Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: rJJMPYa4zsm3mMoFzKnkR1IngBbw0fLTALg2ElLoLsQ=
Subject key identifier: AD:00:FD:17:4F:C8:66:7C:AE:E3:43:3D:CB:F4:6F:79:04:E7:FA:FD
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019A4D73EEDF6FB4997CF4BC86B5F560222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: H4aUS8d6QfVHJPC30f6isp8e9U9yBZ81ZJE93KPQ/uk=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ee:df:6f:b4:99:7c:f4:bc:86:b5:f5:60:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=ad00fd174fc8667caee3433dcbf46f7904e7fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:0f:39:58:12:11:6f:0a:53:eb:d5:f8:05:
42:99:d4:5f:48:0b:14:e6:e7:08:ce:55:cd:c0:7f:
1c:2c:18:66:11:4c:82:40:99:d3:99:e9:28:54:64:
cf:2d:56:b0:2d:1d:6d:4b:55:ca:f8:88:38:4d:57:
8f:37:d8:3e:0b:6b:33:94:c6:f0:15:3b:9e:b0:bd:
d1:0d:6b:a7:e0:4d:be:29:5c:40:7b:b1:f6:ef:ed:
88:6b:22:ee:7e:e2:bf:ef:d1:6e:a8:62:de:50:d2:
40:95:ce:fc:81:57:e2:b7:d4:31:24:5f:f2:6f:ea:
c7:fe:c5:66:72:a6:20:ac:24:c9:64:96:a8:d5:e5:
53:c8:0d:2f:06:eb:4c:0c:c8:94:7d:b6:40:b6:56:
7f:bd:c6:c0:4d:21:37:dc:40:9d:b1:64:f5:14:24:
07:e2:f6:29:33:a1:63:2d:61:a5:c3:d4:7f:0f:a4:
20:8f:81:cf:f4:cc:4b:65:3a:9d:9e:56:ca:7b:fe:
57:07:95:dc:3a:b9:f5:93:2b:6e:28:7f:12:4b:02:
5a:9e:89:7e:18:63:48:85:ec:09:dd:0a:19:7b:23:
e0:3c:4e:1f:4e:db:b1:d9:c8:ec:dd:83:ba:c5:3b:
69:11:8d:48:a0:87:1a:3d:3c:42:bc:09:15:65:47:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:FD:17:4F:C8:66:7C:AE:E3:43:3D:CB:F4:6F:79:04:E7:FA:FD
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:aa:24:cd:e2:52:83:70:56:e4:31:0c:07:aa:9b:33:b2:1e:
04:52:41:d5:06:71:8f:5c:54:d6:1a:ed:9c:4e:75:19:e1:40:
26:10:69:90:c0:4f:21:ec:77:a2:9c:9d:57:2f:6a:69:ea:79:
77:4b:ac:d3:bd:f3:23:74:23:fc:ae:e4:1e:e5:47:91:94:16:
70:39:f0:e3:ef:b0:19:39:d0:db:81:cc:87:f6:a7:03:fb:0d:
77:a0:7b:52:73:48:87:0b:84:29:f6:bf:7f:92:f5:3f:27:5b:
ff:37:11:96:08:73:62:f8:69:59:9e:f9:24:ef:e9:9d:24:fb:
09:a7:f5:33:bf:2f:f2:2f:6b:5f:0b:4b:fe:a7:df:ab:5c:02:
3d:38:d1:44:18:ee:a5:9c:8c:36:fa:27:8f:af:d4:08:e7:f2:
b7:9b:3c:bc:fc:00:de:82:91:4c:45:7f:53:92:29:23:43:c2:
3a:9d:59:c1:60:81:62:76:0b:6e:29:61:71:fe:0e:e0:83:c3:
57:95:fb:65:67:8a:a5:21:ed:26:16:32:5e:7d:16:85:14:fd:
9a:6e:9e:df:9e:d8:d3:94:7d:76:15:34:52:20:13:2f:bd:61:
f6:df:59:6f:bd:12:4c:2b:78:84:87:c8:f2:c5:36:1e:2b:5d:
a5:9a:8a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+7fb7SZfPS8hrX1YCIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjUxMTA0MDYwMDM0WhcNMjUxMTA1MDYwMDM0WjAzMTEwLwYDVQQD
EyhhZDAwZmQxNzRmYzg2NjdjYWVlMzQzM2RjYmY0NmY3OTA0ZTdmYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AIPOVgSEW8KU+vV+AVCmdRfSAsU
5ucIzlXNwH8cLBhmEUyCQJnTmekoVGTPLVawLR1tS1XK+Ig4TVePN9g+C2szlMbw
FTuesL3RDWun4E2+KVxAe7H27+2IayLufuK/79FuqGLeUNJAlc78gVfit9QxJF/y
b+rH/sVmcqYgrCTJZJao1eVTyA0vButMDMiUfbZAtlZ/vcbATSE33ECdsWT1FCQH
4vYpM6FjLWGlw9R/D6Qgj4HP9MxLZTqdnlbKe/5XB5XcOrn1kytuKH8SSwJanol+
GGNIhewJ3QoZeyPgPE4fTtux2cjs3YO6xTtpEY1IoIcaPTxCvAkVZUcBJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0A/RdPyGZ8ruNDPcv0b3kE5/r9MB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqokzeJS
g3BW5DEMB6qbM7IeBFJB1QZxj1xU1hrtnE51GeFAJhBpkMBPIex3opydVy9qaep5
d0us073zI3Qj/K7kHuVHkZQWcDnw4++wGTnQ24HMh/anA/sNd6B7UnNIhwuEKfa/
f5L1Pydb/zcRlghzYvhpWZ75JO/pnST7Caf1M78v8i9rXwtL/qffq1wCPTjRRBju
pZyMNvonj6/UCOfyt5s8vPwA3oKRTEV/U5IpI0PCOp1ZwWCBYnYLbilhcf4O4IPD
V5X7ZWeKpSHtJhYyXn0WhRT9mm6e357Y05R9dhU0UiATL71h9t9Zb70STCt4hIfI
8sU2HitdpZqKkA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:17 2025 by rpki-client