Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: a+175F1GX2dYRKwHBnSoINuFcvMTUA1N1jKsuP4mTng=
Subject key identifier: 11:FB:1C:09:D2:79:34:2D:76:1F:B9:EA:9E:54:8D:AA:A6:49:E4:87
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019A4DE22498E4CAA5CF68F51D18C8BFBDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0727
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: wt5cmxVHWLwUCnu70lJAO3se1sl7DsFRAguOIu2efuc=)
2: qq8J_fEHI4G11qkKijWQISK00G0.roa (hash: RMB75Z9HEAqFVlcsv+x1Xsp/vs4KwqhHTjxwNb+JGOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:24:98:e4:ca:a5:cf:68:f5:1d:18:c8:bf:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=11fb1c09d279342d761fb9ea9e548daaa649e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:2d:2f:ea:be:19:b2:a8:bc:f6:23:04:02:
1a:4e:d0:e7:7a:51:cf:ed:d8:ae:b4:1d:46:77:7c:
59:0c:26:f1:f5:59:b4:90:98:b7:4f:78:6c:3d:68:
a3:42:fe:01:d2:4b:d2:4c:b0:31:1e:61:c3:ac:28:
7e:6e:84:1f:37:71:52:1d:7c:77:83:20:54:50:88:
04:58:7a:c7:ae:16:19:ad:f1:4a:b0:70:91:d3:e7:
3e:24:35:ac:70:3e:40:27:15:b6:eb:c9:d1:3a:37:
d4:b0:db:6c:ba:df:e2:22:e2:e9:72:6c:08:81:75:
1c:dc:c3:dc:dc:79:53:b4:52:92:51:86:25:a4:e6:
69:4a:9b:46:9f:db:b6:38:92:d9:f6:3a:d0:61:90:
e2:c8:0b:69:d1:03:46:2b:7b:fd:a1:8a:83:1a:a3:
4d:31:26:86:b2:e6:fb:13:ee:fc:46:75:68:77:8d:
2a:14:af:0c:76:85:67:0d:23:b6:c4:fd:cb:8b:e4:
d7:23:f9:81:7f:b6:8b:8b:c0:f7:0b:90:f0:8f:ba:
77:28:54:44:ab:38:00:bf:d5:15:eb:b6:d0:a5:28:
00:50:45:73:d9:5a:a2:72:06:04:60:7d:14:e8:04:
ab:a2:c4:5c:97:d7:b9:c7:12:5c:33:d9:c3:d6:70:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:1C:09:D2:79:34:2D:76:1F:B9:EA:9E:54:8D:AA:A6:49:E4:87
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:84:52:3c:b6:1d:a6:e7:da:e4:4f:e6:0d:7c:67:51:59:
04:d9:83:00:fe:9d:fc:5a:ab:23:d8:ee:e7:3d:f8:c8:60:0b:
4f:6e:05:75:6d:b6:c2:43:5a:76:7c:6f:60:6f:0a:57:85:63:
77:1a:d7:68:54:f8:90:13:4b:85:3b:5c:b0:34:c9:2c:f9:1c:
68:fc:fd:91:30:25:69:1e:6e:47:a1:3e:ab:e4:a5:36:1c:b2:
81:5b:1f:93:0e:96:9d:fe:b5:18:2f:48:7d:bc:9c:fb:ae:36:
19:28:c9:fd:8a:5f:38:f1:03:d6:b0:6c:a3:31:6e:73:7f:4c:
af:e7:c3:7c:6b:62:35:46:d9:3f:71:04:df:79:3c:42:ea:be:
68:0c:2f:45:39:79:02:9b:67:37:11:69:19:f6:76:e7:88:de:
4b:b6:89:e6:b0:cc:58:0b:59:69:b0:04:f5:03:41:68:e6:3c:
67:4c:fe:b6:48:c3:83:46:63:fb:a0:3a:c5:57:51:8c:7a:87:
b9:99:55:e2:b8:6f:3a:77:8c:b3:74:fa:d9:78:fb:f3:de:13:
f0:58:ed:05:3a:a0:c4:75:c5:59:c2:1e:cf:9b:12:32:a7:33:
4c:87:ee:69:5a:f4:50:74:be:e4:7e:41:3f:54:84:f3:b1:d3:
1e:58:a1:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4iSY5Mqlz2j1HRjIv73+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWJiZDU0MjkxMmE2NmZlZTZhMzQxMjhhM2E4Y2Y3MDk3
ZGM2OWIwHhcNMjUxMTA0MDgwMDU3WhcNMjUxMTA1MDgwMDU3WjAzMTEwLwYDVQQD
EygxMWZiMWMwOWQyNzkzNDJkNzYxZmI5ZWE5ZTU0OGRhYWE2NDllNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OUtL+q+GbKovPYjBAIaTtDnelHP
7diutB1Gd3xZDCbx9Vm0kJi3T3hsPWijQv4B0kvSTLAxHmHDrCh+boQfN3FSHXx3
gyBUUIgEWHrHrhYZrfFKsHCR0+c+JDWscD5AJxW268nROjfUsNtsut/iIuLpcmwI
gXUc3MPc3HlTtFKSUYYlpOZpSptGn9u2OJLZ9jrQYZDiyAtp0QNGK3v9oYqDGqNN
MSaGsub7E+78RnVod40qFK8MdoVnDSO2xP3Li+TXI/mBf7aLi8D3C5Dwj7p3KFRE
qzgAv9UV67bQpSgAUEVz2VqicgYEYH0U6ASrosRcl9e5xxJcM9nD1nCszQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH7HAnSeTQtdh+56p5UjaqmSeSHMB8GA1UdIwQY
MBaAFGlbvVQpEqZv7mo0Eoo6jPcJfcabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgt
OTgxNmM2N2E5MjYyLzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgtOTgxNmM2N2E5MjYy
LzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSaEUjy2
Habn2uRP5g18Z1FZBNmDAP6d/FqrI9ju5z34yGALT24FdW22wkNadnxvYG8KV4Vj
dxrXaFT4kBNLhTtcsDTJLPkcaPz9kTAlaR5uR6E+q+SlNhyygVsfkw6Wnf61GC9I
fbyc+642GSjJ/YpfOPED1rBsozFuc39Mr+fDfGtiNUbZP3EE33k8Quq+aAwvRTl5
AptnNxFpGfZ254jeS7aJ5rDMWAtZabAE9QNBaOY8Z0z+tkjDg0Zj+6A6xVdRjHqH
uZlV4rhvOneMs3T62Xj7894T8FjtBTqgxHXFWcIez5sSMqczTIfuaVr0UHS+5H5B
P1SE87HTHlihSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:16 2025 by rpki-client