Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier: ZaCxDTndIZJR600hnZV2VUZSDg+ae9IBvPAVWchNPz0=
Subject key identifier: FD:6E:F5:0F:F3:F0:8E:C4:AB:D3:56:AE:A5:3D:24:9B:27:25:59:9F
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial: 0198D6613F800CE0C42535949880522EF630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number: 0A9A
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (hash: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=)
2: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: JSErCYamw7/5l4rYbTtyWlzmn25pJEQX76WL+67K/nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3f:80:0c:e0:c4:25:35:94:98:80:52:2e:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=fd6ef50ff3f08ec4abd356aea53d249b2725599f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:97:68:90:7b:95:6c:ab:c8:76:e1:12:56:
c8:24:3f:ac:1e:56:9c:a8:74:d1:61:16:79:85:88:
d8:31:d5:2b:0c:24:eb:96:84:e4:76:54:de:b6:4f:
21:db:b2:c3:b3:e2:40:23:f4:40:c2:ef:a9:25:46:
73:23:92:5c:c7:91:ba:58:8c:35:7a:7f:c1:03:2f:
36:a7:51:98:3b:53:66:08:96:3b:4c:db:84:5e:3a:
96:9c:2f:b0:d7:56:8f:07:e7:bd:6a:76:f0:42:4c:
1b:d6:76:1f:29:36:ee:3a:e0:be:1b:76:57:92:e9:
ac:fc:f4:14:a6:92:0d:62:1d:86:6e:4f:a7:d8:2a:
c4:fe:92:d4:80:14:27:16:41:79:63:5d:13:ee:f2:
4e:65:14:9e:19:49:7b:b3:0f:6b:d3:89:d1:4c:77:
6d:9f:61:f2:df:d2:20:10:8e:9c:2a:38:dd:59:fd:
33:35:2a:2b:07:77:af:fe:3b:ad:27:4e:93:87:c4:
6c:4c:83:91:f5:71:3b:7e:b5:65:bb:dd:af:85:dc:
aa:2c:2b:89:eb:33:48:b1:e5:ba:ce:8f:d6:37:01:
71:cf:f2:84:3c:f3:e8:ee:fa:bf:9f:0f:36:d9:d5:
a5:f3:a5:5c:ab:60:17:1e:89:af:69:11:bb:46:26:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6E:F5:0F:F3:F0:8E:C4:AB:D3:56:AE:A5:3D:24:9B:27:25:59:9F
X509v3 Authority Key Identifier:
keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:35:5b:6d:8e:c7:dc:0f:7c:cb:31:62:0d:6a:02:d4:ff:ed:
f7:cd:1c:95:4d:8e:9b:59:07:99:2e:76:29:75:92:1c:3f:38:
a4:de:e5:2b:4a:82:b1:a9:12:d7:44:02:02:bf:8c:85:6c:b3:
6a:07:1c:72:ab:53:c0:de:23:2a:45:8e:a2:b5:7c:a7:0b:75:
45:94:3f:e8:1d:f2:6f:d0:2f:58:64:48:7e:97:d3:17:16:4f:
34:91:30:11:5b:ba:b1:90:93:19:e1:63:48:fe:da:fe:ab:79:
99:28:0c:81:65:d4:a2:72:37:c3:60:cf:2b:d2:ce:07:f1:a3:
c0:90:eb:18:6b:61:6d:5f:a0:e7:36:d1:ab:d3:b7:54:56:aa:
3b:c1:0b:d2:b8:a2:e9:89:15:72:f1:ee:1f:5a:9e:53:f2:59:
14:40:30:a8:2c:3c:d4:90:e5:e9:2f:a1:b1:63:7a:5c:82:2a:
db:ac:89:fe:20:f6:4e:44:b3:c9:e3:32:36:5a:16:ef:83:cf:
a1:cd:c3:3b:73:1c:54:6b:f2:4f:aa:27:fc:b3:33:3f:57:37:
d3:13:cf:ed:68:94:b5:6a:26:31:91:76:57:ab:8b:ca:bd:21:
52:45:2a:7f:5d:13:ab:69:92:7b:bf:68:d0:6e:cc:e9:f6:49:
48:22:72:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYT+ADODEJTWUmIBSLvYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDAxMGU0Mzk4ZGZkNmUxOWY0NWI1MTNjMjJjMWVjYTMz
MzExZjgwHhcNMjUwODIzMTAwMjM0WhcNMjUwODI0MTAwMjM0WjAzMTEwLwYDVQQD
EyhmZDZlZjUwZmYzZjA4ZWM0YWJkMzU2YWVhNTNkMjQ5YjI3MjU1OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopmXaJB7lWyryHbhElbIJD+sHlac
qHTRYRZ5hYjYMdUrDCTrloTkdlTetk8h27LDs+JAI/RAwu+pJUZzI5Jcx5G6WIw1
en/BAy82p1GYO1NmCJY7TNuEXjqWnC+w11aPB+e9anbwQkwb1nYfKTbuOuC+G3ZX
kums/PQUppINYh2Gbk+n2CrE/pLUgBQnFkF5Y10T7vJOZRSeGUl7sw9r04nRTHdt
n2Hy39IgEI6cKjjdWf0zNSorB3ev/jutJ06Th8RsTIOR9XE7frVlu92vhdyqLCuJ
6zNIseW6zo/WNwFxz/KEPPPo7vq/nw822dWl86Vcq2AXHomvaRG7Ria0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1u9Q/z8I7Eq9NWrqU9JJsnJVmfMB8GA1UdIwQY
MBaAFBNAEOQ5jf1uGfRbUTwiweyjMxH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgt
MTYyZGYwOGIzOWU1LzEvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNTNmNDEtZjYyYi00OTJjLTllMTgtMTYyZGYwOGIzOWU1
LzEvRTBBUTVEbU5fVzRaOUZ0UlBDTEI3S016RWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDVbbY7H
3A98yzFiDWoC1P/t980clU2Om1kHmS52KXWSHD84pN7lK0qCsakS10QCAr+MhWyz
agcccqtTwN4jKkWOorV8pwt1RZQ/6B3yb9AvWGRIfpfTFxZPNJEwEVu6sZCTGeFj
SP7a/qt5mSgMgWXUonI3w2DPK9LOB/GjwJDrGGthbV+g5zbRq9O3VFaqO8EL0rii
6YkVcvHuH1qeU/JZFEAwqCw81JDl6S+hsWN6XIIq26yJ/iD2TkSzyeMyNloW74PP
oc3DO3McVGvyT6on/LMzP1c30xPP7WiUtWomMZF2V6uLyr0hUkUqf10Tq2mSe79o
0G7M6fZJSCJyng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:51 2025 by rpki-client