Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: If6tLalBD71Jp/x6Sh3cOJVoAoNYCIcpC1pY53uIL/Q=
Subject key identifier: E0:6B:72:BC:DE:52:25:CE:0B:60:0B:32:FC:A5:6B:51:6D:EC:14:DD
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 019A52D13A006F7053956153E7CDB788C35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:00:34 +0000
Manifest this update: Wed 05 Nov 2025 07:00:34 +0000
Manifest next update: Thu 06 Nov 2025 07:00:34 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: r0q+9lXez/4Re57yHcQbMTKWod89oHjNLH/a0EZrE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:3a:00:6f:70:53:95:61:53:e7:cd:b7:88:c3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Nov 5 07:00:34 2025 GMT
Not After : Nov 6 07:00:34 2025 GMT
Subject: CN=e06b72bcde5225ce0b600b32fca56b516dec14dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:dd:30:72:1c:33:8b:f1:01:5e:5d:68:78:
d6:b0:83:3b:93:d4:fc:f7:05:17:7a:50:be:d5:ea:
b2:b2:06:33:5c:74:ce:d3:a1:13:42:61:29:b1:a8:
1f:17:89:c9:90:88:51:1f:3d:52:d3:58:4a:c7:a0:
48:b3:f6:84:af:15:a8:e7:b1:ef:0a:13:1a:e5:96:
f4:14:3c:3c:c7:61:51:3b:3f:c9:90:d4:05:a0:0d:
3a:92:f9:2c:fe:f3:6c:06:fb:07:0d:e9:e1:9c:ea:
03:92:7c:b6:1a:ee:b3:8d:3e:4a:72:28:d5:38:01:
ba:5d:ab:a7:21:ad:d2:94:25:70:35:e2:64:0a:d7:
ad:4b:ba:79:fe:02:72:60:80:e5:6f:87:38:cf:6e:
c7:04:71:5f:a9:06:c3:36:ea:aa:07:16:18:41:be:
1f:0f:a2:ea:a5:89:c9:72:1c:de:21:22:06:e4:c3:
79:06:52:2f:09:71:13:ba:fb:53:85:31:fd:3b:55:
84:b2:07:0a:dd:88:52:eb:8f:32:ad:70:48:58:3f:
5b:7c:7b:3e:41:b4:5d:98:71:d5:0f:00:d5:de:58:
09:f0:3d:53:81:db:ec:75:ae:aa:95:c1:f9:d9:b0:
34:09:0e:d9:b2:58:b4:77:92:89:17:e8:59:7a:72:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:72:BC:DE:52:25:CE:0B:60:0B:32:FC:A5:6B:51:6D:EC:14:DD
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:29:44:f8:76:e2:da:ac:5b:df:f7:d9:3c:0c:89:de:35:fc:
75:21:c0:2e:1c:9d:1d:c5:c3:3e:88:2d:73:58:1a:01:db:ad:
5f:da:c4:de:c8:41:ec:aa:ae:d3:e2:32:55:ce:a0:d0:7e:1d:
f2:25:00:a5:6c:fd:9f:ae:11:4c:48:2f:60:5c:c8:f9:0d:18:
5b:30:7c:c4:5d:63:60:93:e3:72:4b:83:72:ba:5a:a7:b7:09:
5d:e7:5d:5e:ba:ca:8f:9e:e5:08:b1:a4:f3:51:c4:ec:25:5a:
86:a7:a0:21:69:92:a6:1f:02:95:de:48:8f:a6:22:d4:e3:31:
d8:02:87:76:3b:0a:44:1f:33:13:44:39:f4:55:f0:ee:14:4c:
d4:e1:7a:93:0f:4f:7f:3a:3f:98:8e:24:b8:ef:a2:ea:24:f6:
c9:51:99:74:fb:3f:71:84:0b:18:2a:6f:85:58:fc:a6:56:e7:
5b:ac:50:30:c4:85:81:dc:76:24:3f:7d:a8:55:fc:35:ac:fa:
9a:78:1d:97:2d:ae:e9:71:ee:22:4e:e0:04:c8:2a:19:6c:aa:
df:80:03:7a:88:ec:22:3d:85:d4:c5:1d:ca:16:f6:2a:b2:8d:
ac:ab:e6:27:cb:91:4d:72:84:e2:4c:14:11:b1:20:1d:21:be:
b2:ef:09:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ToAb3BTlWFT5823iMNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTkyMTc4NDQ4OGFkZDlhMDU2NjFmZjExNzg3ZWM3NTRl
NjA1ZTUwHhcNMjUxMTA1MDcwMDM0WhcNMjUxMTA2MDcwMDM0WjAzMTEwLwYDVQQD
EyhlMDZiNzJiY2RlNTIyNWNlMGI2MDBiMzJmY2E1NmI1MTZkZWMxNGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9/dMHIcM4vxAV5daHjWsIM7k9T8
9wUXelC+1eqysgYzXHTO06ETQmEpsagfF4nJkIhRHz1S01hKx6BIs/aErxWo57Hv
ChMa5Zb0FDw8x2FROz/JkNQFoA06kvks/vNsBvsHDenhnOoDkny2Gu6zjT5KcijV
OAG6XaunIa3SlCVwNeJkCtetS7p5/gJyYIDlb4c4z27HBHFfqQbDNuqqBxYYQb4f
D6LqpYnJchzeISIG5MN5BlIvCXETuvtThTH9O1WEsgcK3YhS648yrXBIWD9bfHs+
QbRdmHHVDwDV3lgJ8D1Tgdvsda6qlcH52bA0CQ7Zsli0d5KJF+hZenLm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBrcrzeUiXOC2ALMvyla1Ft7BTdMB8GA1UdIwQY
MBaAFAFZIXhEiK3ZoFZh/xF4fsdU5gXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDkt
OGE5MTg0MDBmMjYwLzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDktOGE5MTg0MDBmMjYw
LzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqClE+Hbi
2qxb3/fZPAyJ3jX8dSHALhydHcXDPogtc1gaAdutX9rE3shB7Kqu0+IyVc6g0H4d
8iUApWz9n64RTEgvYFzI+Q0YWzB8xF1jYJPjckuDcrpap7cJXeddXrrKj57lCLGk
81HE7CVahqegIWmSph8Cld5Ij6Yi1OMx2AKHdjsKRB8zE0Q59FXw7hRM1OF6kw9P
fzo/mI4kuO+i6iT2yVGZdPs/cYQLGCpvhVj8plbnW6xQMMSFgdx2JD99qFX8Naz6
mngdly2u6XHuIk7gBMgqGWyq34ADeojsIj2F1MUdyhb2KrKNrKvmJ8uRTXKE4kwU
EbEgHSG+su8Jrg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:52 2025 by rpki-client