Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: vXlYMAWlaFx3DluVafHxzjGWnZObKfZ3XYlLwfm2UHQ=
Subject key identifier: 15:89:33:55:3B:22:A6:66:CB:2F:54:1B:34:C9:79:B9:B9:83:07:EC
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 0198D515F41607C89658B7574781C154D8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0B1A
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: S+j95LZimcJHamGC3mK9meKs8uTWdoKmqshuiIraZew=)
2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f4:16:07:c8:96:58:b7:57:47:81:c1:54:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=158933553b22a666cb2f541b34c979b9b98307ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:df:89:cd:32:04:94:37:bf:d1:f0:36:e8:
e3:9b:f6:ca:fd:57:56:05:64:eb:b2:99:0b:39:54:
aa:6a:2d:af:44:69:bd:69:d1:bb:11:27:ca:5d:09:
68:2e:3d:df:20:e1:b0:0d:ea:d7:a3:35:0d:1a:e2:
1e:99:84:4e:ba:fc:f6:b2:67:39:3a:86:11:ed:6f:
89:3a:df:3b:4b:04:c1:10:52:02:d3:5d:85:bf:78:
7b:54:f4:42:75:9f:bb:f3:4e:d8:89:1c:25:7a:4b:
df:e8:a2:46:eb:c9:d3:ab:5a:38:88:43:f1:d1:05:
bf:fd:e8:22:73:4e:d2:95:85:ff:7e:23:a9:7c:c3:
9b:07:42:38:c2:cf:49:e8:99:77:48:b0:96:74:04:
26:ab:27:01:1a:fa:ab:a2:42:22:ae:8a:b1:e5:f1:
8e:ae:16:e2:e6:13:b7:60:2b:30:6e:12:63:17:79:
39:57:e0:63:0b:19:ac:2a:79:59:e6:d4:bb:4d:34:
0b:3e:d0:f7:79:d9:74:d6:52:27:83:9a:0c:9a:76:
92:b7:9b:08:13:2c:67:b7:5c:10:7c:82:7d:17:0c:
3c:b8:7b:44:ec:a6:6b:78:62:ea:e6:8e:35:a4:84:
8b:60:79:dc:6a:65:6d:cc:2d:9c:eb:99:8e:c3:25:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:33:55:3B:22:A6:66:CB:2F:54:1B:34:C9:79:B9:B9:83:07:EC
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f3:36:00:de:97:10:e2:47:45:3e:ba:8d:0c:62:46:35:6d:
67:fa:a7:c2:d8:a8:40:bb:e3:c8:78:f1:e4:82:59:24:7d:c5:
5a:89:ab:8f:58:13:04:96:01:eb:3e:55:2b:3e:40:45:71:5a:
00:66:aa:54:ff:8c:e5:0e:94:43:93:88:eb:60:05:df:07:00:
a9:8a:b6:4b:ce:da:35:bf:b0:b8:14:c3:de:a6:e6:ae:0e:e8:
50:6e:fa:6a:7b:2f:33:96:b2:0e:a2:66:f9:d3:49:a5:ac:57:
d1:2c:03:fc:44:e8:12:51:8b:11:2d:31:f0:ab:d2:a4:70:05:
63:df:4c:dc:04:5d:1d:48:ec:99:63:b1:f5:25:3d:76:18:9b:
74:f0:f0:d0:5d:c7:df:e6:8a:7b:65:00:27:bf:3f:87:19:95:
6d:d4:e2:6d:a9:6f:4b:f9:78:2a:b4:54:d7:b9:af:a9:94:93:
7a:90:37:c3:f2:8a:ee:bc:f3:e8:f1:66:b2:08:8c:5e:35:15:
40:8e:5c:42:ce:97:5e:87:83:8b:49:b3:63:79:1d:68:98:25:
da:5e:61:73:b5:00:49:35:05:9b:eb:29:e6:7d:32:83:dc:2f:
72:5e:b1:77:13:56:72:dd:2c:be:10:da:32:06:8d:6c:a1:59:
c9:9b:5b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfQWB8iWWLdXR4HBVNj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy
YzExNWMwHhcNMjUwODIzMDQwMDQyWhcNMjUwODI0MDQwMDQyWjAzMTEwLwYDVQQD
EygxNTg5MzM1NTNiMjJhNjY2Y2IyZjU0MWIzNGM5NzliOWI5ODMwN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VTfic0yBJQ3v9HwNujjm/bK/VdW
BWTrspkLOVSqai2vRGm9adG7ESfKXQloLj3fIOGwDerXozUNGuIemYROuvz2smc5
OoYR7W+JOt87SwTBEFIC012Fv3h7VPRCdZ+7807YiRwlekvf6KJG68nTq1o4iEPx
0QW//egic07SlYX/fiOpfMObB0I4ws9J6Jl3SLCWdAQmqycBGvqrokIiroqx5fGO
rhbi5hO3YCswbhJjF3k5V+BjCxmsKnlZ5tS7TTQLPtD3edl01lIng5oMmnaSt5sI
Eyxnt1wQfIJ9Fww8uHtE7KZreGLq5o41pISLYHncamVtzC2c65mOwyUwWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWJM1U7IqZmyy9UGzTJebm5gwfsMB8GA1UdIwQY
MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct
YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli
LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvM2AN6X
EOJHRT66jQxiRjVtZ/qnwtioQLvjyHjx5IJZJH3FWomrj1gTBJYB6z5VKz5ARXFa
AGaqVP+M5Q6UQ5OI62AF3wcAqYq2S87aNb+wuBTD3qbmrg7oUG76ansvM5ayDqJm
+dNJpaxX0SwD/EToElGLES0x8KvSpHAFY99M3ARdHUjsmWOx9SU9dhibdPDw0F3H
3+aKe2UAJ78/hxmVbdTibalvS/l4KrRU17mvqZSTepA3w/KK7rzz6PFmsgiMXjUV
QI5cQs6XXoeDi0mzY3kdaJgl2l5hc7UASTUFm+sp5n0yg9wvcl6xdxNWct0svhDa
MgaNbKFZyZtbGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:48 2025 by rpki-client