Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: Kr245K2eWVkL2UXA7MU/aSouqsfXfiyjODK2132QHvs=
Subject key identifier: 4B:14:0E:74:AF:B1:5D:77:99:D3:74:58:4D:01:83:01:A0:9A:A8:FF
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 0199FBEC2342D2C247ABFD975D79570FDBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 04A3
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: Z5R6CZ4DiQj63CvdxfHUa76AtRmP6LOM2SqwAaAGPIw=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:23:42:d2:c2:47:ab:fd:97:5d:79:57:0f:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=4b140e74afb15d7799d374584d018301a09aa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:7b:72:f2:8c:f7:ad:d9:1c:e7:59:49:46:
b5:34:17:14:5a:85:3d:e6:46:50:34:09:b0:7d:09:
23:92:61:64:c9:12:bf:c8:78:a4:d2:36:4d:00:f4:
c2:50:90:35:c8:49:9a:09:b9:56:31:e2:89:9f:26:
4d:19:44:af:2f:bc:2e:8d:14:f8:79:bd:7e:3c:89:
e8:63:c6:cd:b2:25:a6:d6:dd:9d:d0:38:57:24:6c:
9f:fa:60:bd:02:e1:69:ba:bd:9e:2b:b3:3d:0b:22:
33:63:7b:15:49:f6:68:4e:08:22:cb:b3:06:6c:0b:
83:1c:39:75:d4:e7:66:61:07:e8:b6:10:09:0d:4b:
64:c1:12:79:0a:3d:25:ae:35:8f:59:af:59:ec:4a:
0b:00:ef:57:d2:99:d0:ea:6c:ca:5f:cd:0d:3e:ef:
60:69:56:19:83:41:1d:f6:0d:52:f0:b4:75:f0:51:
1c:4d:d6:10:e1:54:42:84:08:74:c6:c8:a9:25:a6:
92:33:c2:6b:bf:0b:1f:d4:21:9f:92:35:90:82:77:
1b:4d:5e:9d:ee:0c:87:e9:1f:94:45:a5:3f:67:23:
b0:b4:f6:4d:4a:8d:46:df:5e:11:fe:32:30:d4:6a:
48:95:a5:ec:f0:32:f7:df:10:60:ce:8b:24:78:2f:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:0E:74:AF:B1:5D:77:99:D3:74:58:4D:01:83:01:A0:9A:A8:FF
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:cc:8d:0c:0c:f8:14:5c:55:dc:9a:47:8e:f8:1c:21:44:
cc:04:41:c7:83:fb:4c:61:b4:be:57:89:05:94:af:95:de:86:
45:97:14:94:e2:7c:5e:56:d2:49:19:88:91:2e:82:a9:d8:56:
83:7d:b5:d4:f7:9e:17:8d:93:0d:b2:2e:5f:47:e3:48:49:fd:
3d:c8:33:17:7f:37:d3:af:95:dd:fa:b6:9e:3b:3f:e9:bb:c6:
31:6a:12:c0:8b:8d:8a:98:23:6b:a4:66:b4:1f:76:67:02:12:
86:ba:d4:49:99:04:36:e2:c2:1e:f6:a9:18:e9:1a:2d:2f:86:
9a:25:56:d9:00:bf:c1:c2:7b:a2:b5:15:b1:06:89:7c:ae:af:
49:02:4b:2d:4c:61:9f:1d:35:da:53:c9:a0:b1:c0:dc:0e:12:
e2:9f:5c:54:90:0c:e6:6e:64:9e:67:85:d7:a9:9c:f2:bb:e7:
f3:e0:de:29:c1:db:ca:fa:ac:87:2e:ea:5a:06:a3:26:44:f2:
67:50:56:51:1a:fc:02:05:d2:f9:88:c0:80:28:63:df:ae:b7:
90:a6:50:8c:9a:16:da:35:f1:7d:1a:34:67:83:2c:b2:8b:a0:
b4:dd:09:d4:d4:49:59:59:88:b5:24:17:71:0b:29:9a:3c:03:
f7:98:97:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77CNC0sJHq/2XXXlXD9viMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw
MTBiMGIwHhcNMjUxMDE5MTAwMzAwWhcNMjUxMDIwMTAwMzAwWjAzMTEwLwYDVQQD
Eyg0YjE0MGU3NGFmYjE1ZDc3OTlkMzc0NTg0ZDAxODMwMWEwOWFhOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOl7cvKM963ZHOdZSUa1NBcUWoU9
5kZQNAmwfQkjkmFkyRK/yHik0jZNAPTCUJA1yEmaCblWMeKJnyZNGUSvL7wujRT4
eb1+PInoY8bNsiWm1t2d0DhXJGyf+mC9AuFpur2eK7M9CyIzY3sVSfZoTggiy7MG
bAuDHDl11OdmYQfothAJDUtkwRJ5Cj0lrjWPWa9Z7EoLAO9X0pnQ6mzKX80NPu9g
aVYZg0Ed9g1S8LR18FEcTdYQ4VRChAh0xsipJaaSM8Jrvwsf1CGfkjWQgncbTV6d
7gyH6R+URaU/ZyOwtPZNSo1G314R/jIw1GpIlaXs8DL33xBgzoskeC/sXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsUDnSvsV13mdN0WE0BgwGgmqj/MB8GA1UdIwQY
MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt
M2IyODk0ZjBlNjljLzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj
LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDPMjQwM
+BRcVdyaR474HCFEzARBx4P7TGG0vleJBZSvld6GRZcUlOJ8XlbSSRmIkS6CqdhW
g3211PeeF42TDbIuX0fjSEn9PcgzF38306+V3fq2njs/6bvGMWoSwIuNipgja6Rm
tB92ZwIShrrUSZkENuLCHvapGOkaLS+GmiVW2QC/wcJ7orUVsQaJfK6vSQJLLUxh
nx012lPJoLHA3A4S4p9cVJAM5m5knmeF16mc8rvn8+DeKcHbyvqshy7qWgajJkTy
Z1BWURr8AgXS+YjAgChj3663kKZQjJoW2jXxfRo0Z4MssougtN0J1NRJWVmItSQX
cQspmjwD95iXhw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:38 2025 by rpki-client