Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: xglWkjGLVW5rrSh9yrKYpcUB7jl99nb1rvVoQ6uoQjM=
Subject key identifier: 70:D7:7B:77:94:C1:EE:AC:2E:8F:75:66:AC:36:7F:CB:B6:0F:44:85
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 019A51F5AAB6455EA2B0AC7D2CDEF3F74F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:45 +0000
Manifest this update: Wed 05 Nov 2025 03:00:45 +0000
Manifest next update: Thu 06 Nov 2025 03:00:45 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: gJICO+PbE5s3ERctsTg66kW2VNHm4gdXldl6nQO0p88=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:aa:b6:45:5e:a2:b0:ac:7d:2c:de:f3:f7:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Nov 5 03:00:45 2025 GMT
Not After : Nov 6 03:00:45 2025 GMT
Subject: CN=70d77b7794c1eeac2e8f7566ac367fcbb60f4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:93:23:00:73:a1:7c:aa:60:27:ec:28:f8:
68:b6:c5:fc:7f:b6:85:65:6c:c5:9f:59:4d:43:9e:
24:cf:cc:3c:07:9d:a7:2e:e7:fb:05:74:f9:5e:be:
61:85:df:5d:07:f1:23:47:30:65:ec:14:bb:bf:c8:
c1:fe:74:6c:4a:04:c8:48:bd:e1:9c:57:7f:ae:af:
c2:71:2c:84:1c:c2:15:a0:ad:36:f8:34:92:8b:f6:
aa:b6:d2:83:bc:ec:23:7c:a5:67:42:90:1d:5e:d6:
de:8c:f5:8d:27:f6:de:12:10:b6:1e:2e:c0:97:c2:
8f:73:ad:52:54:3d:66:0f:02:2e:11:aa:be:e2:c6:
5c:52:b9:43:3a:ea:0f:34:2b:1b:5d:c6:ea:44:4e:
d5:24:ae:2b:16:30:bb:71:3f:2c:ae:0f:c7:00:df:
ec:7e:cb:58:e8:5c:68:9f:0f:55:ba:d3:26:18:25:
9d:df:19:a6:6a:41:69:10:20:17:4e:47:a7:07:3c:
e1:2b:34:ac:41:5e:65:5b:05:00:05:67:9f:c8:d6:
e4:11:88:ed:b5:67:ae:2c:66:b9:50:be:bd:fa:63:
bd:e0:d2:23:5c:5c:63:cc:64:88:df:27:ed:ba:3d:
1d:99:96:af:ad:bb:71:43:76:b0:51:70:1b:90:c8:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:7B:77:94:C1:EE:AC:2E:8F:75:66:AC:36:7F:CB:B6:0F:44:85
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:85:1f:e7:04:7c:ec:09:76:2c:18:66:78:0d:dd:c7:63:
4d:50:db:b6:be:c9:6f:e2:a8:49:40:4f:da:2a:78:fa:0d:1a:
66:10:38:69:0e:7f:68:5c:4c:9a:f8:4d:35:11:2a:ae:ab:5a:
b9:f3:d1:d6:eb:6b:d0:e3:00:2d:26:cd:c6:68:0a:0a:5f:84:
6c:9a:f6:c5:97:ec:5f:16:54:68:f3:81:b6:fa:df:6b:33:d2:
0e:bf:c7:db:0c:81:b4:88:19:f3:fe:63:80:6a:ff:ff:af:46:
17:d1:59:2b:6f:1f:40:82:fe:71:3b:fb:40:31:34:b5:6d:a9:
0c:8c:2d:db:34:38:21:83:71:ed:bd:81:01:80:b9:83:0a:36:
c6:51:b9:b2:42:39:ae:ea:29:ff:31:a2:60:43:8f:ba:03:b6:
df:38:92:5a:b4:65:25:a8:5e:06:a3:11:a3:33:0d:a4:f5:e8:
68:2c:63:fe:cf:7c:2f:9a:71:56:45:24:63:76:51:d8:ea:6b:
01:2d:ce:96:39:c3:a8:a8:3c:86:0f:ea:ec:77:b9:6a:18:e2:
c9:99:f5:9b:15:4e:89:24:6b:d2:65:24:39:cc:31:c7:d6:01:
d1:64:49:3a:0e:a3:bb:d5:34:e2:ce:96:85:a7:32:6a:61:dc:
dd:e2:b3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9aq2RV6isKx9LN7z90+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy
ODQ5MTYwHhcNMjUxMTA1MDMwMDQ1WhcNMjUxMTA2MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg3MGQ3N2I3Nzk0YzFlZWFjMmU4Zjc1NjZhYzM2N2ZjYmI2MGY0NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pCTIwBzoXyqYCfsKPhotsX8f7aF
ZWzFn1lNQ54kz8w8B52nLuf7BXT5Xr5hhd9dB/EjRzBl7BS7v8jB/nRsSgTISL3h
nFd/rq/CcSyEHMIVoK02+DSSi/aqttKDvOwjfKVnQpAdXtbejPWNJ/beEhC2Hi7A
l8KPc61SVD1mDwIuEaq+4sZcUrlDOuoPNCsbXcbqRE7VJK4rFjC7cT8srg/HAN/s
fstY6Fxonw9VutMmGCWd3xmmakFpECAXTkenBzzhKzSsQV5lWwUABWefyNbkEYjt
tWeuLGa5UL69+mO94NIjXFxjzGSI3yftuj0dmZavrbtxQ3awUXAbkMiJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDXe3eUwe6sLo91Zqw2f8u2D0SFMB8GA1UdIwQY
MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt
MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk
LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWGFH+cE
fOwJdiwYZngN3cdjTVDbtr7Jb+KoSUBP2ip4+g0aZhA4aQ5/aFxMmvhNNREqrqta
ufPR1utr0OMALSbNxmgKCl+EbJr2xZfsXxZUaPOBtvrfazPSDr/H2wyBtIgZ8/5j
gGr//69GF9FZK28fQIL+cTv7QDE0tW2pDIwt2zQ4IYNx7b2BAYC5gwo2xlG5skI5
ruop/zGiYEOPugO23ziSWrRlJaheBqMRozMNpPXoaCxj/s98L5pxVkUkY3ZR2Opr
AS3OljnDqKg8hg/q7He5ahjiyZn1mxVOiSRr0mUkOcwxx9YB0WRJOg6ju9U04s6W
hacyamHc3eKzFA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:48 2025 by rpki-client