Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File: AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier: iLFxpUw/g1Lcqfl5QS+keqWCAyOjaCQPDbvF9Fd/i+o=
Subject key identifier: B4:2F:DB:BD:78:7D:38:3D:82:5C:01:7F:07:CB:20:57:33:AF:F6:28
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 019A4F2B7F69C4B21F37C94699A50B541BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number: 15A3
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: lKO3d6A6696nVKA4sdRItCTCHWBXbuI5OU+186mCr+M=)
2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7f:69:c4:b2:1f:37:c9:46:99:a5:0b:54:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=b42fdbbd787d383d825c017f07cb205733aff628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:c5:fe:37:d7:d2:2f:be:a8:97:3f:e3:13:
19:12:64:4d:6d:7b:77:be:37:ee:85:0b:a9:f7:4c:
f6:8e:9c:38:48:a9:50:b0:cc:fc:41:9a:89:34:c6:
97:2f:bb:06:f1:45:f2:95:84:94:23:d6:24:6c:de:
da:a0:9c:49:17:5c:35:61:d7:f4:c9:01:c6:be:30:
68:b9:08:d3:9b:74:66:0e:51:d3:93:f4:67:20:d3:
9e:b2:63:d9:e5:d1:6e:dd:1e:73:39:0f:cf:8b:f5:
be:44:26:f0:16:44:8d:0a:80:b7:be:c9:d0:f1:32:
8f:6b:7f:40:50:5a:b3:fe:5c:8b:4f:bd:b0:9d:8a:
7d:c9:70:8a:63:d1:25:4f:9e:a2:ab:a4:9a:61:77:
75:a4:78:23:11:6f:c3:5c:bd:e4:00:84:4f:e4:e6:
6c:d0:da:fe:41:56:ed:32:12:58:ef:48:c6:96:af:
b7:f7:0d:6e:61:d9:a1:d2:bd:87:63:b1:e9:f5:4a:
b8:b7:06:e1:f0:b4:72:96:d6:a3:24:21:3b:b9:17:
58:6c:98:e7:8b:1c:90:02:21:35:fd:78:56:df:1d:
ce:6c:a6:7f:c5:9e:5f:73:0c:6d:df:c0:f5:22:75:
79:b6:59:15:0c:19:64:70:73:be:fc:7d:7c:e8:cc:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:DB:BD:78:7D:38:3D:82:5C:01:7F:07:CB:20:57:33:AF:F6:28
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:03:a6:16:96:95:b8:5f:a1:d4:44:b0:24:0c:b4:d0:35:bd:
6e:68:6a:ec:c9:ae:af:86:cb:c1:ec:00:ae:2a:1a:4e:28:fb:
e2:17:ad:22:2d:eb:7b:03:f1:a4:16:8d:a1:b0:69:b7:73:d3:
3e:7e:2f:69:fc:1a:b7:31:84:a7:75:ac:f3:b1:ac:a4:f5:47:
e1:59:40:70:47:2f:ef:98:1c:a0:3f:62:a0:7e:0f:ad:85:0a:
47:d9:75:69:3f:29:ea:d1:d5:40:ae:22:b1:56:61:8f:dc:80:
17:2f:dc:3f:1b:6e:98:d6:5c:f0:60:8d:fa:f5:80:95:b8:b7:
0a:51:02:90:94:8e:b8:98:0f:88:c6:d9:db:96:83:13:64:12:
80:e2:70:01:a1:e1:d7:2c:5f:d3:0f:9a:5c:6b:32:a3:61:31:
a9:86:62:f4:ff:28:e1:91:be:7b:b6:01:5a:76:47:a0:3e:89:
2b:4c:02:03:c1:c7:24:c2:bc:a3:02:31:29:c1:b2:a3:ee:13:
24:fa:56:eb:51:1f:b5:a3:f6:e4:3a:40:1c:5c:7a:92:40:93:
b1:ce:58:43:b1:95:b3:53:b1:a1:cb:2c:5b:47:a0:45:a0:b2:
60:29:82:2a:b6:cc:40:ef:97:a0:2a:8e:a1:e7:5e:98:51:d7:
ce:98:6b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK39pxLIfN8lGmaULVBvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1
ZTc1MTMwHhcNMjUxMTA0MTQwMDQxWhcNMjUxMTA1MTQwMDQxWjAzMTEwLwYDVQQD
EyhiNDJmZGJiZDc4N2QzODNkODI1YzAxN2YwN2NiMjA1NzMzYWZmNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g/F/jfX0i++qJc/4xMZEmRNbXt3
vjfuhQup90z2jpw4SKlQsMz8QZqJNMaXL7sG8UXylYSUI9YkbN7aoJxJF1w1Ydf0
yQHGvjBouQjTm3RmDlHTk/RnINOesmPZ5dFu3R5zOQ/Pi/W+RCbwFkSNCoC3vsnQ
8TKPa39AUFqz/lyLT72wnYp9yXCKY9ElT56iq6SaYXd1pHgjEW/DXL3kAIRP5OZs
0Nr+QVbtMhJY70jGlq+39w1uYdmh0r2HY7Hp9Uq4twbh8LRyltajJCE7uRdYbJjn
ixyQAiE1/XhW3x3ObKZ/xZ5fcwxt38D1InV5tlkVDBlkcHO+/H186MwVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQv2714fTg9glwBfwfLIFczr/YoMB8GA1UdIwQY
MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt
ZDg0YjJiMWU5MTMzLzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz
LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAOmFpaV
uF+h1ESwJAy00DW9bmhq7Mmur4bLwewArioaTij74hetIi3rewPxpBaNobBpt3PT
Pn4vafwatzGEp3Ws87GspPVH4VlAcEcv75gcoD9ioH4PrYUKR9l1aT8p6tHVQK4i
sVZhj9yAFy/cPxtumNZc8GCN+vWAlbi3ClECkJSOuJgPiMbZ25aDE2QSgOJwAaHh
1yxf0w+aXGsyo2ExqYZi9P8o4ZG+e7YBWnZHoD6JK0wCA8HHJMK8owIxKcGyo+4T
JPpW61EftaP25DpAHFx6kkCTsc5YQ7GVs1OxocssW0egRaCyYCmCKrbMQO+XoCqO
oedemFHXzphrTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:40 2025 by rpki-client