Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: Ekao5CQF/y8wyrpIuErKmO16s2kmHdQZCyx8d1zM3CM=
Subject key identifier: A5:91:DD:25:C7:DA:E2:A6:A5:3C:82:CF:DE:52:9C:16:6E:CD:FC:56
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019A5564428A7F3550101344E507D683FBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0234
Signing time: Wed 05 Nov 2025 19:00:25 +0000
Manifest this update: Wed 05 Nov 2025 19:00:25 +0000
Manifest next update: Thu 06 Nov 2025 19:00:25 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: 24wxLoOsC/uS/Ut499HjSqiZASmeq184HJSjZsVWA3A=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:42:8a:7f:35:50:10:13:44:e5:07:d6:83:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Nov 5 19:00:25 2025 GMT
Not After : Nov 6 19:00:25 2025 GMT
Subject: CN=a591dd25c7dae2a6a53c82cfde529c166ecdfc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:a3:de:b7:09:60:7b:23:27:c4:45:82:bf:
8c:97:21:f0:f9:2f:dc:3c:78:bd:73:7e:71:12:3f:
ec:06:01:e8:dd:06:6d:dd:8e:ab:43:01:70:4a:23:
97:fa:6a:58:bd:98:01:46:35:af:85:78:f4:4e:af:
6d:26:49:2f:a3:75:25:a6:80:fa:37:96:6f:78:e7:
f7:1f:b0:f1:aa:5f:62:ae:bc:df:ca:c3:2e:d0:8b:
1e:9f:9b:8d:91:01:42:ff:10:eb:d3:4c:75:3c:f7:
83:20:dc:d8:96:c8:b1:34:ea:9b:1b:6d:d2:84:66:
7a:a3:b4:20:1f:76:4f:45:79:1c:ea:3b:2c:5e:b7:
c8:46:a2:55:92:7d:f4:a4:d5:91:bf:53:97:87:ba:
d4:b2:d5:a1:5d:99:52:0e:97:04:13:88:f7:c0:18:
82:ba:65:47:b7:2c:e2:b0:69:18:1c:04:0c:3c:eb:
f3:e9:72:be:ba:7e:1b:30:99:af:50:23:46:a4:9d:
42:bf:74:e1:9e:d5:88:b5:49:ed:77:d9:17:63:3b:
52:bf:21:d4:f6:f1:2e:28:8e:60:29:b5:89:11:5c:
3b:74:90:a4:93:ec:1d:76:b9:3f:f8:9d:d7:ca:1a:
29:a1:89:b7:ca:85:3b:3b:aa:b9:b4:ed:76:7c:c3:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:DD:25:C7:DA:E2:A6:A5:3C:82:CF:DE:52:9C:16:6E:CD:FC:56
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:75:cf:5e:67:dc:e0:08:bc:0f:63:60:e5:8e:3d:ed:bd:e2:
87:1d:ad:6d:42:82:9e:31:34:dd:65:96:ce:c3:ea:c8:a2:89:
04:a6:6e:c8:98:c9:4b:b6:86:0d:50:ec:01:50:20:ee:58:06:
bb:5f:9a:9e:1e:8b:8b:da:e5:35:6c:01:69:11:ac:78:0a:8b:
13:c3:5c:39:d2:5f:79:50:93:ba:8f:da:82:e6:dd:c3:1c:1b:
04:27:1c:e5:1d:8b:c1:32:49:6a:21:55:50:d7:e9:a7:cb:cd:
75:e0:d6:00:a7:da:6f:33:96:bb:3e:2f:6e:dd:eb:04:5f:e3:
e1:af:ce:23:1f:ab:34:02:d3:70:c6:17:ba:9d:e9:1c:0b:cd:
83:dc:dc:be:f4:00:88:a1:0f:07:31:de:cf:41:7e:57:c1:56:
63:9b:6f:5d:16:58:9d:ac:12:dc:d3:c3:bd:66:07:4b:df:42:
f0:5e:3f:ce:6d:ee:59:51:55:15:f8:65:7b:72:43:6b:7c:96:
be:84:77:1b:af:ad:d1:09:ee:ff:16:bc:98:fd:b9:96:df:31:
4f:01:9f:a9:ed:31:cd:e0:8b:9d:77:38:c1:e7:2f:f3:c9:73:
63:c5:03:43:21:51:f3:bf:39:8c:9f:e3:70:06:ca:04:db:cd:
86:5d:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:32 2025 by rpki-client