Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: 6MSa+z9AGD/tTozSgViwKryxSOI+7NVHWLDMWhMot4Y=
Subject key identifier: A5:E1:3A:B7:1D:32:E4:7A:AF:9E:CD:DF:D9:74:AE:E2:FF:13:86:0D
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019894B6E2CFA82B9BA48612C7E5CC036145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 09C9
Signing time: Sun 10 Aug 2025 16:01:10 +0000
Manifest this update: Sun 10 Aug 2025 16:01:10 +0000
Manifest next update: Mon 11 Aug 2025 16:01:10 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: QoPGahAY3rprYGFdweD546fPIXaQHLh5Zc/DcFnL7Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:e2:cf:a8:2b:9b:a4:86:12:c7:e5:cc:03:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Aug 10 16:01:10 2025 GMT
Not After : Aug 11 16:01:10 2025 GMT
Subject: CN=a5e13ab71d32e47aaf9ecddfd974aee2ff13860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:ab:71:fa:bd:b7:1b:fd:9c:11:c3:e1:a0:
c1:72:11:dc:e1:e6:23:a6:db:c9:79:ab:f3:65:16:
06:b0:24:98:3c:b5:6c:e5:a9:cc:b2:74:a6:67:29:
e1:59:a8:8d:49:0c:cc:62:a1:9d:e0:f9:5d:a8:3f:
1b:e9:36:ae:12:fa:5e:77:3f:19:22:56:7d:34:2b:
d1:2f:07:50:9d:ef:e6:d4:fe:41:86:4e:cf:6a:bf:
95:fb:10:4f:d8:e8:34:57:39:2e:f5:bb:c3:13:c4:
39:5f:9a:43:17:8e:b9:8f:fe:de:7e:58:2f:4b:a7:
e4:76:9f:e3:f5:3e:63:26:db:50:2e:a2:13:45:2e:
23:c5:b5:d2:fc:0c:14:3b:67:6a:bd:76:43:b3:2a:
e8:d7:3e:0b:b9:b7:81:2c:20:a3:e4:c8:c7:43:1a:
f9:73:4c:38:5d:d3:51:b6:65:89:9e:2b:83:24:42:
e8:2b:64:73:b6:91:3a:c3:3e:19:01:11:a2:8d:9b:
95:87:c8:19:19:fa:95:03:42:ce:0a:86:da:da:e7:
b6:12:52:c4:83:e6:6b:a0:1b:c3:24:12:bf:e9:41:
9b:f4:77:02:5e:db:d5:8c:b2:c4:03:9b:a5:34:e3:
8f:45:f3:6d:85:84:0c:d6:93:8f:ff:3b:60:4b:da:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:3A:B7:1D:32:E4:7A:AF:9E:CD:DF:D9:74:AE:E2:FF:13:86:0D
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:93:40:63:3c:d0:f2:e3:29:5b:fe:26:04:61:0d:80:b0:31:
c5:e2:37:b2:2f:71:0c:0c:8d:e1:05:dc:1a:b0:42:75:9b:9a:
2f:ba:76:f2:2c:96:ce:54:b2:1f:5d:0d:52:18:38:59:22:8d:
fe:56:24:db:a6:ba:d6:3d:58:5c:1c:0d:ab:9d:3e:ad:4e:13:
f7:ee:30:a2:97:86:f3:23:29:57:54:f6:f5:3a:48:ba:0d:89:
53:e2:5d:f7:3f:c5:70:b7:b6:07:b4:f2:3e:18:21:9b:cd:d8:
3e:10:5c:40:1a:a9:17:7e:f0:26:7e:04:a8:75:33:75:63:b3:
2d:73:cf:ef:50:8e:fe:bd:09:ff:24:5f:f4:b7:de:26:f4:6d:
1f:c0:cd:0d:dd:4f:b8:93:bc:f5:4c:68:3f:96:27:43:3f:b5:
b9:ac:69:e3:a1:21:a5:d3:d1:52:6f:e2:92:f3:d2:d1:79:b6:
8b:5d:1d:b9:47:6a:db:e4:f4:d9:99:cd:9b:d3:83:5c:2a:df:
eb:45:1a:9a:7d:bf:0e:3f:39:07:75:a2:c9:7d:88:cd:e0:da:
94:92:3b:97:2e:09:99:d3:70:98:40:02:39:c5:f6:25:8a:a3:
ba:f5:58:eb:2b:f8:5f:84:57:82:0b:db:e0:36:71:81:67:9e:
70:e8:7c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtuLPqCubpIYSx+XMA2FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTlkNmJjYWVlOTM4NjI1YzFiZmEwZDMyMjdjMGViYmFi
YWFhZDkwHhcNMjUwODEwMTYwMTEwWhcNMjUwODExMTYwMTEwWjAzMTEwLwYDVQQD
EyhhNWUxM2FiNzFkMzJlNDdhYWY5ZWNkZGZkOTc0YWVlMmZmMTM4NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdGrcfq9txv9nBHD4aDBchHc4eYj
ptvJeavzZRYGsCSYPLVs5anMsnSmZynhWaiNSQzMYqGd4PldqD8b6TauEvpedz8Z
IlZ9NCvRLwdQne/m1P5Bhk7Par+V+xBP2Og0Vzku9bvDE8Q5X5pDF465j/7eflgv
S6fkdp/j9T5jJttQLqITRS4jxbXS/AwUO2dqvXZDsyro1z4LubeBLCCj5MjHQxr5
c0w4XdNRtmWJniuDJELoK2RztpE6wz4ZARGijZuVh8gZGfqVA0LOCoba2ue2ElLE
g+ZroBvDJBK/6UGb9HcCXtvVjLLEA5ulNOOPRfNthYQM1pOP/ztgS9pYeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXhOrcdMuR6r57N39l0ruL/E4YNMB8GA1UdIwQY
MBaAFGlZ1ryu6ThiXBv6DTInwOu6uqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDct
Y2MxY2FjZWNjNmUyLzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDctY2MxY2FjZWNjNmUy
LzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJNAYzzQ
8uMpW/4mBGENgLAxxeI3si9xDAyN4QXcGrBCdZuaL7p28iyWzlSyH10NUhg4WSKN
/lYk26a61j1YXBwNq50+rU4T9+4wopeG8yMpV1T29TpIug2JU+Jd9z/FcLe2B7Ty
Phghm83YPhBcQBqpF37wJn4EqHUzdWOzLXPP71CO/r0J/yRf9LfeJvRtH8DNDd1P
uJO89UxoP5YnQz+1uaxp46EhpdPRUm/ikvPS0Xm2i10duUdq2+T02ZnNm9ODXCrf
60Uamn2/Dj85B3WiyX2IzeDalJI7ly4JmdNwmEACOcX2JYqjuvVY6yv4X4RXggvb
4DZxgWeecOh8xg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:44 2025 by rpki-client