Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: lsx/PDsk7wAR9H1iOCo4X7cjtX/9GYYcxNRPx3euGqA=
Subject key identifier: B4:45:67:11:FA:1B:83:61:BE:9E:3D:C6:7F:E0:51:70:17:E0:E6:55
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019A53E4048E3D6936D2E75B7E463F73AD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 0255
Signing time: Wed 05 Nov 2025 12:00:43 +0000
Manifest this update: Wed 05 Nov 2025 12:00:43 +0000
Manifest next update: Thu 06 Nov 2025 12:00:43 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: Oh3mEBpKNzL8PxunreQwUbysa8Eh9F8s93v2TyaLF0Q=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:04:8e:3d:69:36:d2:e7:5b:7e:46:3f:73:ad:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Nov 5 12:00:43 2025 GMT
Not After : Nov 6 12:00:43 2025 GMT
Subject: CN=b4456711fa1b8361be9e3dc67fe0517017e0e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:72:92:e8:e4:f8:82:94:30:c7:70:5e:6b:
eb:ef:0a:9a:e0:53:2b:e8:68:54:ab:ed:0d:1d:52:
4d:92:90:f0:5e:e4:08:73:3c:cb:c7:97:e7:6d:71:
72:61:e3:05:2d:a8:66:43:7f:fc:59:ab:b1:a4:73:
6b:41:b8:95:ab:0e:b3:56:15:0a:6a:aa:83:bf:44:
df:e6:a0:7d:08:34:7c:7b:b1:50:1d:1b:c8:fb:65:
ec:e7:f1:6f:40:e8:e9:69:53:b7:86:fa:65:80:30:
a6:8d:5a:3c:41:73:8c:9c:e6:a7:79:5f:0b:91:8f:
8b:74:6e:2c:7a:ba:f0:3e:d3:b6:9a:10:40:0a:73:
9d:d0:fb:92:26:83:d8:43:e6:a7:5d:f4:c1:ae:0e:
32:17:39:de:43:4f:83:98:07:89:68:cc:59:0d:1a:
9f:95:5c:92:f6:e5:b2:aa:ed:42:43:32:ba:d8:0d:
a0:eb:a4:03:03:75:a4:71:5d:fb:3d:af:ad:f6:aa:
97:b3:6f:1a:ab:73:23:5c:85:b8:5c:9e:a1:6f:7b:
86:af:ea:fa:34:e3:3a:b3:5e:8c:49:a2:00:03:d1:
87:27:f9:02:86:1a:2d:af:3c:5e:ed:ea:50:e3:8e:
f6:c2:c5:5f:14:c3:68:c3:64:ea:cd:29:e7:03:40:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:45:67:11:FA:1B:83:61:BE:9E:3D:C6:7F:E0:51:70:17:E0:E6:55
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:70:13:1c:d4:d6:a3:06:08:fe:10:9f:21:1e:ac:c9:31:1b:
9e:17:49:22:c1:23:07:4f:2d:00:8d:07:46:be:4a:fa:fb:c3:
39:24:f6:28:e5:50:ad:fc:75:a9:0d:5a:33:33:25:59:ac:4b:
e6:70:1a:57:ff:68:16:82:eb:5a:24:3a:cb:16:d7:93:c9:f3:
b0:c5:e1:96:2e:e3:dc:ae:d7:fe:e8:ba:6e:9a:45:04:8a:fa:
dd:e7:32:8e:30:c1:7e:76:c5:4f:02:3d:89:c6:27:8a:a1:3d:
1d:e0:7a:b8:5d:a2:0a:a0:f4:c6:0f:23:16:52:a9:9c:b5:63:
67:f2:cc:74:62:1b:d7:7d:89:3a:51:14:1d:0d:2c:f5:14:47:
4c:9b:15:fa:82:e4:1d:6a:28:5f:6d:f1:d3:51:55:9d:e1:52:
05:64:23:21:36:6a:63:42:2c:4b:03:a2:b5:ec:3e:9b:b3:da:
da:a6:0f:1c:dc:73:76:fa:a7:b1:8b:59:5c:07:cf:c4:03:f5:
fe:84:74:f3:46:6b:85:80:d6:c2:51:2c:2a:67:b4:f0:ec:f5:
79:bc:9f:b2:10:90:1f:f7:46:2d:33:d5:2f:13:8e:60:a9:c3:
4b:c6:70:fa:f8:3b:de:ba:79:54:4e:82:46:82:4e:de:7a:ff:
d9:80:e2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5ASOPWk20udbfkY/c60HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjUxMTA1MTIwMDQzWhcNMjUxMTA2MTIwMDQzWjAzMTEwLwYDVQQD
EyhiNDQ1NjcxMWZhMWI4MzYxYmU5ZTNkYzY3ZmUwNTE3MDE3ZTBlNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKRykujk+IKUMMdwXmvr7wqa4FMr
6GhUq+0NHVJNkpDwXuQIczzLx5fnbXFyYeMFLahmQ3/8WauxpHNrQbiVqw6zVhUK
aqqDv0Tf5qB9CDR8e7FQHRvI+2Xs5/FvQOjpaVO3hvplgDCmjVo8QXOMnOaneV8L
kY+LdG4serrwPtO2mhBACnOd0PuSJoPYQ+anXfTBrg4yFzneQ0+DmAeJaMxZDRqf
lVyS9uWyqu1CQzK62A2g66QDA3WkcV37Pa+t9qqXs28aq3MjXIW4XJ6hb3uGr+r6
NOM6s16MSaIAA9GHJ/kChhotrzxe7epQ4472wsVfFMNow2TqzSnnA0AfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRFZxH6G4Nhvp49xn/gUXAX4OZVMB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3ATHNTW
owYI/hCfIR6syTEbnhdJIsEjB08tAI0HRr5K+vvDOST2KOVQrfx1qQ1aMzMlWaxL
5nAaV/9oFoLrWiQ6yxbXk8nzsMXhli7j3K7X/ui6bppFBIr63ecyjjDBfnbFTwI9
icYniqE9HeB6uF2iCqD0xg8jFlKpnLVjZ/LMdGIb132JOlEUHQ0s9RRHTJsV+oLk
HWooX23x01FVneFSBWQjITZqY0IsSwOitew+m7Pa2qYPHNxzdvqnsYtZXAfPxAP1
/oR080ZrhYDWwlEsKme08Oz1ebyfshCQH/dGLTPVLxOOYKnDS8Zw+vg73rp5VE6C
RoJO3nr/2YDigg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:27 2025 by rpki-client