Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: HIn8aybRkwkAzUgtYvSQogsTof7FXyEkv5L069Zvc6Y=
Subject key identifier: C7:9E:CE:47:25:1D:26:C0:C2:F7:B1:90:22:C4:2D:5C:69:64:EC:EF
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0199FBEB2A7882A76753847011DFBF37F51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: LsD2FqPEJhl2OC1OYbbiALMJXrsqXxT3UP9bWJ2UkVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2a:78:82:a7:67:53:84:70:11:df:bf:37:f5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=c79ece47251d26c0c2f7b19022c42d5c6964ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:bf:40:e1:e8:14:ee:4d:61:96:a2:44:66:
83:ed:6b:74:7e:80:49:31:08:56:8e:ea:5b:de:22:
10:94:b2:27:a1:95:5a:e9:4e:f5:f3:e5:da:49:6c:
61:80:25:f8:5a:f3:5f:69:f6:6c:d8:cb:ef:af:53:
b1:6e:30:1c:3e:fd:8e:d0:b8:a2:a9:b7:8b:0e:a8:
db:b3:85:9d:13:bc:5f:25:5c:88:e9:35:ab:d3:ef:
56:79:c0:da:85:e4:59:62:8a:f2:43:50:9e:a2:e4:
a1:8c:b6:9e:68:c4:5c:75:97:9e:a4:09:a6:ef:7c:
56:11:57:79:c2:e2:18:89:38:81:40:d9:20:04:2f:
8e:e4:3a:fd:df:34:7b:85:46:c3:15:1b:98:9d:58:
d9:53:11:5e:a1:67:2e:9e:fb:0e:d3:f3:a3:fa:27:
c9:f2:ac:fc:a4:bb:7d:a5:86:63:4a:4c:a5:62:bd:
22:2a:58:95:17:a0:46:21:85:e4:5c:cc:53:35:a0:
c3:1e:00:51:42:60:91:40:fb:1a:9c:5e:b8:2c:11:
38:0c:9e:3a:64:c9:17:4b:23:e1:3c:d7:3b:83:5c:
b2:c5:3e:63:b5:be:f6:3e:f1:7e:62:cb:c6:a0:59:
55:38:9f:1e:c3:63:69:8e:9c:25:7a:36:c1:20:4d:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:CE:47:25:1D:26:C0:C2:F7:B1:90:22:C4:2D:5C:69:64:EC:EF
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:26:d9:38:88:3a:ba:9e:0a:02:46:2e:85:c1:ae:1d:0d:92:
77:75:c1:81:b9:fd:2a:cc:e0:7d:8c:81:b0:5f:b5:0f:ed:bb:
ee:cd:55:2a:6f:bd:de:1d:d4:c8:64:5e:51:5e:cb:e2:96:eb:
54:9c:42:5d:2f:c8:f1:6b:b7:aa:69:88:ba:20:ab:83:9d:5c:
7b:7b:8a:24:f2:62:e2:60:76:2e:2a:35:ca:19:95:58:73:54:
6f:8e:1d:36:cd:ab:a3:58:1e:2e:1f:a8:a0:ea:67:0d:64:71:
cc:33:03:88:ea:33:30:d9:68:e3:6a:0f:63:bf:db:b0:fd:58:
03:25:d3:63:34:6a:8e:75:9d:db:72:d6:93:a4:0e:78:c3:dd:
79:d3:d1:62:81:57:af:42:10:ca:16:e8:2d:da:48:2a:4d:cd:
3f:4e:dd:02:cf:a6:80:29:f7:eb:2c:94:e5:81:60:8f:2e:34:
28:4e:1f:aa:9d:20:9e:40:b8:d5:ca:c8:5b:80:24:5a:ad:2d:
9b:2d:91:ed:bc:a6:0d:2e:d3:d9:5e:59:5f:7e:59:0b:47:90:
14:05:08:46:ff:32:f2:34:56:4b:32:a5:14:19:c2:84:d2:8a:
f0:06:4c:c0:86:64:d7:03:a1:60:ab:30:24:68:e5:79:df:7f:
26:31:da:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yp4gqdnU4RwEd+/N/UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4
YmM3MzYwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD
EyhjNzllY2U0NzI1MWQyNmMwYzJmN2IxOTAyMmM0MmQ1YzY5NjRlY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+i/QOHoFO5NYZaiRGaD7Wt0foBJ
MQhWjupb3iIQlLInoZVa6U718+XaSWxhgCX4WvNfafZs2Mvvr1OxbjAcPv2O0Lii
qbeLDqjbs4WdE7xfJVyI6TWr0+9WecDaheRZYoryQ1CeouShjLaeaMRcdZeepAmm
73xWEVd5wuIYiTiBQNkgBC+O5Dr93zR7hUbDFRuYnVjZUxFeoWcunvsO0/Oj+ifJ
8qz8pLt9pYZjSkylYr0iKliVF6BGIYXkXMxTNaDDHgBRQmCRQPsanF64LBE4DJ46
ZMkXSyPhPNc7g1yyxT5jtb72PvF+YsvGoFlVOJ8ew2NpjpwlejbBIE0ppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeezkclHSbAwvexkCLELVxpZOzvMB8GA1UdIwQY
MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt
NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0
LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFybZOIg6
up4KAkYuhcGuHQ2Sd3XBgbn9KszgfYyBsF+1D+277s1VKm+93h3UyGReUV7L4pbr
VJxCXS/I8Wu3qmmIuiCrg51ce3uKJPJi4mB2Lio1yhmVWHNUb44dNs2ro1geLh+o
oOpnDWRxzDMDiOozMNlo42oPY7/bsP1YAyXTYzRqjnWd23LWk6QOeMPdedPRYoFX
r0IQyhboLdpIKk3NP07dAs+mgCn36yyU5YFgjy40KE4fqp0gnkC41crIW4AkWq0t
my2R7bymDS7T2V5ZX35ZC0eQFAUIRv8y8jRWSzKlFBnChNKK8AZMwIZk1wOhYKsw
JGjled9/JjHacw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:30 2025 by rpki-client