Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: flR4gPVxngyiSW8ci2sUCp9dyPdp955ajenQojBjvAU=
Subject key identifier: 8F:14:B5:FD:97:B3:09:59:4A:18:92:AD:3A:42:F9:20:A7:84:BD:07
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 0199FD6AE527ABD6ABF503395427C8502ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 09AA
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: KbkgC7W04AC2dfiCKLffjYIdfm0.roa (hash: b+1XnR1qClXgo0+h2XFqiEy+RpYXEzB0EWpEqBHm3rM=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: JJXFDGnzWfX0/lhUnUfPL7cJg2UHFDt1Lx1mvqRNY0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e5:27:ab:d6:ab:f5:03:39:54:27:c8:50:2a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=8f14b5fd97b309594a1892ad3a42f920a784bd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:f3:46:6d:7b:d3:53:92:0a:05:63:4b:98:
9f:d5:3b:2b:2b:c2:7a:38:bf:b0:f8:8d:b1:c9:3b:
6b:fb:63:fc:c5:2e:0e:d5:69:18:c1:f8:73:b0:48:
ef:98:db:8e:20:23:6c:92:d3:07:d9:5c:7a:f0:ba:
ea:2a:bc:30:78:c4:14:61:c6:75:e6:16:74:ae:09:
59:ca:b6:a2:18:06:08:00:dd:74:ab:e6:46:b9:36:
5e:04:6d:7f:3c:5f:4b:49:69:af:3c:55:b3:a9:12:
64:0b:81:1d:03:6b:f0:e2:11:5b:56:2e:19:9d:14:
d6:11:0d:cc:13:5b:13:48:93:00:26:bc:02:16:eb:
d6:e8:81:10:79:4c:ae:ed:f7:48:04:31:b1:3e:95:
c3:39:0a:63:91:c2:40:fb:4b:14:5b:82:9c:b9:e5:
07:00:1f:d6:7b:91:a9:8e:e6:98:52:d2:9a:6c:1c:
77:8e:f3:cd:b0:2d:57:42:a9:67:c0:c8:45:e5:e9:
02:3c:3f:f3:25:9b:bc:29:f6:03:60:ee:da:df:83:
9d:78:53:04:46:c9:76:e4:1e:c1:54:6b:95:b1:f9:
53:f8:c1:34:06:40:12:a1:68:46:53:86:ce:d4:41:
76:66:1c:68:d3:ff:53:43:b2:2d:af:e6:a4:6b:58:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:B5:FD:97:B3:09:59:4A:18:92:AD:3A:42:F9:20:A7:84:BD:07
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:de:cb:8a:1f:48:a4:f2:51:33:78:ec:73:3e:87:cb:78:de:
64:c9:c1:18:d3:94:94:bf:4a:b8:38:51:0f:4a:7a:63:d8:c3:
69:f8:65:24:c4:0e:bf:3d:5b:41:b1:8b:c2:d5:0d:d7:61:b7:
84:9f:19:d6:42:51:51:51:f4:0f:dc:51:a8:6e:3d:c2:61:3a:
a4:e1:f2:1a:7d:c1:19:fc:20:0f:c6:cc:b3:f9:c3:b9:56:66:
04:7e:69:4d:da:8d:30:90:da:8e:13:af:5c:52:c0:c0:52:3c:
6c:0b:ee:60:c0:3e:8a:57:d8:6e:a3:82:21:11:17:52:39:42:
70:a7:6c:7e:e0:9d:6e:7e:2f:bd:91:1a:84:c4:c8:49:af:c9:
68:33:f5:4a:0a:54:c8:6c:34:c0:b5:0c:1c:79:b9:0c:eb:60:
da:55:28:c8:a9:61:34:3c:9a:21:b3:24:43:88:c9:b8:af:c3:
0f:7b:3c:1b:06:a8:b2:b7:5c:c2:e2:cd:43:06:9d:7c:bc:e1:
2f:cd:a5:63:17:73:a4:f2:d2:85:48:3c:81:fa:8b:ae:b7:75:
cf:27:62:9e:ea:2b:55:d1:7f:81:25:15:44:d5:27:03:4e:fd:
7e:2a:db:f5:af:b0:d1:59:6e:c7:ec:35:06:ec:32:af:bc:cc:
9a:2a:83:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9auUnq9ar9QM5VCfIUCrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh
ZDg1NjUwHhcNMjUxMDE5MTcwMTA1WhcNMjUxMDIwMTcwMTA1WjAzMTEwLwYDVQQD
Eyg4ZjE0YjVmZDk3YjMwOTU5NGExODkyYWQzYTQyZjkyMGE3ODRiZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyLzRm1701OSCgVjS5if1TsrK8J6
OL+w+I2xyTtr+2P8xS4O1WkYwfhzsEjvmNuOICNsktMH2Vx68LrqKrwweMQUYcZ1
5hZ0rglZyraiGAYIAN10q+ZGuTZeBG1/PF9LSWmvPFWzqRJkC4EdA2vw4hFbVi4Z
nRTWEQ3ME1sTSJMAJrwCFuvW6IEQeUyu7fdIBDGxPpXDOQpjkcJA+0sUW4KcueUH
AB/We5GpjuaYUtKabBx3jvPNsC1XQqlnwMhF5ekCPD/zJZu8KfYDYO7a34OdeFME
Rsl25B7BVGuVsflT+ME0BkASoWhGU4bO1EF2Zhxo0/9TQ7Itr+aka1ioywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8Utf2XswlZShiSrTpC+SCnhL0HMB8GA1UdIwQY
MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt
M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh
LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASN7Lih9I
pPJRM3jscz6Hy3jeZMnBGNOUlL9KuDhRD0p6Y9jDafhlJMQOvz1bQbGLwtUN12G3
hJ8Z1kJRUVH0D9xRqG49wmE6pOHyGn3BGfwgD8bMs/nDuVZmBH5pTdqNMJDajhOv
XFLAwFI8bAvuYMA+ilfYbqOCIREXUjlCcKdsfuCdbn4vvZEahMTISa/JaDP1SgpU
yGw0wLUMHHm5DOtg2lUoyKlhNDyaIbMkQ4jJuK/DD3s8GwaosrdcwuLNQwadfLzh
L82lYxdzpPLShUg8gfqLrrd1zydinuorVdF/gSUVRNUnA079firb9a+w0Vlux+w1
Buwyr7zMmiqDYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:16 2025 by rpki-client