
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: 67kpRi4LS8bcpbw/3NpmaY/VT+1D2V5bRBSnDDfEzqk=
Subject key identifier: 51:AC:73:0A:23:AF:BC:EB:99:A6:6C:2E:92:11:A5:37:B8:9F:62:45
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 0199FFFE7B104156FADD77505BC6E5F46084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: 9MBn20Jk/9KwZHaHuuw76np+VjAv6Xp0q1rn3dEopOw=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7b:10:41:56:fa:dd:77:50:5b:c6:e5:f4:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=51ac730a23afbceb99a66c2e9211a537b89f6245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:4b:b5:fa:e7:5f:56:e3:72:58:91:36:4b:
b8:b6:9f:41:48:0f:d6:b5:1d:33:13:1a:75:bd:a8:
b3:1a:99:f4:2e:9c:40:d0:c8:ef:d7:16:4d:78:92:
c6:9c:18:89:62:91:48:61:40:ba:82:c6:02:94:50:
e9:af:0c:91:a2:c6:fb:77:4f:ad:d9:5a:cd:e2:bb:
fd:29:3c:73:2a:04:4b:cd:47:fe:ce:3b:f4:48:dd:
ad:70:88:2e:98:33:7a:a3:18:02:78:0f:b7:90:70:
c7:89:1d:d8:ed:91:06:f6:ad:df:16:ee:1f:86:b2:
00:e0:b1:cb:93:0f:8a:47:8b:e1:93:4c:9b:1d:a9:
46:99:b1:03:39:a8:d4:d0:47:08:76:28:ac:bd:8d:
89:3f:4d:37:00:dd:cf:f5:dd:e5:ad:72:63:1a:af:
54:21:e2:b2:30:0c:4f:6b:37:c6:73:bf:5d:c1:a1:
7a:66:70:3e:1c:9f:e4:f8:64:12:ec:d1:e8:c5:24:
f9:c9:eb:52:d3:8b:51:b1:3e:d8:3c:49:e2:62:80:
dc:36:e0:68:59:36:c8:ff:ba:3d:2d:4d:f0:ad:ae:
ff:99:ca:f8:47:cb:87:07:61:a6:ee:85:1d:7c:d9:
9a:f2:0e:63:cb:77:ed:1b:49:12:22:5e:b0:41:74:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:73:0A:23:AF:BC:EB:99:A6:6C:2E:92:11:A5:37:B8:9F:62:45
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5c:ed:8d:f4:f5:c7:14:7f:f2:41:b3:4b:af:f9:a2:8e:23:
8b:49:0a:26:bd:ad:e4:0e:4a:c5:63:95:32:b4:8d:0e:02:01:
a4:06:19:12:c7:92:dc:96:40:e0:50:c4:3b:31:fc:09:9a:c0:
29:e3:50:f1:a2:5a:ca:30:40:b4:45:c1:11:78:74:63:74:f9:
11:7c:06:fd:4e:50:34:bc:09:ad:67:fe:81:17:68:c8:0a:5e:
f7:bf:a7:ee:5a:a2:b3:29:0a:93:ee:6b:da:8a:1b:cf:29:c2:
9c:71:f8:aa:05:08:6c:81:63:a8:c4:c9:b3:2a:10:cc:03:34:
b8:c7:cd:24:f0:56:b5:cc:8f:57:3f:bf:f4:d3:b1:52:d6:6f:
80:b0:8a:14:41:c8:95:35:24:86:71:89:7f:c0:23:e7:fa:b3:
b0:5f:f2:87:8e:f0:bd:c0:ef:30:77:92:cf:a5:46:ae:d6:ef:
3c:41:5a:cd:b4:d5:96:70:59:ca:c4:dd:18:75:68:e4:70:ed:
f3:51:bf:c5:84:f3:f1:5c:7d:ed:9f:6a:94:20:19:60:7d:48:
18:3b:fd:ec:d6:8e:67:14:30:d9:d3:75:89:08:e9:c8:7c:2e:
e7:97:c3:b3:45:61:43:05:67:21:7f:63:6d:20:88:b4:85:24:
1d:81:fa:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//nsQQVb63XdQW8bl9GCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl
YmU4NjEwHhcNMjUxMDIwMDUwMTMxWhcNMjUxMDIxMDUwMTMxWjAzMTEwLwYDVQQD
Eyg1MWFjNzMwYTIzYWZiY2ViOTlhNjZjMmU5MjExYTUzN2I4OWY2MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/JLtfrnX1bjcliRNku4tp9BSA/W
tR0zExp1vaizGpn0LpxA0Mjv1xZNeJLGnBiJYpFIYUC6gsYClFDprwyRosb7d0+t
2VrN4rv9KTxzKgRLzUf+zjv0SN2tcIgumDN6oxgCeA+3kHDHiR3Y7ZEG9q3fFu4f
hrIA4LHLkw+KR4vhk0ybHalGmbEDOajU0EcIdiisvY2JP003AN3P9d3lrXJjGq9U
IeKyMAxPazfGc79dwaF6ZnA+HJ/k+GQS7NHoxST5yetS04tRsT7YPEniYoDcNuBo
WTbI/7o9LU3wra7/mcr4R8uHB2Gm7oUdfNma8g5jy3ftG0kSIl6wQXSwYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGscwojr7zrmaZsLpIRpTe4n2JFMB8GA1UdIwQY
MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVztjfT1
xxR/8kGzS6/5oo4ji0kKJr2t5A5KxWOVMrSNDgIBpAYZEseS3JZA4FDEOzH8CZrA
KeNQ8aJayjBAtEXBEXh0Y3T5EXwG/U5QNLwJrWf+gRdoyApe97+n7lqisykKk+5r
2oobzynCnHH4qgUIbIFjqMTJsyoQzAM0uMfNJPBWtcyPVz+/9NOxUtZvgLCKFEHI
lTUkhnGJf8Aj5/qzsF/yh47wvcDvMHeSz6VGrtbvPEFazbTVlnBZysTdGHVo5HDt
81G/xYTz8Vx97Z9qlCAZYH1IGDv97NaOZxQw2dN1iQjpyHwu55fDs0VhQwVnIX9j
bSCItIUkHYH62Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:06 2025 by rpki-client