Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: I0W1h6WQNnwIdjvCpqFV8RAQTMUBblBhVO8Yb0+U5AY=
Subject key identifier: AB:34:1C:24:6F:19:A8:AC:91:EB:36:3B:5E:0E:C6:00:76:AD:04:8B
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019A01B6365808A9A8E0675AA0E4C0AB2F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 05AD
Signing time: Mon 20 Oct 2025 13:01:49 +0000
Manifest this update: Mon 20 Oct 2025 13:01:49 +0000
Manifest next update: Tue 21 Oct 2025 13:01:49 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: lcCwrJ8s6eoBS6mAnsTyBbhA2tV/AQF5LixaG0YhWUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:36:58:08:a9:a8:e0:67:5a:a0:e4:c0:ab:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Oct 20 13:01:49 2025 GMT
Not After : Oct 21 13:01:49 2025 GMT
Subject: CN=ab341c246f19a8ac91eb363b5e0ec60076ad048b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:1c:43:5d:8a:87:75:ce:65:27:8e:ea:bb:
49:96:62:b9:85:98:60:54:28:e3:2f:57:08:10:d5:
72:8e:1d:f1:49:be:84:9a:fd:cc:fa:3d:38:71:31:
37:fe:56:98:ad:e3:7d:a3:8c:63:86:cd:dc:c8:9d:
39:03:ac:24:59:ef:ff:56:8e:e9:e9:67:2e:dd:37:
15:61:be:31:22:42:fc:24:0c:8e:5b:e2:8f:98:f2:
45:e7:99:4c:ac:dc:29:27:d3:2a:da:93:aa:99:fa:
1c:70:ec:8b:5c:91:58:66:ad:70:fb:2c:e1:6e:02:
d7:cb:60:7a:e1:75:1b:4e:46:b8:3b:89:6e:cf:af:
09:89:66:84:86:ee:73:fd:ca:25:04:1d:cf:4a:d5:
50:9d:29:ab:a1:3a:89:70:ab:31:d6:1e:47:a5:bf:
05:16:1a:7c:2d:dc:4f:2e:1a:1e:44:41:fa:b3:72:
ea:e0:90:32:2b:1a:c0:b2:69:ce:73:43:54:1b:69:
b4:ad:b5:be:49:25:16:68:72:d6:1f:f6:5a:26:f5:
11:8d:a9:39:d8:83:d0:b1:63:ec:63:f6:da:84:f4:
cc:fb:61:26:45:01:53:19:44:22:be:8d:e4:91:68:
60:2f:d0:3b:c9:b8:43:91:dd:c6:19:86:5d:cc:84:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:1C:24:6F:19:A8:AC:91:EB:36:3B:5E:0E:C6:00:76:AD:04:8B
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:50:44:c2:c2:dc:44:43:2c:57:09:ff:44:97:1e:c0:5d:
30:f3:9a:b4:df:57:de:62:8c:0f:7d:43:71:fd:26:63:63:01:
37:3b:59:ca:de:0f:f8:bd:c4:14:6f:66:b3:44:2e:9e:56:77:
fe:93:dd:f5:de:e6:f8:cb:9b:38:ef:e7:b6:96:cc:91:4b:4b:
05:c6:a2:6b:3e:22:37:24:b3:f8:a1:29:fe:1f:f8:f3:2d:69:
43:5b:8f:be:28:02:7a:70:b6:b3:b5:88:13:af:c4:40:9a:15:
de:30:45:07:0d:24:73:c2:b3:ec:49:c9:e1:ed:ae:23:1a:05:
27:04:5e:ec:ad:bc:21:3c:95:50:40:98:30:56:9f:13:9b:27:
93:20:76:0f:06:de:75:46:30:bc:99:d0:a7:8b:09:a1:5b:f9:
49:81:8e:dd:ca:b1:c8:34:6e:6d:20:6f:4e:79:52:f6:e8:73:
14:f8:ed:b5:e5:f3:3d:53:9f:3c:7f:85:77:05:a0:ee:06:9c:
fd:4c:c0:2e:6d:57:87:40:f7:25:65:f4:19:3a:d3:d1:1a:87:
42:a7:fc:70:a9:20:3a:1b:e5:32:ed:2a:c9:58:27:3c:f1:53:
d2:8f:d1:c1:67:76:68:5d:04:bc:b2:2f:58:bd:eb:95:55:65:
47:15:f7:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtjZYCKmo4GdaoOTAqy9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZmUyMzM5ZWJlMDk3ZmY2OThhYjMwZTViNjNlY2MyMWEy
YTIzYWIwHhcNMjUxMDIwMTMwMTQ5WhcNMjUxMDIxMTMwMTQ5WjAzMTEwLwYDVQQD
EyhhYjM0MWMyNDZmMTlhOGFjOTFlYjM2M2I1ZTBlYzYwMDc2YWQwNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mscQ12Kh3XOZSeO6rtJlmK5hZhg
VCjjL1cIENVyjh3xSb6Emv3M+j04cTE3/laYreN9o4xjhs3cyJ05A6wkWe//Vo7p
6Wcu3TcVYb4xIkL8JAyOW+KPmPJF55lMrNwpJ9Mq2pOqmfoccOyLXJFYZq1w+yzh
bgLXy2B64XUbTka4O4luz68JiWaEhu5z/colBB3PStVQnSmroTqJcKsx1h5Hpb8F
Fhp8LdxPLhoeREH6s3Lq4JAyKxrAsmnOc0NUG2m0rbW+SSUWaHLWH/ZaJvURjak5
2IPQsWPsY/bahPTM+2EmRQFTGUQivo3kkWhgL9A7ybhDkd3GGYZdzITQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs0HCRvGaiskes2O14OxgB2rQSLMB8GA1UdIwQY
MBaAFGj+Iznr4Jf/aYqzDltj7MIaKiOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjct
ZWVhOGFmMTQzNGQ5LzEvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjctZWVhOGFmMTQzNGQ5
LzEvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRdQRMLC
3ERDLFcJ/0SXHsBdMPOatN9X3mKMD31Dcf0mY2MBNztZyt4P+L3EFG9ms0QunlZ3
/pPd9d7m+MubOO/ntpbMkUtLBcaiaz4iNySz+KEp/h/48y1pQ1uPvigCenC2s7WI
E6/EQJoV3jBFBw0kc8Kz7EnJ4e2uIxoFJwRe7K28ITyVUECYMFafE5snkyB2Dwbe
dUYwvJnQp4sJoVv5SYGO3cqxyDRubSBvTnlS9uhzFPjtteXzPVOfPH+FdwWg7gac
/UzALm1Xh0D3JWX0GTrT0RqHQqf8cKkgOhvlMu0qyVgnPPFT0o/RwWd2aF0EvLIv
WL3rlVVlRxX35A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:02:19 2025 by rpki-client