Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: HOputK0GGEY/HKUDG4D7+bkCgCD8DL2265TkffoKR/w=
Subject key identifier: 43:0E:C3:34:69:15:B6:D1:AF:EE:1E:BB:A8:27:91:FB:CF:B2:87:04
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019A5375F856A90DAB3650478C0A56694472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0233
Signing time: Wed 05 Nov 2025 10:00:31 +0000
Manifest this update: Wed 05 Nov 2025 10:00:31 +0000
Manifest next update: Thu 06 Nov 2025 10:00:31 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: GWvJZSd5wnVgrsWZ42xsG67xjT/DzlmOE5nE/9ZmAlo=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:f8:56:a9:0d:ab:36:50:47:8c:0a:56:69:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Nov 5 10:00:31 2025 GMT
Not After : Nov 6 10:00:31 2025 GMT
Subject: CN=430ec3346915b6d1afee1ebba82791fbcfb28704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:e4:d6:8f:4a:8d:97:20:e0:79:f8:2f:30:
7c:b6:35:04:09:39:a7:33:69:4e:27:68:e6:7d:65:
1e:58:f4:cb:49:6a:bf:e2:8e:30:67:e6:a4:ac:e1:
5e:36:25:64:d2:79:cf:fc:eb:c7:2b:f3:61:d6:22:
fc:a4:45:e0:64:99:b5:09:34:8f:e0:89:40:3b:b3:
a8:f6:52:e1:41:99:70:a8:c7:1f:35:77:04:d3:93:
52:bf:e0:57:c2:94:1f:ed:3b:cd:ce:bf:a7:41:ce:
c1:a1:4d:6a:53:9f:2d:29:49:36:d7:5c:ac:d1:c0:
53:65:5e:ad:ed:38:ed:6c:d8:01:c6:e2:47:a3:68:
03:14:13:21:39:a7:90:c3:f4:15:1b:e5:16:04:f4:
db:1c:75:c1:62:fd:50:d1:0f:e0:0d:df:a8:3a:bb:
ed:27:41:c9:d9:77:56:04:6a:12:5d:cf:95:6b:e6:
f6:0b:2c:0b:cf:f8:09:c7:40:82:10:6c:5c:2b:fe:
fd:a3:8f:f8:99:72:2f:ec:3e:64:99:db:db:0a:ba:
18:76:6c:92:35:c7:f1:b2:cd:98:5d:7e:2a:0e:1a:
ed:a2:0a:e7:45:5e:c9:28:7f:a9:15:52:f0:f9:84:
95:76:fd:e7:87:4e:eb:78:b4:86:70:38:66:cf:af:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:C3:34:69:15:B6:D1:AF:EE:1E:BB:A8:27:91:FB:CF:B2:87:04
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:6f:a1:2d:9a:0d:ce:5e:31:8b:08:6b:46:ae:84:0b:7f:
33:70:7e:5c:1d:22:7b:39:8f:c6:42:7c:13:30:42:d9:30:a6:
43:46:85:fa:21:40:50:64:c7:df:d1:e5:28:15:9f:3c:a0:2f:
e8:de:97:ae:a4:87:54:17:46:52:f8:4b:0c:0c:24:98:84:d3:
27:0d:dd:a5:90:74:75:36:7e:88:d0:88:af:b0:ed:98:87:9e:
fb:60:d7:a0:47:b1:1b:8a:bb:93:08:e1:7d:c1:b2:1c:18:b0:
b6:c6:0a:41:4a:a0:13:ee:d4:da:e0:5e:84:f0:69:82:69:8c:
9d:38:51:4f:ac:b9:c0:c0:b7:05:83:1d:33:6d:61:f4:d9:55:
a8:c1:47:e6:9b:8c:55:2d:8e:1c:a5:2d:07:83:7f:bc:94:7d:
ee:1e:67:be:90:6d:7d:e5:3b:3c:ca:9a:53:69:d1:10:1a:18:
c9:67:be:63:2f:93:ad:6e:9a:45:f3:a6:bb:1f:7e:37:a0:aa:
93:3d:48:fe:fa:fc:90:0b:ed:c3:00:fc:26:ab:e5:14:88:fd:
26:0b:e9:31:7e:ae:97:06:97:ff:3e:51:76:76:6a:17:94:70:
9c:80:0f:d3:3d:51:54:2b:0c:d6:54:25:6b:af:75:d6:c3:d7:
92:11:d0:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdfhWqQ2rNlBHjApWaURyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj
ZWYzMWYwHhcNMjUxMTA1MTAwMDMxWhcNMjUxMTA2MTAwMDMxWjAzMTEwLwYDVQQD
Eyg0MzBlYzMzNDY5MTViNmQxYWZlZTFlYmJhODI3OTFmYmNmYjI4NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsDk1o9KjZcg4Hn4LzB8tjUECTmn
M2lOJ2jmfWUeWPTLSWq/4o4wZ+akrOFeNiVk0nnP/OvHK/Nh1iL8pEXgZJm1CTSP
4IlAO7Oo9lLhQZlwqMcfNXcE05NSv+BXwpQf7TvNzr+nQc7BoU1qU58tKUk211ys
0cBTZV6t7TjtbNgBxuJHo2gDFBMhOaeQw/QVG+UWBPTbHHXBYv1Q0Q/gDd+oOrvt
J0HJ2XdWBGoSXc+Va+b2CywLz/gJx0CCEGxcK/79o4/4mXIv7D5kmdvbCroYdmyS
Ncfxss2YXX4qDhrtogrnRV7JKH+pFVLw+YSVdv3nh07reLSGcDhmz698+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMOwzRpFbbRr+4eu6gnkfvPsocEMB8GA1UdIwQY
MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt
ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3
LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvBvoS2a
Dc5eMYsIa0auhAt/M3B+XB0iezmPxkJ8EzBC2TCmQ0aF+iFAUGTH39HlKBWfPKAv
6N6XrqSHVBdGUvhLDAwkmITTJw3dpZB0dTZ+iNCIr7DtmIee+2DXoEexG4q7kwjh
fcGyHBiwtsYKQUqgE+7U2uBehPBpgmmMnThRT6y5wMC3BYMdM21h9NlVqMFH5puM
VS2OHKUtB4N/vJR97h5nvpBtfeU7PMqaU2nREBoYyWe+Yy+TrW6aRfOmux9+N6Cq
kz1I/vr8kAvtwwD8JqvlFIj9JgvpMX6ulwaX/z5RdnZqF5RwnIAP0z1RVCsM1lQl
a6911sPXkhHQlw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:58:39 2025 by rpki-client