51 2025 by rpki-client