
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: db1cPg/W0ESbs//NYZ4Ms7wu5XKd4P3rMUfpcB4fVZQ=
Subject key identifier: 5A:2A:9E:50:95:E2:25:11:3D:A9:9E:9E:4D:39:9C:93:B9:41:E4:23
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 0199FAD7DD0EF9F7A5ECBB251037F7864E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 09FF
Signing time: Sun 19 Oct 2025 05:01:14 +0000
Manifest this update: Sun 19 Oct 2025 05:01:14 +0000
Manifest next update: Mon 20 Oct 2025 05:01:14 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: yCmMbPQFtiU7eakVr9ezBRf/u1pokMYF1XSHF0fhOxg=)
2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:dd:0e:f9:f7:a5:ec:bb:25:10:37:f7:86:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Oct 19 05:01:14 2025 GMT
Not After : Oct 20 05:01:14 2025 GMT
Subject: CN=5a2a9e5095e225113da99e9e4d399c93b941e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:b2:ba:10:b7:58:2b:f8:c6:f0:2d:27:95:
9f:72:30:a3:f3:09:52:6b:ac:dc:96:78:07:43:76:
0d:77:45:81:ca:b5:20:30:0c:35:0c:d9:3f:06:af:
19:e2:28:7f:a0:17:39:66:58:45:8a:8b:09:f1:79:
48:a1:4d:cf:7d:2b:7d:b0:02:5c:f1:e7:b6:02:1f:
ae:1b:97:5e:cc:62:75:e5:c2:0c:33:90:9f:9f:51:
89:c1:79:2a:ee:4d:8e:56:63:31:96:15:23:e9:8e:
5a:84:01:c3:6d:22:c0:10:1f:50:b0:61:37:8c:0e:
50:fa:33:5c:da:6d:9b:09:1b:66:5e:bb:7e:7d:60:
22:6e:34:c6:97:80:e3:81:2d:d0:97:71:6a:fe:d7:
ff:73:80:1a:33:c2:ce:7b:ab:e1:e1:d7:e2:e0:59:
d2:16:99:81:5a:47:86:9e:2a:50:2a:a6:36:fa:99:
65:2b:4d:59:17:d0:06:ff:39:c1:9b:f8:56:7f:3f:
e6:b3:d3:45:d5:ed:b8:66:ff:0f:ec:8e:05:d6:b8:
48:ba:36:48:a0:38:9f:b3:88:45:bc:cd:24:5e:93:
63:c2:2e:3f:cd:84:4a:46:25:74:ab:5b:92:27:01:
b2:bc:d1:08:97:c9:81:bc:17:dc:5b:6f:4f:6b:4f:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:9E:50:95:E2:25:11:3D:A9:9E:9E:4D:39:9C:93:B9:41:E4:23
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:08:39:a3:60:5f:da:2d:dd:ee:2e:5a:97:9c:5e:cc:02:0f:
28:77:d3:39:f6:d9:dc:03:35:99:0e:42:ce:a1:69:98:4c:81:
42:3e:be:4c:af:cd:60:e1:df:52:f1:8f:06:8a:c3:dc:97:5d:
04:c6:71:ad:81:d3:46:d8:55:6f:4a:28:ef:bb:da:cc:04:bb:
7a:ce:6c:6c:39:b2:9a:92:85:6a:5c:aa:d9:ac:22:a4:48:7d:
20:1e:f7:e4:0c:c6:a3:a6:39:bb:db:f3:f2:04:e2:d1:1d:39:
4e:f0:f5:c7:7f:33:15:04:6a:af:a1:4c:e3:91:38:68:85:be:
ee:93:1c:3a:b0:16:a7:fc:18:81:f6:ab:88:1f:b7:42:23:36:
ae:79:5a:17:cc:de:d9:10:4e:28:ae:73:58:af:68:50:88:66:
74:c7:86:0f:ca:80:a0:48:09:e6:6c:8d:db:e8:7b:f6:c7:ea:
64:72:56:dd:49:f8:e1:6e:64:45:cc:40:3c:e7:41:cd:3e:64:
0e:36:15:3b:66:b5:93:e5:60:ba:0e:b5:1c:9d:23:74:cf:93:
29:81:8b:36:36:9b:a9:97:72:ba:d5:75:6b:3a:db:6c:ec:17:
f3:06:01:d8:eb:a1:93:5d:f4:c9:fe:68:ab:77:0a:86:d1:07:
0a:46:24:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6190O+fel7LslEDf3hk5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjUxMDE5MDUwMTE0WhcNMjUxMDIwMDUwMTE0WjAzMTEwLwYDVQQD
Eyg1YTJhOWU1MDk1ZTIyNTExM2RhOTllOWU0ZDM5OWM5M2I5NDFlNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aqyuhC3WCv4xvAtJ5WfcjCj8wlS
a6zclngHQ3YNd0WByrUgMAw1DNk/Bq8Z4ih/oBc5ZlhFiosJ8XlIoU3PfSt9sAJc
8ee2Ah+uG5dezGJ15cIMM5Cfn1GJwXkq7k2OVmMxlhUj6Y5ahAHDbSLAEB9QsGE3
jA5Q+jNc2m2bCRtmXrt+fWAibjTGl4DjgS3Ql3Fq/tf/c4AaM8LOe6vh4dfi4FnS
FpmBWkeGnipQKqY2+pllK01ZF9AG/znBm/hWfz/ms9NF1e24Zv8P7I4F1rhIujZI
oDifs4hFvM0kXpNjwi4/zYRKRiV0q1uSJwGyvNEIl8mBvBfcW29Pa08fqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoqnlCV4iURPamenk05nJO5QeQjMB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAg5o2Bf
2i3d7i5al5xezAIPKHfTOfbZ3AM1mQ5CzqFpmEyBQj6+TK/NYOHfUvGPBorD3Jdd
BMZxrYHTRthVb0oo77vazAS7es5sbDmympKFalyq2awipEh9IB735AzGo6Y5u9vz
8gTi0R05TvD1x38zFQRqr6FM45E4aIW+7pMcOrAWp/wYgfariB+3QiM2rnlaF8ze
2RBOKK5zWK9oUIhmdMeGD8qAoEgJ5myN2+h79sfqZHJW3Un44W5kRcxAPOdBzT5k
DjYVO2a1k+Vgug61HJ0jdM+TKYGLNjabqZdyutV1azrbbOwX8wYB2Ouhk130yf5o
q3cKhtEHCkYkvw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:22 2025 by rpki-client