Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: oeEBKA/CYVaRW9YMT9M6OmFo9rYzbpmS6x/js3DkUGU=
Subject key identifier: 87:8A:C4:29:90:A2:64:FB:AC:80:1D:10:FF:C5:F9:49:F9:B6:F5:83
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0199FBEAD85248726A3397D3E099F6FDB488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 1158
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: 6ixywPJhbYRHfrExGEUfa0tGpybaSU5JLjkR8/QXJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d8:52:48:72:6a:33:97:d3:e0:99:f6:fd:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=878ac42990a264fbac801d10ffc5f949f9b6f583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:48:c2:80:ee:0b:37:6d:f9:cf:06:9c:e9:
9f:21:25:fe:15:e2:30:b5:bb:81:66:7f:38:91:d6:
d7:42:8e:aa:be:14:94:4f:08:2d:3b:f4:a6:d2:a0:
30:87:7d:bf:c0:a7:cc:a5:b1:98:b1:2e:3c:a5:14:
1f:40:b3:0b:6b:0e:f6:20:d3:02:e6:23:7c:d7:c1:
3a:31:0a:cf:49:d2:c0:b9:58:34:de:d3:c0:b3:33:
bd:62:68:bd:7f:43:b8:9c:f1:26:85:ab:99:0c:bf:
7f:d2:b2:f9:cb:b9:11:27:ab:63:cc:47:47:11:bc:
f1:10:ae:96:28:79:a0:2b:c8:b7:ec:2c:73:31:67:
7a:fa:20:5f:69:f1:fe:f5:59:0e:04:53:18:38:7a:
51:54:ab:2e:97:b3:c3:35:8e:d7:ce:02:9c:8f:6f:
84:b9:b9:b4:77:fc:a8:8e:5e:76:a0:bf:4a:bb:2e:
c4:b4:cb:39:d2:4a:45:48:86:d9:e5:3c:c9:7c:d9:
88:6b:49:07:26:c4:00:f9:e5:2a:59:b6:f0:ff:ac:
f0:45:64:29:3e:40:b1:04:31:a1:78:27:04:8d:07:
96:9a:4d:e2:61:13:65:6e:f1:c7:5f:44:9f:16:8e:
b9:72:ef:44:50:a4:d1:6a:d9:e0:16:ca:d3:87:a8:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:C4:29:90:A2:64:FB:AC:80:1D:10:FF:C5:F9:49:F9:B6:F5:83
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f3:ef:13:c8:f2:31:c7:5c:a1:67:09:b0:a7:30:91:6c:94:
57:13:31:c6:7a:f9:6d:a8:7f:19:78:4f:cd:58:76:da:6d:d4:
e8:d8:fe:df:34:4b:f2:30:87:d3:32:8b:20:d7:80:ce:a1:4a:
cb:ae:9a:2f:ae:89:59:64:30:3d:ff:c6:22:55:5a:3b:1b:29:
ab:1f:2f:1c:0d:96:56:ec:45:41:64:a8:ad:12:cc:1b:99:02:
01:f1:72:63:46:2c:b6:2b:72:1e:92:fd:3c:bd:ba:90:8d:c8:
cd:13:a4:96:7b:18:ae:8f:99:3a:17:fb:86:e3:88:87:3a:c7:
1c:8d:c4:26:32:8c:09:66:82:6d:06:a1:a7:ca:23:63:49:c5:
7e:50:bf:3f:af:18:1c:93:61:d5:48:fc:a5:18:72:70:19:cc:
88:01:f7:30:be:74:81:f2:bf:37:c3:4f:38:da:9c:8f:61:e0:
2e:34:54:68:3b:d5:0d:ab:68:13:fe:08:65:f0:07:03:ff:0f:
7a:e6:ee:36:d2:96:28:a7:86:4b:65:ef:5a:5f:39:7a:da:8a:
e2:f6:7b:94:5e:07:7a:b3:29:e3:b5:01:c7:0a:b3:67:fd:e9:
65:84:b4:bc:6f:73:1b:e1:26:3f:cb:97:23:f2:4b:23:0d:8b:
8f:b3:67:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76thSSHJqM5fT4Jn2/bSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmEwNmU0NTQ3ZGEwMWE1YzhiNWVmYjcxMDQwZTVlZGQx
MDllZTcwHhcNMjUxMDE5MTAwMTM1WhcNMjUxMDIwMTAwMTM1WjAzMTEwLwYDVQQD
Eyg4NzhhYzQyOTkwYTI2NGZiYWM4MDFkMTBmZmM1Zjk0OWY5YjZmNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ZIwoDuCzdt+c8GnOmfISX+FeIw
tbuBZn84kdbXQo6qvhSUTwgtO/Sm0qAwh32/wKfMpbGYsS48pRQfQLMLaw72INMC
5iN818E6MQrPSdLAuVg03tPAszO9Ymi9f0O4nPEmhauZDL9/0rL5y7kRJ6tjzEdH
EbzxEK6WKHmgK8i37CxzMWd6+iBfafH+9VkOBFMYOHpRVKsul7PDNY7XzgKcj2+E
ubm0d/yojl52oL9Kuy7EtMs50kpFSIbZ5TzJfNmIa0kHJsQA+eUqWbbw/6zwRWQp
PkCxBDGheCcEjQeWmk3iYRNlbvHHX0SfFo65cu9EUKTRatngFsrTh6h7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeKxCmQomT7rIAdEP/F+Un5tvWDMB8GA1UdIwQY
MBaAFGlqBuRUfaAaXIte+3EEDl7dEJ7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTIt
NjJkZjkzYmM2NGRjLzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTItNjJkZjkzYmM2NGRj
LzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvPvE8jy
McdcoWcJsKcwkWyUVxMxxnr5bah/GXhPzVh22m3U6Nj+3zRL8jCH0zKLINeAzqFK
y66aL66JWWQwPf/GIlVaOxspqx8vHA2WVuxFQWSorRLMG5kCAfFyY0YstityHpL9
PL26kI3IzROklnsYro+ZOhf7huOIhzrHHI3EJjKMCWaCbQahp8ojY0nFflC/P68Y
HJNh1Uj8pRhycBnMiAH3ML50gfK/N8NPONqcj2HgLjRUaDvVDatoE/4IZfAHA/8P
eubuNtKWKKeGS2XvWl85etqK4vZ7lF4HerMp47UBxwqzZ/3pZYS0vG9zG+EmP8uX
I/JLIw2Lj7NnTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:36 2025 by rpki-client