Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: 93SfqnDdz1zOI1nsvLtKsZBTkdVR+AQIyn+s4OkZAuo=
Subject key identifier: 5E:93:EC:D4:59:7C:78:D7:AB:3C:6B:89:77:FE:74:2A:70:CB:6E:62
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 0199FBEBEE58DEE3CAE47BAAE8FA6484E650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: A4/p+ZWPhZSDvbiUviTkhIXcxpI/hu6fE1PNeFFo4Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ee:58:de:e3:ca:e4:7b:aa:e8:fa:64:84:e6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=5e93ecd4597c78d7ab3c6b8977fe742a70cb6e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:f2:ec:f1:63:89:d0:6c:ca:47:db:cf:f6:
e1:36:45:15:b3:bd:ff:68:96:dc:a2:9f:82:aa:73:
5f:95:75:de:69:52:32:55:94:3f:b1:86:fe:b5:f3:
5c:cd:d6:32:20:84:a3:e4:91:8c:9a:a5:8c:71:5e:
62:a0:51:14:01:a1:9a:88:d9:bb:d8:26:0e:5a:ab:
00:d3:ad:7f:7b:6f:09:56:ad:c1:55:1c:b1:6d:b7:
60:fb:31:a7:86:bb:49:0e:2d:6b:3d:1b:de:1c:9a:
78:ff:4f:21:f3:63:53:60:9c:2c:78:18:c4:68:a8:
50:9c:52:ec:be:0f:6a:ca:76:57:39:20:be:8c:91:
e9:07:b1:50:6d:46:66:c4:13:62:c6:37:c3:12:3e:
28:81:80:42:a6:db:da:c4:75:09:b8:c3:c1:d3:d6:
6f:c9:af:ba:3a:29:56:79:93:d7:71:78:7a:6e:e3:
13:4c:24:33:ab:3c:f7:f2:86:7b:bd:57:b9:b9:97:
b2:f0:cd:df:a1:a4:f1:b8:8f:ec:b8:4e:81:00:ee:
36:fc:a2:e4:40:53:a0:44:6a:3c:7a:02:58:8a:9b:
66:54:ad:f7:89:0d:e7:57:51:f8:34:ae:ea:c7:6f:
05:e4:8e:3a:e2:e8:34:fc:0c:b8:9c:43:c9:f1:2d:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:EC:D4:59:7C:78:D7:AB:3C:6B:89:77:FE:74:2A:70:CB:6E:62
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:77:d3:54:a3:c0:87:30:c7:07:30:56:b6:52:c0:9a:54:
0a:d3:12:51:52:1a:df:6a:b3:39:34:78:3a:c8:48:79:c8:ac:
06:4d:a6:7f:d2:07:26:df:67:c3:14:6d:0c:c0:12:d2:17:d8:
00:56:fe:19:ec:21:1c:57:ab:3f:71:a1:86:a9:90:2f:45:75:
5c:75:7d:0a:c0:53:8e:7b:e2:97:e1:12:32:b2:35:ab:df:7b:
64:aa:b4:e7:54:d6:f2:31:a1:74:8a:f5:4d:b8:10:dc:db:08:
31:df:12:3d:4e:ef:59:f1:2c:02:d8:b7:ae:e5:17:35:9b:30:
4b:59:ff:a0:29:2e:c6:5e:00:6d:f9:f7:49:11:a8:1d:77:b6:
e3:9c:6c:f5:df:4c:18:c2:d1:86:b5:23:a0:1d:9d:e3:52:c8:
a9:01:5d:a8:9b:ee:ef:c9:43:70:35:df:8d:fa:72:37:83:d6:
36:16:00:14:fd:2b:66:79:ec:d8:10:a7:61:66:7a:ab:d4:5c:
fb:ef:3c:a7:75:55:77:e7:cf:09:e6:37:76:32:74:33:f2:52:
f8:f1:eb:7b:64:51:cc:bf:9a:8d:e2:63:db:0d:11:c0:5a:76:
4d:c3:cf:c6:0a:f2:b3:a6:f3:43:2d:9f:29:12:73:f2:e0:4c:
8f:f6:a7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+5Y3uPK5Huq6PpkhOZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz
YjI1NDQwHhcNMjUxMDE5MTAwMjQ3WhcNMjUxMDIwMTAwMjQ3WjAzMTEwLwYDVQQD
Eyg1ZTkzZWNkNDU5N2M3OGQ3YWIzYzZiODk3N2ZlNzQyYTcwY2I2ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S7y7PFjidBsykfbz/bhNkUVs73/
aJbcop+CqnNflXXeaVIyVZQ/sYb+tfNczdYyIISj5JGMmqWMcV5ioFEUAaGaiNm7
2CYOWqsA061/e28JVq3BVRyxbbdg+zGnhrtJDi1rPRveHJp4/08h82NTYJwseBjE
aKhQnFLsvg9qynZXOSC+jJHpB7FQbUZmxBNixjfDEj4ogYBCptvaxHUJuMPB09Zv
ya+6OilWeZPXcXh6buMTTCQzqzz38oZ7vVe5uZey8M3foaTxuI/suE6BAO42/KLk
QFOgRGo8egJYiptmVK33iQ3nV1H4NK7qx28F5I464ug0/Ay4nEPJ8S33EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6T7NRZfHjXqzxriXf+dCpwy25iMB8GA1UdIwQY
MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt
OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2
LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFN301Sj
wIcwxwcwVrZSwJpUCtMSUVIa32qzOTR4OshIecisBk2mf9IHJt9nwxRtDMAS0hfY
AFb+GewhHFerP3GhhqmQL0V1XHV9CsBTjnvil+ESMrI1q997ZKq051TW8jGhdIr1
TbgQ3NsIMd8SPU7vWfEsAti3ruUXNZswS1n/oCkuxl4Abfn3SRGoHXe245xs9d9M
GMLRhrUjoB2d41LIqQFdqJvu78lDcDXfjfpyN4PWNhYAFP0rZnns2BCnYWZ6q9Rc
++88p3VVd+fPCeY3djJ0M/JS+PHre2RRzL+ajeJj2w0RwFp2TcPPxgrys6bzQy2f
KRJz8uBMj/anrA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:23 2025 by rpki-client