Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: xBbUJeYys+VB2OL9DmLIU8gTj4EZAIiry+TtTrCrU/w=
Subject key identifier: C4:9F:83:0A:6C:A1:89:C3:3C:C9:5E:14:F1:A4:A2:A6:3A:F8:50:BE
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 0199FEB505A10642625542B3A63A25A3CD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:40 +0000
Manifest this update: Sun 19 Oct 2025 23:01:40 +0000
Manifest next update: Mon 20 Oct 2025 23:01:40 +0000
Files and hashes: 1: Pnnishmz6mmH1kDhubH1FM1N764.roa (hash: JeO+A8KCko5cL5TRf164ytYgaJ9iXP1K2ZTbCsQa/GY=)
2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: 27RicNdkMLbNDOL7Llamw4OnBNV2tNehUh6o6R3bcb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:05:a1:06:42:62:55:42:b3:a6:3a:25:a3:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Oct 19 23:01:40 2025 GMT
Not After : Oct 20 23:01:40 2025 GMT
Subject: CN=c49f830a6ca189c33cc95e14f1a4a2a63af850be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:d8:6c:b0:82:dd:1a:a2:c1:d5:a0:e0:ad:
92:6f:42:98:30:7c:56:72:1b:c7:ac:ae:0f:47:69:
0c:c0:35:00:b7:01:2d:af:75:47:b4:c0:3e:70:2a:
c6:ed:bd:c8:b6:d6:2b:23:c9:66:08:02:f3:b7:fc:
29:f5:3e:e8:b7:38:ca:54:45:12:6c:53:0e:b4:9f:
b7:18:1b:79:33:98:a2:ad:45:6d:ca:a2:b8:1b:47:
ce:69:aa:c3:91:7c:83:e0:1d:6d:39:95:c1:57:92:
e5:0e:35:db:2a:33:8f:8a:fd:3f:28:e8:03:72:88:
ca:eb:cd:32:2d:94:4e:36:f2:ce:b5:c7:4a:8d:36:
aa:9a:59:53:3d:f1:5f:e5:58:cb:b7:16:c5:80:2e:
f7:46:c4:f6:b3:fc:0c:fe:03:50:ab:5a:55:7f:ef:
43:ab:b5:46:e4:7f:05:3a:75:ee:b7:ac:89:10:b6:
af:ed:bd:bd:0a:24:56:d3:1f:c6:1d:65:dc:65:01:
6e:50:dd:00:22:bc:db:fa:28:39:49:88:50:8b:40:
1b:55:71:f8:17:65:7b:ae:64:51:d4:dd:8b:81:60:
df:23:b6:80:24:10:9f:e8:73:4f:2b:cd:ba:c9:af:
22:35:27:c0:76:d2:4a:97:57:1c:57:7a:05:bf:43:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:83:0A:6C:A1:89:C3:3C:C9:5E:14:F1:A4:A2:A6:3A:F8:50:BE
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:49:95:ae:d4:fe:dd:f6:26:1d:46:7a:54:a2:dd:18:d0:
43:0a:93:eb:66:da:b4:90:dc:1d:52:da:a4:60:ed:06:4e:98:
30:ef:53:33:d4:03:73:b4:d7:6c:a0:38:95:43:71:bb:3b:d0:
9b:a6:db:07:28:c9:dc:95:f2:e3:8b:fa:ec:47:02:42:e6:22:
27:e9:56:42:d6:57:17:df:43:d3:5d:ca:c9:a9:28:98:db:f8:
4e:dc:b4:c6:3a:40:25:2e:e9:08:5b:0b:1b:45:67:e8:92:05:
22:8d:ec:a8:95:b2:ff:e4:05:03:e8:c2:bb:fe:de:a6:7c:9d:
98:72:17:e8:f3:2e:bb:d0:63:95:85:96:46:fa:c1:d9:4d:00:
b2:39:de:b5:39:cb:a2:03:56:21:f5:51:70:5b:58:8e:e2:23:
92:34:2f:07:0c:13:c7:9f:0e:9c:9a:42:ba:af:d0:c6:c4:cf:
e4:de:91:23:a8:de:26:33:65:0f:cb:01:c4:e1:06:e0:e4:89:
4d:24:31:b7:fc:28:6b:f7:50:14:a0:05:9d:55:69:2d:03:d0:
3b:4a:5b:ae:32:33:5c:d4:a0:58:cd:39:5e:dd:8b:38:3b:5b:
2c:80:80:d3:0c:9f:6e:63:c9:18:e2:94:e1:5c:67:41:c1:c6:
5c:ae:59:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tQWhBkJiVUKzpjolo802MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTg1MDA0MDJjODIxNWNmNTcxMDczYTQ5NWNkYzgwYzc0
MmYyY2MwHhcNMjUxMDE5MjMwMTQwWhcNMjUxMDIwMjMwMTQwWjAzMTEwLwYDVQQD
EyhjNDlmODMwYTZjYTE4OWMzM2NjOTVlMTRmMWE0YTJhNjNhZjg1MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6vYbLCC3RqiwdWg4K2Sb0KYMHxW
chvHrK4PR2kMwDUAtwEtr3VHtMA+cCrG7b3IttYrI8lmCALzt/wp9T7otzjKVEUS
bFMOtJ+3GBt5M5iirUVtyqK4G0fOaarDkXyD4B1tOZXBV5LlDjXbKjOPiv0/KOgD
cojK680yLZRONvLOtcdKjTaqmllTPfFf5VjLtxbFgC73RsT2s/wM/gNQq1pVf+9D
q7VG5H8FOnXut6yJELav7b29CiRW0x/GHWXcZQFuUN0AIrzb+ig5SYhQi0AbVXH4
F2V7rmRR1N2LgWDfI7aAJBCf6HNPK826ya8iNSfAdtJKl1ccV3oFv0Ol1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSfgwpsoYnDPMleFPGkoqY6+FC+MB8GA1UdIwQY
MBaAFGmYUAQCyCFc9XEHOklc3IDHQvLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWIt
MTg5MDI4ZjMzOTZjLzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWItMTg5MDI4ZjMzOTZj
LzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5JJla7U
/t32Jh1GelSi3RjQQwqT62batJDcHVLapGDtBk6YMO9TM9QDc7TXbKA4lUNxuzvQ
m6bbByjJ3JXy44v67EcCQuYiJ+lWQtZXF99D013KyakomNv4Tty0xjpAJS7pCFsL
G0Vn6JIFIo3sqJWy/+QFA+jCu/7epnydmHIX6PMuu9BjlYWWRvrB2U0AsjnetTnL
ogNWIfVRcFtYjuIjkjQvBwwTx58OnJpCuq/QxsTP5N6RI6jeJjNlD8sBxOEG4OSJ
TSQxt/woa/dQFKAFnVVpLQPQO0pbrjIzXNSgWM05Xt2LODtbLICA0wyfbmPJGOKU
4VxnQcHGXK5ZGA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:43 2025 by rpki-client