Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: cKJ2vovUw1b3Dgb1EwjW/vLGPgaLkUxgLQctoqHQdnk=
Subject key identifier: B9:6F:0E:90:B2:27:30:9B:18:72:12:05:77:D9:F4:B7:92:98:75:BB
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 0199FBEB6B5B44B2A32665A614626E502E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: LvlRQSNrSmyGPRxgmE9SyZa2SIltTil87j1LU635Nuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6b:5b:44:b2:a3:26:65:a6:14:62:6e:50:2e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=b96f0e90b227309b1872120577d9f4b7929875bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:28:1e:da:bc:15:19:af:e3:df:bf:47:c5:
e7:72:32:cc:e2:78:74:bd:c0:a3:9c:e0:d9:15:53:
a8:2e:4b:6a:6e:bd:68:b5:1c:84:07:d6:59:63:b0:
c9:40:1d:5a:e1:d3:10:bc:b6:cd:38:53:21:2b:a7:
98:4a:be:6f:f5:4e:21:6e:b4:ac:01:5d:b0:31:f3:
12:94:c4:d6:fa:69:87:c3:24:54:2b:b4:29:60:87:
08:06:2e:95:0b:d8:22:f6:cd:43:2a:4c:0c:b2:44:
ed:44:76:d8:67:a1:9e:d7:6a:b3:4c:49:14:49:9f:
4b:80:c0:c0:93:a5:75:83:50:43:fa:4f:a3:c6:da:
9a:f3:d7:cd:a3:7c:d1:a5:b6:d6:f7:f4:40:25:08:
b7:8f:8c:69:41:06:a2:76:0f:a7:86:38:8a:16:1c:
05:60:ac:09:73:be:38:67:66:f6:49:97:55:a8:a7:
6c:99:91:1a:51:e2:52:08:48:1d:7b:b0:6f:71:d0:
4e:2a:b2:ea:94:79:4c:ef:74:a9:ce:41:68:58:36:
44:d4:2e:c4:a2:ab:74:8d:4c:16:66:be:74:4f:d0:
c9:81:38:7e:8c:eb:df:2b:36:c1:54:d3:0e:6d:d2:
b1:24:5a:ff:e8:51:b8:81:5c:6e:95:9c:28:1e:2d:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:0E:90:B2:27:30:9B:18:72:12:05:77:D9:F4:B7:92:98:75:BB
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:b1:72:47:38:6f:6c:eb:92:a4:e9:ae:8c:c5:76:7e:7a:
8a:62:e8:e9:c9:c1:0f:ff:a0:48:7c:27:c5:33:02:de:0a:08:
f6:a0:bc:f3:d9:2e:a6:95:37:a7:af:76:c0:db:56:63:cf:c4:
9d:4d:85:83:ea:b9:7a:d4:3c:c9:8c:73:56:a0:8c:66:88:ed:
54:4a:51:e8:df:f7:63:2c:ff:c2:e6:ec:b3:a1:65:45:c7:82:
c3:cc:38:63:a6:14:48:7d:31:48:78:d3:cf:c0:fa:19:b7:05:
25:36:b9:18:ea:6a:3f:34:09:8a:b1:aa:af:a9:d2:1a:57:ea:
9e:f6:bc:87:d8:60:90:bd:c7:48:3f:f6:a0:d2:6b:e4:6d:45:
1a:2a:ed:a7:5c:71:37:ef:91:f7:f7:f4:b9:ec:9c:58:ef:4c:
b4:6e:00:a2:c8:64:82:ca:c7:41:6b:10:3a:b3:c5:dc:e6:2c:
10:6e:67:a2:56:07:a0:69:1a:50:5e:19:9e:f1:fb:f3:9e:1e:
1c:19:a4:c7:59:94:c8:a9:b3:47:01:d7:c4:1e:4e:24:7a:de:
2a:24:98:aa:7f:65:cd:4c:27:89:96:3c:cf:d9:7b:de:ab:06:
01:7f:1a:93:ed:cf:7e:5b:78:2f:57:70:bf:ef:f3:92:3e:31:
96:32:e8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762tbRLKjJmWmFGJuUC4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjUxMDE5MTAwMjEzWhcNMjUxMDIwMTAwMjEzWjAzMTEwLwYDVQQD
EyhiOTZmMGU5MGIyMjczMDliMTg3MjEyMDU3N2Q5ZjRiNzkyOTg3NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qcoHtq8FRmv49+/R8XncjLM4nh0
vcCjnODZFVOoLktqbr1otRyEB9ZZY7DJQB1a4dMQvLbNOFMhK6eYSr5v9U4hbrSs
AV2wMfMSlMTW+mmHwyRUK7QpYIcIBi6VC9gi9s1DKkwMskTtRHbYZ6Ge12qzTEkU
SZ9LgMDAk6V1g1BD+k+jxtqa89fNo3zRpbbW9/RAJQi3j4xpQQaidg+nhjiKFhwF
YKwJc744Z2b2SZdVqKdsmZEaUeJSCEgde7BvcdBOKrLqlHlM73SpzkFoWDZE1C7E
oqt0jUwWZr50T9DJgTh+jOvfKzbBVNMObdKxJFr/6FG4gVxulZwoHi2/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlvDpCyJzCbGHISBXfZ9LeSmHW7MB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbOxckc4
b2zrkqTprozFdn56imLo6cnBD/+gSHwnxTMC3goI9qC889kuppU3p692wNtWY8/E
nU2Fg+q5etQ8yYxzVqCMZojtVEpR6N/3Yyz/wubss6FlRceCw8w4Y6YUSH0xSHjT
z8D6GbcFJTa5GOpqPzQJirGqr6nSGlfqnva8h9hgkL3HSD/2oNJr5G1FGirtp1xx
N++R9/f0ueycWO9MtG4AoshkgsrHQWsQOrPF3OYsEG5nolYHoGkaUF4ZnvH7854e
HBmkx1mUyKmzRwHXxB5OJHreKiSYqn9lzUwniZY8z9l73qsGAX8ak+3Pflt4L1dw
v+/zkj4xljLoMw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:42 2025 by rpki-client