Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: NxFYN0rbrFvG4QjtLrIccfJFqmZqj5u8Ph/u0jUmBl4=
Subject key identifier: B2:9C:11:A6:66:9E:2F:B8:41:B3:61:8E:BF:3D:9B:DC:CE:91:C7:A6
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019A503E149B3B76C39D50041487E55E6045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 15EF
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: C4iwycc/AFhPynDHgr703Sz7K5JARsm3OFa8nsx/1WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:14:9b:3b:76:c3:9d:50:04:14:87:e5:5e:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=b29c11a6669e2fb841b3618ebf3d9bdcce91c7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:0c:58:d7:cc:78:5e:3c:a4:c7:3e:68:4b:
d7:c9:bf:76:85:df:03:b8:f3:65:10:58:89:3b:7a:
a8:c3:95:e6:8a:de:2c:99:c3:5b:96:28:5a:14:85:
6f:81:1c:3a:16:9a:3a:3d:c9:0a:59:33:c5:63:88:
93:a1:33:8e:b4:e4:b3:e1:65:0b:b3:f3:a8:f1:3a:
32:be:20:07:24:ad:99:bd:c7:4e:a4:ce:2b:0d:f4:
0c:f0:ac:96:b7:48:44:6a:eb:2e:97:73:8c:56:3a:
11:e2:2f:bc:9c:42:0f:3a:62:63:31:bb:74:ea:16:
42:cf:fd:b8:a1:1e:b9:8d:76:87:86:a1:90:f5:84:
62:9a:1d:df:ac:9c:b0:9c:a8:39:0d:6b:8e:c4:e6:
22:c1:3f:98:83:b2:08:28:1e:1d:0f:84:0b:cc:1a:
4d:02:a2:63:53:38:c8:83:be:16:7e:1f:75:b9:a3:
5e:1e:4e:fe:24:0b:ac:72:4e:95:2a:8f:a5:6c:3e:
46:5c:91:20:f0:df:4c:a2:58:b2:09:66:c8:3e:ff:
75:8e:06:42:07:f0:02:03:51:cd:84:38:eb:19:7c:
10:34:7b:aa:bd:95:c3:86:d4:74:fe:94:12:c3:e3:
50:49:7e:b2:59:1f:1b:f3:e6:c7:68:00:05:51:1c:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:11:A6:66:9E:2F:B8:41:B3:61:8E:BF:3D:9B:DC:CE:91:C7:A6
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fe:c6:ce:c8:c1:97:97:34:7b:66:9b:25:13:ca:40:26:6f:
9b:09:e3:d5:be:fa:3f:92:6f:10:84:8e:63:b9:09:16:ec:44:
9d:64:5e:d7:1f:e0:22:e1:fd:3b:0d:9a:22:ea:df:4f:50:0a:
31:ac:ea:60:1d:40:90:eb:5f:71:e6:c5:55:81:eb:be:74:79:
60:e4:7c:18:38:da:4b:28:75:77:4f:43:17:c0:39:e4:a6:a1:
0d:e5:e0:50:84:0d:78:b0:36:39:c5:bc:5e:64:51:10:89:a0:
0c:b2:bd:7e:09:e4:bd:76:10:c5:15:15:96:b4:0c:14:d7:63:
00:e7:e3:3f:d8:d7:6f:19:ea:be:2d:4b:ba:d5:b2:3d:3c:96:
c9:13:ce:c2:02:bf:96:f6:7f:20:71:2c:5f:18:af:8c:10:95:
6d:46:4e:59:e2:8d:24:9f:0c:5c:da:f7:0e:11:a0:c1:68:81:
b6:6b:de:87:df:11:08:b6:ff:81:f5:c5:03:73:4d:90:d3:cb:
97:49:43:cd:4b:bc:2f:88:ba:b7:b6:2d:55:99:3b:cb:05:29:
0f:ec:e1:13:63:50:1e:16:de:42:25:9b:f1:13:84:7a:f6:a1:
1e:f0:3f:8c:26:9e:09:f5:04:9b:ea:df:19:a2:c3:a3:14:c1:
5e:fd:d6:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPhSbO3bDnVAEFIflXmBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGE4MDhjY2Y1OTE5ZDA1NjdkYzQyMzRlOTBhM2U2MGNl
YjE2NDgwHhcNMjUxMTA0MTkwMDM2WhcNMjUxMTA1MTkwMDM2WjAzMTEwLwYDVQQD
EyhiMjljMTFhNjY2OWUyZmI4NDFiMzYxOGViZjNkOWJkY2NlOTFjN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ4MWNfMeF48pMc+aEvXyb92hd8D
uPNlEFiJO3qow5Xmit4smcNblihaFIVvgRw6Fpo6PckKWTPFY4iToTOOtOSz4WUL
s/Oo8ToyviAHJK2ZvcdOpM4rDfQM8KyWt0hEausul3OMVjoR4i+8nEIPOmJjMbt0
6hZCz/24oR65jXaHhqGQ9YRimh3frJywnKg5DWuOxOYiwT+Yg7IIKB4dD4QLzBpN
AqJjUzjIg74Wfh91uaNeHk7+JAusck6VKo+lbD5GXJEg8N9MoliyCWbIPv91jgZC
B/ACA1HNhDjrGXwQNHuqvZXDhtR0/pQSw+NQSX6yWR8b8+bHaAAFURxpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKcEaZmni+4QbNhjr89m9zOkcemMB8GA1UdIwQY
MBaAFAFKgIzPWRnQVn3EI06Qo+YM6xZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMt
MTZhMmQzZTZjOTk0LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMtMTZhMmQzZTZjOTk0
LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv7GzsjB
l5c0e2abJRPKQCZvmwnj1b76P5JvEISOY7kJFuxEnWRe1x/gIuH9Ow2aIurfT1AK
MazqYB1AkOtfcebFVYHrvnR5YOR8GDjaSyh1d09DF8A55KahDeXgUIQNeLA2OcW8
XmRREImgDLK9fgnkvXYQxRUVlrQMFNdjAOfjP9jXbxnqvi1LutWyPTyWyRPOwgK/
lvZ/IHEsXxivjBCVbUZOWeKNJJ8MXNr3DhGgwWiBtmveh98RCLb/gfXFA3NNkNPL
l0lDzUu8L4i6t7YtVZk7ywUpD+zhE2NQHhbeQiWb8ROEevahHvA/jCaeCfUEm+rf
GaLDoxTBXv3WfA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:43 2025 by rpki-client