Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: c5hy7Gc7Gf6yD0TLZW46WmoIF0QujY1Jnr+RDVNJ0nc=
Subject key identifier: BB:7C:50:13:EE:EE:7B:3B:B8:C5:1F:A9:C0:70:E5:68:01:62:5F:23
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0198D65F75AF77FB31E9BA3753EB827E9B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1297
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: meyS1bJNpZHuiIi7zS17AkFUBRC/71l+XWW44g2UBeM=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:af:77:fb:31:e9:ba:37:53:eb:82:7e:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=bb7c5013eeee7b3bb8c51fa9c070e56801625f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:38:92:d6:a8:14:5a:45:46:f9:f6:35:24:
9f:73:ee:2f:88:66:a8:95:cc:a1:87:71:88:2f:7f:
53:0d:37:cc:a4:7e:ea:38:37:bc:fa:f8:b7:b5:47:
a4:0f:6f:50:cb:b5:22:ce:82:a6:27:10:ae:31:c6:
07:6b:5d:35:54:1b:07:24:4b:c6:d2:ee:42:42:8d:
a8:cf:7f:f8:1a:de:7d:0f:35:44:e5:e1:73:df:43:
01:6b:cc:af:9e:ea:ce:91:df:2c:96:56:b6:82:40:
f5:ac:04:c0:37:4e:9d:ef:4f:31:69:8f:00:ea:18:
ab:e8:0b:85:ea:20:98:b6:41:4f:3a:b6:06:99:f1:
88:99:ae:35:01:84:c9:35:64:96:a1:dd:1f:85:e4:
33:78:73:81:b4:a0:0e:01:19:f8:78:f8:f4:94:3a:
22:1d:dc:bc:8c:4a:e4:de:8b:f2:00:85:e0:9b:d4:
84:78:22:58:5a:0a:ef:0b:25:f3:95:28:a0:e8:6f:
c9:d0:8a:94:d9:79:34:57:d4:d1:14:87:9f:76:d7:
99:5c:57:67:b8:de:34:7f:b4:c6:21:7a:53:f9:1e:
e0:d6:ae:08:2a:49:ac:2e:3e:68:4c:7c:b8:0b:97:
9f:af:7a:8c:cd:f2:dc:1e:5d:ba:64:92:64:43:04:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7C:50:13:EE:EE:7B:3B:B8:C5:1F:A9:C0:70:E5:68:01:62:5F:23
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:51:51:d4:e2:29:b9:24:d9:a8:e8:3d:01:45:28:59:2a:
10:36:3e:c1:b0:b0:0c:10:b1:a4:23:df:1c:9b:55:7a:9c:35:
00:18:c5:21:c9:68:97:01:27:2a:a8:c9:9c:0b:4d:8b:5f:f8:
03:b2:b2:ec:aa:6f:31:34:65:8f:43:ec:de:e4:e7:52:b0:b8:
d7:ef:31:50:6b:5a:bf:28:96:97:0c:60:82:7f:14:27:9d:23:
ac:2b:10:7f:94:8b:32:a7:b2:e6:02:ea:81:a5:6c:a1:42:d9:
0f:69:50:2e:58:7c:f1:23:f8:c6:3d:c1:68:04:c9:33:96:f3:
e0:88:09:e3:c1:15:d6:52:67:2c:3a:e8:b4:3d:0a:fd:0c:3f:
5e:07:bb:8b:32:59:fe:a5:f7:a7:c0:1c:15:fa:17:9b:19:75:
75:8c:82:23:b1:a2:d2:59:7e:56:b2:a4:14:5a:90:68:ba:2f:
68:c7:96:66:10:a8:f0:36:2c:bd:fa:e2:ed:82:9e:34:9a:d9:
22:fc:0e:d6:b0:f1:5a:f4:01:be:e4:32:cf:56:3d:85:78:c6:
3b:3b:a9:b2:ee:b9:85:cb:6f:3a:68:fb:d9:c9:84:c4:b4:4c:
7f:69:d2:29:44:e3:b8:d5:63:a6:64:b7:f1:af:16:9b:00:0e:
e0:77:9f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX3Wvd/sx6bo3U+uCfpuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjUwODIzMTAwMDM2WhcNMjUwODI0MTAwMDM2WjAzMTEwLwYDVQQD
EyhiYjdjNTAxM2VlZWU3YjNiYjhjNTFmYTljMDcwZTU2ODAxNjI1ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P44ktaoFFpFRvn2NSSfc+4viGao
lcyhh3GIL39TDTfMpH7qODe8+vi3tUekD29Qy7UizoKmJxCuMcYHa101VBsHJEvG
0u5CQo2oz3/4Gt59DzVE5eFz30MBa8yvnurOkd8slla2gkD1rATAN06d708xaY8A
6hir6AuF6iCYtkFPOrYGmfGIma41AYTJNWSWod0fheQzeHOBtKAOARn4ePj0lDoi
Hdy8jErk3ovyAIXgm9SEeCJYWgrvCyXzlSig6G/J0IqU2Xk0V9TRFIefdteZXFdn
uN40f7TGIXpT+R7g1q4IKkmsLj5oTHy4C5efr3qMzfLcHl26ZJJkQwSUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt8UBPu7ns7uMUfqcBw5WgBYl8jMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7RRUdTi
Kbkk2ajoPQFFKFkqEDY+wbCwDBCxpCPfHJtVepw1ABjFIclolwEnKqjJnAtNi1/4
A7Ky7KpvMTRlj0Ps3uTnUrC41+8xUGtavyiWlwxggn8UJ50jrCsQf5SLMqey5gLq
gaVsoULZD2lQLlh88SP4xj3BaATJM5bz4IgJ48EV1lJnLDrotD0K/Qw/Xge7izJZ
/qX3p8AcFfoXmxl1dYyCI7Gi0ll+VrKkFFqQaLovaMeWZhCo8DYsvfri7YKeNJrZ
IvwO1rDxWvQBvuQyz1Y9hXjGOzupsu65hctvOmj72cmExLRMf2nSKUTjuNVjpmS3
8a8WmwAO4Hef+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:28 2025 by rpki-client