Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: wnVvdKAvUNRoNP2N4nAXsbruD8d3dl1BDzJB2oKnhMw=
Subject key identifier: 40:1B:3C:53:62:1A:B5:6C:83:6B:4E:9D:D9:BD:CE:D4:CA:DE:D4:23
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0199FDD8D639640C3B4F4D83976CE7834CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 14EF
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: gZtKx50V8k4zNxFTl5QWb4x1An0qSxT4UaCqyWf3QtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d6:39:64:0c:3b:4f:4d:83:97:6c:e7:83:4c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=401b3c53621ab56c836b4e9dd9bdced4caded423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:09:a8:31:f4:f4:5a:5b:94:84:d9:8e:43:
fd:58:1a:7e:40:00:cb:17:2d:30:26:49:7d:05:85:
bd:8d:e7:e2:67:71:a5:72:bd:82:d6:82:13:12:23:
bb:21:17:7d:ba:09:c5:10:0c:57:46:b6:48:b9:88:
82:f5:13:d6:e0:45:90:3e:2e:c6:f0:e3:86:0a:90:
bc:78:d9:4e:28:e4:53:21:aa:9c:bb:78:66:9a:90:
8b:5f:18:3e:30:4d:1c:0d:21:3d:f8:8f:15:63:29:
a1:06:a3:5c:df:8f:c5:cd:6d:96:e0:f7:1c:3a:5f:
28:ba:ec:a2:e4:2f:58:d2:d3:b6:57:4e:35:95:88:
ba:e8:a5:de:d8:85:71:83:d3:60:01:ce:67:8b:32:
68:52:05:63:84:05:89:6b:ec:3d:ab:10:28:d5:e6:
4a:ad:3c:a0:36:ee:59:9c:cc:62:28:51:29:d5:c5:
26:f9:44:70:c5:79:cb:4d:23:34:2a:18:e1:b0:a4:
97:51:78:62:a9:c7:1d:b0:fd:96:95:d3:d9:c4:3c:
26:a3:ff:2f:91:6a:10:3e:b8:1f:1c:d1:6f:ad:91:
32:1d:94:9a:b4:54:93:f7:ac:fb:24:94:8d:0e:4f:
0e:09:1b:94:6e:56:1a:45:d7:58:c3:a7:51:35:59:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:3C:53:62:1A:B5:6C:83:6B:4E:9D:D9:BD:CE:D4:CA:DE:D4:23
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a3:ef:09:8a:25:5d:1f:95:f6:f3:b5:88:26:29:a7:27:7c:
34:67:9f:ef:b1:8f:23:25:3d:ab:5e:11:7e:fa:b1:fc:43:09:
2c:94:ed:d2:c3:82:88:81:04:d4:cd:5b:6b:16:a3:7d:40:19:
0b:20:df:19:9b:22:24:4d:35:c0:76:1e:ca:53:fd:66:2f:03:
f2:3f:36:60:13:d6:14:ac:c4:4f:0c:3a:21:6e:c1:4a:d3:5f:
82:6d:59:e6:e3:6f:8d:75:83:1a:d7:ef:b4:cc:67:1b:31:8f:
70:bd:e8:da:b7:12:ed:bc:3a:43:14:64:7b:b1:bf:31:e7:ca:
0a:9f:0f:06:4c:f3:c6:e6:f9:7d:38:b8:21:f5:73:2a:c5:3b:
b7:0d:e4:e7:5a:9f:f2:06:e2:f5:ae:76:e3:42:1a:dd:00:d7:
2d:bc:c7:73:5e:fe:0b:3d:d9:c5:10:3a:17:72:38:ba:d7:a3:
89:11:a9:3a:a4:c8:29:b9:b1:3b:5c:52:23:8e:f6:ae:70:09:
38:94:a6:ff:7d:2c:fd:b4:e0:7f:a0:2a:28:e3:24:3c:dc:85:
29:01:1c:f2:3a:3c:d3:87:b0:16:44:c5:71:e3:b1:fe:51:a0:
33:ea:10:f4:a9:c4:2b:ed:c5:45:e3:75:f5:f3:03:3a:00:24:
2e:0f:0e:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92NY5ZAw7T02Dl2zng0zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi
NWJiODkwHhcNMjUxMDE5MTkwMTEwWhcNMjUxMDIwMTkwMTEwWjAzMTEwLwYDVQQD
Eyg0MDFiM2M1MzYyMWFiNTZjODM2YjRlOWRkOWJkY2VkNGNhZGVkNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEJqDH09FpblITZjkP9WBp+QADL
Fy0wJkl9BYW9jefiZ3Glcr2C1oITEiO7IRd9ugnFEAxXRrZIuYiC9RPW4EWQPi7G
8OOGCpC8eNlOKORTIaqcu3hmmpCLXxg+ME0cDSE9+I8VYymhBqNc34/FzW2W4Pcc
Ol8ouuyi5C9Y0tO2V041lYi66KXe2IVxg9NgAc5nizJoUgVjhAWJa+w9qxAo1eZK
rTygNu5ZnMxiKFEp1cUm+URwxXnLTSM0KhjhsKSXUXhiqccdsP2WldPZxDwmo/8v
kWoQPrgfHNFvrZEyHZSatFST96z7JJSNDk8OCRuUblYaRddYw6dRNVmHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAbPFNiGrVsg2tOndm9ztTK3tQjMB8GA1UdIwQY
MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt
M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm
LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqPvCYol
XR+V9vO1iCYppyd8NGef77GPIyU9q14Rfvqx/EMJLJTt0sOCiIEE1M1baxajfUAZ
CyDfGZsiJE01wHYeylP9Zi8D8j82YBPWFKzETww6IW7BStNfgm1Z5uNvjXWDGtfv
tMxnGzGPcL3o2rcS7bw6QxRke7G/MefKCp8PBkzzxub5fTi4IfVzKsU7tw3k51qf
8gbi9a5240Ia3QDXLbzHc17+Cz3ZxRA6F3I4utejiRGpOqTIKbmxO1xSI472rnAJ
OJSm/30s/bTgf6AqKOMkPNyFKQEc8jo804ewFkTFceOx/lGgM+oQ9KnEK+3FReN1
9fMDOgAkLg8Ovw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:10 2025 by rpki-client