Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: vGYz24WaPSK9gD5vCsvsfXk+mvbxQQYsjwdz7rPHyV0=
Subject key identifier: 49:48:A8:1C:D1:36:7D:01:BF:2B:EF:66:10:75:76:0A:4B:3E:C6:A7
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019A213F9EF77C9E6801E87B746A54E9EF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 05B3
Signing time: Sun 26 Oct 2025 16:00:08 +0000
Manifest this update: Sun 26 Oct 2025 16:00:08 +0000
Manifest next update: Mon 27 Oct 2025 16:00:08 +0000
Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: ehEuWnrG6jMPqMAtH9FSYezRcAc5ZxOtrGCS/RY0KjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:9e:f7:7c:9e:68:01:e8:7b:74:6a:54:e9:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Oct 26 16:00:08 2025 GMT
Not After : Oct 27 16:00:08 2025 GMT
Subject: CN=4948a81cd1367d01bf2bef661075760a4b3ec6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:7a:82:22:b9:d7:a7:60:26:3a:04:8d:9c:
21:8d:1e:c2:2d:78:2c:37:2e:80:a5:16:31:75:01:
df:e8:8c:f2:22:b0:e4:4b:74:8c:d0:49:ce:41:76:
36:7d:88:48:11:b9:1d:59:c3:d8:3e:5e:2e:9c:79:
32:db:55:f2:e4:ce:0f:21:3a:f8:a6:c3:00:c4:23:
61:1a:22:0f:15:93:3b:e9:d4:7a:ea:57:ef:b5:38:
16:53:0b:3e:73:af:1d:08:40:df:e1:f3:82:2b:90:
6c:87:3f:c3:54:98:a0:3d:8e:57:67:67:c8:af:97:
cd:d7:6c:8e:d6:99:ea:9f:1f:07:24:ab:61:2e:87:
08:ab:b3:5f:c6:22:d5:c7:db:9a:2b:8d:b1:0b:c0:
67:fc:b5:58:50:f7:3a:fe:e4:3b:98:da:f2:97:93:
25:4b:bc:52:12:b5:40:a1:a7:56:c3:a3:4d:d2:bf:
a7:22:37:33:44:6b:13:d9:3d:35:dd:93:6f:de:4e:
99:44:79:08:23:a9:28:1c:df:6b:0a:d4:71:1a:ff:
04:db:5e:dd:a4:5e:2d:12:9c:da:69:0a:1d:f2:9c:
76:3c:01:2d:f3:83:1c:5d:df:c9:fe:ad:f8:3e:74:
a7:2f:65:4e:24:a9:25:78:62:f2:89:a1:b5:26:6e:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:A8:1C:D1:36:7D:01:BF:2B:EF:66:10:75:76:0A:4B:3E:C6:A7
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:97:a1:79:8a:19:5c:5b:9b:43:27:03:e2:63:c4:18:bb:
d1:a6:1f:66:e3:c1:90:17:4a:83:62:21:3e:41:fd:7e:58:45:
2e:97:44:5f:6f:01:2e:a6:ee:6e:76:cc:92:e1:8b:d8:ea:7a:
d9:bf:85:8c:86:d7:b7:bf:85:72:45:7b:6b:7b:92:25:0e:d6:
9a:e2:82:4b:b3:1f:cd:57:49:08:d6:cf:52:ba:c2:5f:7e:d3:
df:b5:7c:1a:ea:7d:3f:ce:b8:6e:a0:f6:d2:96:fd:8c:5e:6f:
27:c7:53:b1:a8:45:b5:0d:65:a6:40:74:9d:b0:32:e0:0e:eb:
2c:c7:41:5c:a8:8c:51:5b:00:b7:b7:6a:12:cb:48:05:cb:66:
9c:21:c4:a1:b7:c5:98:70:8e:a4:21:e7:e1:a9:42:d3:d3:e6:
22:57:9d:fb:6b:24:ca:ab:59:54:48:c0:f7:48:49:4d:81:63:
c0:2c:00:c6:4f:8a:a3:9b:86:36:75:84:88:98:c4:b4:85:bd:
86:06:f0:a4:aa:9f:9a:9e:e5:80:ae:7e:e4:58:6e:34:d4:5e:
7e:e3:cf:70:9e:4c:b5:85:8a:bb:0d:7c:10:d5:aa:2d:7c:2d:
f3:10:21:47:a8:19:f5:e0:62:64:5d:cb:a5:e4:14:eb:09:b6:
25:ed:ac:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohP573fJ5oAeh7dGpU6e83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh
ZTJjNzEwHhcNMjUxMDI2MTYwMDA4WhcNMjUxMDI3MTYwMDA4WjAzMTEwLwYDVQQD
Eyg0OTQ4YTgxY2QxMzY3ZDAxYmYyYmVmNjYxMDc1NzYwYTRiM2VjNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49x6giK516dgJjoEjZwhjR7CLXgs
Ny6ApRYxdQHf6IzyIrDkS3SM0EnOQXY2fYhIEbkdWcPYPl4unHky21Xy5M4PITr4
psMAxCNhGiIPFZM76dR66lfvtTgWUws+c68dCEDf4fOCK5Bshz/DVJigPY5XZ2fI
r5fN12yO1pnqnx8HJKthLocIq7NfxiLVx9uaK42xC8Bn/LVYUPc6/uQ7mNryl5Ml
S7xSErVAoadWw6NN0r+nIjczRGsT2T013ZNv3k6ZRHkII6koHN9rCtRxGv8E217d
pF4tEpzaaQod8px2PAEt84McXd/J/q34PnSnL2VOJKkleGLyiaG1Jm6h4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElIqBzRNn0BvyvvZhB1dgpLPsanMB8GA1UdIwQY
MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt
NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1
LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmmXoXmK
GVxbm0MnA+JjxBi70aYfZuPBkBdKg2IhPkH9flhFLpdEX28BLqbubnbMkuGL2Op6
2b+FjIbXt7+FckV7a3uSJQ7WmuKCS7MfzVdJCNbPUrrCX37T37V8Gup9P864bqD2
0pb9jF5vJ8dTsahFtQ1lpkB0nbAy4A7rLMdBXKiMUVsAt7dqEstIBctmnCHEobfF
mHCOpCHn4alC09PmIled+2skyqtZVEjA90hJTYFjwCwAxk+Ko5uGNnWEiJjEtIW9
hgbwpKqfmp7lgK5+5FhuNNRefuPPcJ5MtYWKuw18ENWqLXwt8xAhR6gZ9eBiZF3L
peQU6wm2Je2sRg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:41 2025 by rpki-client