Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier: ZLZ5Go/q+kwu8czbavjf0nhJGsuQZAX7qdx0ho5GKns=
Subject key identifier: 10:24:5F:98:61:A8:73:03:2B:4C:D4:F7:A4:F3:66:F2:EE:2F:F3:B5
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 0199FCFD5572986FF005F184A21A5EBC7E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: 30Jgci//fj/Hd0+tMMtCdBlkW9Pfw2LOgWOh8U+veY0=)
2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:55:72:98:6f:f0:05:f1:84:a2:1a:5e:bc:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=10245f9861a873032b4cd4f7a4f366f2ee2ff3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:00:3e:8d:8c:f9:6c:1d:8f:7a:c2:ac:b4:
78:e6:0f:bd:be:1a:fa:52:07:2e:7c:2b:17:cc:d4:
ec:f9:85:99:ac:22:d7:c0:e3:62:d1:92:4a:ef:02:
36:90:0a:c3:8a:e3:0c:76:06:8d:e8:25:0f:d3:8a:
f9:3e:d8:9a:0b:5f:19:6e:b6:25:67:3d:0f:66:1d:
32:4d:a7:d8:a0:8e:ee:bd:7d:65:c1:ab:77:b9:9b:
45:46:48:c1:46:26:df:37:2f:be:27:75:93:ec:c9:
c1:3a:d9:22:49:e7:27:30:c1:eb:71:a5:81:a5:34:
c0:00:e0:a0:3b:d6:64:ba:95:9c:3a:60:18:12:12:
18:aa:a8:30:0f:c9:2b:7c:bd:99:1d:93:ae:f4:92:
6a:46:7f:98:2c:06:1d:e1:0e:6f:5b:2e:87:dd:45:
1c:76:a2:f4:93:39:b2:75:f9:ee:89:c0:ba:4b:d6:
d9:3b:d9:f1:db:3e:3c:2d:2d:82:b4:40:50:f2:3e:
5e:ac:9e:84:ce:79:b4:c3:50:eb:11:6b:76:ca:a6:
99:54:75:a7:44:92:17:aa:f9:e7:7e:c8:28:b2:2e:
24:2b:d1:3f:2e:02:91:b6:95:ef:05:60:44:16:98:
70:33:a4:a7:6f:5c:9e:e7:50:9d:fe:44:55:ff:be:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:5F:98:61:A8:73:03:2B:4C:D4:F7:A4:F3:66:F2:EE:2F:F3:B5
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b1:77:3d:ec:24:76:1e:5e:6f:e9:7d:e9:8b:5c:2d:e9:4f:
f8:b3:e3:27:4c:12:a5:fc:b7:04:c5:3f:e3:4a:fa:77:d8:5d:
de:fd:e1:e2:a2:b5:86:0b:b6:d8:38:7c:51:27:c8:5e:4a:28:
99:65:66:5d:60:22:a8:84:a0:07:4d:09:6c:aa:51:74:53:a2:
ba:c4:4a:05:4b:25:a5:5f:42:b3:3a:6b:d7:5e:ce:0d:ae:a5:
54:07:c9:f8:a1:82:68:fc:c8:20:61:93:7e:ac:41:36:f1:a4:
99:f3:34:84:fa:30:ff:02:52:3e:58:d9:8b:0c:b9:16:b0:92:
05:7e:a1:a6:22:f0:c7:e9:78:f6:a8:70:95:3a:32:77:08:52:
e3:58:a0:e5:c1:ad:59:df:de:f8:bb:bf:0d:98:ce:33:2e:86:
2e:aa:2b:f1:2b:3e:52:c9:fe:99:be:de:6e:8c:13:9e:e8:cd:
ac:eb:8c:e6:28:ef:25:6f:e7:df:4c:87:ed:35:4e:66:71:48:
28:62:66:c2:24:2a:8e:3b:54:c3:1e:ab:54:88:51:1c:3c:fa:
68:f9:85:f5:5c:b0:34:a7:9d:d8:0a:c0:66:6d:d9:2b:0e:ca:
34:05:c9:e6:ff:f6:8d:93:3a:b4:8f:ef:8d:7d:60:c9:f0:9e:
8c:bf:93:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VVymG/wBfGEohpevH5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGFhMWUzZDhjZjQzYTM2YjQxYmJiMjVkYzhmYTJiYTcx
YzM1ODQwHhcNMjUxMDE5MTUwMTI0WhcNMjUxMDIwMTUwMTI0WjAzMTEwLwYDVQQD
EygxMDI0NWY5ODYxYTg3MzAzMmI0Y2Q0ZjdhNGYzNjZmMmVlMmZmM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofcAPo2M+Wwdj3rCrLR45g+9vhr6
UgcufCsXzNTs+YWZrCLXwONi0ZJK7wI2kArDiuMMdgaN6CUP04r5PtiaC18ZbrYl
Zz0PZh0yTafYoI7uvX1lwat3uZtFRkjBRibfNy++J3WT7MnBOtkiSecnMMHrcaWB
pTTAAOCgO9ZkupWcOmAYEhIYqqgwD8krfL2ZHZOu9JJqRn+YLAYd4Q5vWy6H3UUc
dqL0kzmydfnuicC6S9bZO9nx2z48LS2CtEBQ8j5erJ6Eznm0w1DrEWt2yqaZVHWn
RJIXqvnnfsgosi4kK9E/LgKRtpXvBWBEFphwM6Snb1ye51Cd/kRV/77DCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAkX5hhqHMDK0zU96TzZvLuL/O1MB8GA1UdIwQY
MBaAFGtKoePYz0Oja0G7sl3I+iunHDWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYt
NGIyOWU5ZGM3NGM1LzEvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYtNGIyOWU5ZGM3NGM1
LzEvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrF3Pewk
dh5eb+l96YtcLelP+LPjJ0wSpfy3BMU/40r6d9hd3v3h4qK1hgu22Dh8USfIXkoo
mWVmXWAiqISgB00JbKpRdFOiusRKBUslpV9Cszpr117ODa6lVAfJ+KGCaPzIIGGT
fqxBNvGkmfM0hPow/wJSPljZiwy5FrCSBX6hpiLwx+l49qhwlToydwhS41ig5cGt
Wd/e+Lu/DZjOMy6GLqor8Ss+Usn+mb7ebowTnujNrOuM5ijvJW/n30yH7TVOZnFI
KGJmwiQqjjtUwx6rVIhRHDz6aPmF9VywNKed2ArAZm3ZKw7KNAXJ5v/2jZM6tI/v
jX1gyfCejL+Tkw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:26 2025 by rpki-client