Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: WQtVgzY+EEx/9re6UT2zywMPGEWYYq+gAq+owMsKhWM=
Subject key identifier: AB:96:0C:F5:66:5F:E3:C7:42:B3:36:11:7A:B7:98:48:22:43:52:91
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 0198D6608B1695E317ED8962560245ABCC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: IuO4FQmy56C0Ea7NgY0uIu1YVsAtKGvHQ0oO60ShS90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8b:16:95:e3:17:ed:89:62:56:02:45:ab:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=ab960cf5665fe3c742b336117ab7984822435291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:7e:f6:a9:8e:7c:00:55:fd:5f:0e:2a:97:
09:14:68:c0:1a:5e:7b:9e:c2:04:ed:bc:58:b2:2d:
33:e5:4f:ff:54:c1:42:10:fa:d7:86:45:e5:cb:85:
1e:14:8b:3d:03:64:c4:c8:11:2f:0e:e2:ba:97:94:
6a:a9:0f:36:35:49:73:1f:f8:c6:65:8b:f3:57:3e:
27:75:3e:ea:e9:a3:ed:62:3f:5f:f0:1b:4b:8d:f3:
f3:fd:36:78:db:b4:14:1a:a5:3a:9f:16:f1:23:e5:
fd:ad:b0:87:5f:5d:f1:4f:49:d1:9e:79:63:c7:16:
2c:25:6f:68:e1:64:84:fc:29:62:17:ba:b4:9f:f6:
66:3b:9d:47:67:8b:d3:7b:d7:9c:6b:fb:48:d0:76:
94:ac:64:f1:4d:fa:c0:87:81:1c:b7:88:91:aa:d1:
aa:4a:85:fa:e6:31:d5:0a:ad:84:eb:9e:78:38:ab:
87:ae:ac:2d:9a:72:31:5b:a8:5b:10:9a:11:34:40:
75:b0:ff:89:d7:af:6a:25:af:4e:0d:90:5e:ed:99:
ed:af:92:ba:81:ad:48:c6:4d:ce:76:7d:39:fc:06:
d5:11:8e:92:d7:3a:d9:c1:ed:53:98:5e:10:8a:fb:
88:59:3b:3c:1b:02:ae:ad:a3:22:f9:9d:38:5c:ca:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:0C:F5:66:5F:E3:C7:42:B3:36:11:7A:B7:98:48:22:43:52:91
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:26:c6:46:35:da:e8:9d:c1:ff:dc:01:13:3c:17:95:cf:
de:6a:77:18:6c:28:31:91:70:8f:18:72:07:7b:3b:9b:d6:95:
3c:ec:00:54:4d:db:0a:61:52:cd:0c:93:db:4b:32:26:35:13:
73:59:84:53:8b:5a:b2:59:e9:f6:75:f4:31:12:26:4b:f8:63:
b0:b1:ef:96:e3:77:b8:0e:9e:19:7b:9c:c3:9b:c2:39:8c:a2:
0e:c6:24:2d:bc:72:3a:33:99:97:c0:4c:bf:04:dc:c7:92:d9:
4d:c2:0b:ad:91:b5:41:81:de:ff:2f:e7:3f:1e:d3:d4:2b:61:
92:e2:2a:40:bb:36:8c:0a:87:63:fb:94:df:66:4c:5a:d8:5e:
b1:5c:ed:7d:07:d4:d2:d3:30:1e:19:56:5d:06:0d:fc:90:74:
0f:29:0d:32:4b:d6:c6:c0:c1:12:b0:16:3f:ab:fd:a3:13:47:
64:7b:5d:14:5d:e6:4e:72:b5:1b:94:af:b4:03:8c:ff:20:d7:
c1:c6:97:a1:a6:2e:cc:8b:1a:57:28:ae:8f:2b:14:86:94:ea:
00:76:5d:7f:7f:8f:27:03:66:11:1d:41:4b:49:d2:90:e0:98:
0b:95:39:92:00:bb:09:3a:7d:b6:5d:b1:de:54:c6:70:7a:fb:
a7:1b:ea:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYIsWleMX7YliVgJFq8xRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx
YTYwNDUwHhcNMjUwODIzMTAwMTQ3WhcNMjUwODI0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhhYjk2MGNmNTY2NWZlM2M3NDJiMzM2MTE3YWI3OTg0ODIyNDM1MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMB+9qmOfABV/V8OKpcJFGjAGl57
nsIE7bxYsi0z5U//VMFCEPrXhkXly4UeFIs9A2TEyBEvDuK6l5RqqQ82NUlzH/jG
ZYvzVz4ndT7q6aPtYj9f8BtLjfPz/TZ427QUGqU6nxbxI+X9rbCHX13xT0nRnnlj
xxYsJW9o4WSE/CliF7q0n/ZmO51HZ4vTe9eca/tI0HaUrGTxTfrAh4Ect4iRqtGq
SoX65jHVCq2E6554OKuHrqwtmnIxW6hbEJoRNEB1sP+J169qJa9ODZBe7Zntr5K6
ga1Ixk3Odn05/AbVEY6S1zrZwe1TmF4QivuIWTs8GwKuraMi+Z04XMoyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuWDPVmX+PHQrM2EXq3mEgiQ1KRMB8GA1UdIwQY
MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt
NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4
LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtkmxkY1
2uidwf/cARM8F5XP3mp3GGwoMZFwjxhyB3s7m9aVPOwAVE3bCmFSzQyT20syJjUT
c1mEU4taslnp9nX0MRImS/hjsLHvluN3uA6eGXucw5vCOYyiDsYkLbxyOjOZl8BM
vwTcx5LZTcILrZG1QYHe/y/nPx7T1CthkuIqQLs2jAqHY/uU32ZMWthesVztfQfU
0tMwHhlWXQYN/JB0DykNMkvWxsDBErAWP6v9oxNHZHtdFF3mTnK1G5SvtAOM/yDX
wcaXoaYuzIsaVyiujysUhpTqAHZdf3+PJwNmER1BS0nSkOCYC5U5kgC7CTp9tl2x
3lTGcHr7pxvqRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:17 2025 by rpki-client