Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier: Ik8IudTOdf9x6CNd7dYDA8L/IlEpY0hzz+9+1PqqZco=
Subject key identifier: 54:68:9B:F7:79:B1:EE:0F:38:8B:12:54:E7:2B:68:2C:D5:08:16:A1
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 019A4E86A487388FAE09D385858998DF36FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number: 081D
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=)
2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: /izhz6DZyw1iqLvS58dFD8uKKr8V+dqodhK6/YOF6TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a4:87:38:8f:ae:09:d3:85:85:89:98:df:36:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=54689bf779b1ee0f388b1254e72b682cd50816a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:53:5d:32:2f:6c:3c:fa:2d:79:fd:35:b6:
18:00:08:4b:a2:ad:99:b0:96:3a:94:d6:14:ec:42:
dd:83:72:31:11:24:17:81:e6:02:64:b2:1e:8a:88:
4d:5e:f9:2e:f4:9e:de:d4:de:86:96:0e:2e:8e:22:
49:ce:f8:3f:22:59:c8:26:4b:42:7a:9c:87:dd:bb:
6e:b4:9d:01:c1:6d:50:3c:20:11:64:ca:1f:2c:13:
32:30:61:56:c0:47:6a:10:60:ba:32:b6:63:8d:7f:
62:61:36:ee:98:84:c1:5f:61:e2:3f:2b:8a:70:9a:
cd:9c:51:3a:69:9a:0f:aa:88:1a:a0:ff:36:a6:82:
a6:07:f5:dc:99:6b:47:23:b2:0f:52:e5:b3:2c:3e:
05:5a:24:9b:80:ae:6e:7f:43:57:f1:14:ce:e1:2b:
08:67:b6:09:f9:5d:56:95:b6:9c:3f:a9:20:7e:04:
a4:8f:ac:f8:6c:f4:ad:35:26:30:36:b2:34:9b:91:
da:27:c1:10:a5:b8:cd:76:84:5d:e9:fc:6d:27:50:
26:b5:77:10:9e:86:0b:bc:a7:0d:70:70:94:5c:89:
5b:40:88:f7:b0:77:84:4b:b8:06:2d:16:90:16:4f:
14:2c:55:53:b0:63:c2:f6:b6:88:2f:bb:40:45:9d:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:9B:F7:79:B1:EE:0F:38:8B:12:54:E7:2B:68:2C:D5:08:16:A1
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:b3:8b:0e:92:26:c0:9a:90:7c:f8:66:6e:4f:65:82:95:
ef:41:88:8f:14:f5:4b:85:98:5b:fa:88:f5:ea:0d:34:39:93:
00:0d:3e:f9:31:0f:da:f5:f5:8c:60:94:a0:99:af:8e:b2:44:
e7:c9:ea:a0:d6:5f:a9:7b:9e:e6:f6:1c:57:38:87:f2:1d:cb:
fc:d7:09:f6:2e:53:32:e6:6b:8d:ee:dc:9b:88:90:3a:05:b2:
0f:dc:e9:b8:9a:93:89:cf:3f:da:0d:99:b7:15:5d:9c:5c:9e:
ad:51:2d:c7:1a:88:57:9c:12:7f:89:e5:91:08:82:d4:df:3b:
a0:e9:6d:a0:01:4e:14:13:bc:ca:07:d5:6a:96:b6:34:4d:bc:
b4:ae:b9:86:80:87:bb:2c:8e:04:b6:de:2a:8a:71:7f:91:4e:
9e:0b:49:c3:e8:a0:7b:35:5e:19:7a:af:29:57:d0:b5:d4:b6:
19:69:b5:94:b1:3b:2e:d7:d1:70:10:31:e5:47:c1:b5:ce:aa:
34:10:9a:6d:78:7a:56:66:e7:04:36:b7:dc:28:0c:58:36:b6:
df:fe:8b:6e:91:77:94:ff:da:f4:e3:5e:ec:98:c9:31:2e:20:
44:2d:60:b5:fb:22:0e:b1:78:33:b5:55:32:c6:24:74:79:77:
a2:20:46:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqSHOI+uCdOFhYmY3zb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTFkNDU1MWQyNmE1MWMwZjkyYjc3YzJkMzc4ZmIzNDc1
OGI4NzcwHhcNMjUxMTA0MTEwMDM4WhcNMjUxMTA1MTEwMDM4WjAzMTEwLwYDVQQD
Eyg1NDY4OWJmNzc5YjFlZTBmMzg4YjEyNTRlNzJiNjgyY2Q1MDgxNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCdTXTIvbDz6LXn9NbYYAAhLoq2Z
sJY6lNYU7ELdg3IxESQXgeYCZLIeiohNXvku9J7e1N6Glg4ujiJJzvg/IlnIJktC
epyH3btutJ0BwW1QPCARZMofLBMyMGFWwEdqEGC6MrZjjX9iYTbumITBX2HiPyuK
cJrNnFE6aZoPqogaoP82poKmB/XcmWtHI7IPUuWzLD4FWiSbgK5uf0NX8RTO4SsI
Z7YJ+V1WlbacP6kgfgSkj6z4bPStNSYwNrI0m5HaJ8EQpbjNdoRd6fxtJ1AmtXcQ
noYLvKcNcHCUXIlbQIj3sHeES7gGLRaQFk8ULFVTsGPC9raIL7tARZ2mmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRom/d5se4POIsSVOcraCzVCBahMB8GA1UdIwQY
MBaAFGlR1FUdJqUcD5K3fC03j7NHWLh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAt
YTJlZGE5NDZlZDI5LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAtYTJlZGE5NDZlZDI5
LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9eziw6S
JsCakHz4Zm5PZYKV70GIjxT1S4WYW/qI9eoNNDmTAA0++TEP2vX1jGCUoJmvjrJE
58nqoNZfqXue5vYcVziH8h3L/NcJ9i5TMuZrje7cm4iQOgWyD9zpuJqTic8/2g2Z
txVdnFyerVEtxxqIV5wSf4nlkQiC1N87oOltoAFOFBO8ygfVapa2NE28tK65hoCH
uyyOBLbeKopxf5FOngtJw+igezVeGXqvKVfQtdS2GWm1lLE7LtfRcBAx5UfBtc6q
NBCabXh6VmbnBDa33CgMWDa23/6LbpF3lP/a9ONe7JjJMS4gRC1gtfsiDrF4M7VV
MsYkdHl3oiBGBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:52 2025 by rpki-client