Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: hJcifd0KvvVMRcUR6Wm7/njEf1ihVKQjG/1/ABcPHWI=
Subject key identifier: 5E:48:8A:22:01:65:6D:7D:D7:28:27:F8:EC:59:CF:6C:2E:0F:E2:AD
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 019A71B84BA52FA50A5FBA0AAB2276F10D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: nDXzAr1VVixiyoQL4NznM33u7seX1c/YvWmYnbESBmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:a5:2f:a5:0a:5f:ba:0a:ab:22:76:f1:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=5e488a2201656d7dd72827f8ec59cf6c2e0fe2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:60:bc:37:02:d1:9c:04:a9:4b:c3:9a:02:
61:a3:8c:00:f8:df:f3:3c:03:23:64:d1:19:f3:65:
80:63:4f:f8:e1:bd:2c:20:48:50:33:25:d2:2d:cf:
99:c1:55:cb:c5:cd:3b:09:ae:f3:37:1e:57:fb:91:
94:73:ba:0c:91:8c:41:d5:3f:dd:59:b3:f6:ef:df:
ed:86:72:a4:6b:ea:66:ce:df:22:97:c1:33:9e:aa:
58:b1:12:11:c7:66:c4:34:f8:dd:93:ff:fb:91:b5:
c8:9f:e0:21:b1:ca:d3:78:a2:82:87:cb:26:8c:9f:
2e:ff:c6:b2:fd:70:dd:36:b6:82:52:af:e6:ce:76:
dc:75:99:3d:bc:19:8b:bb:fb:0e:1f:d0:4c:51:38:
a0:f1:37:6d:e6:28:6a:3b:4e:2a:21:62:4c:2f:3e:
d0:b2:91:43:65:f9:ad:7b:3a:f9:89:e1:67:5b:e0:
54:f8:dc:4e:56:0a:ed:03:0c:0e:4f:6f:8e:6e:fb:
b6:f7:7d:22:41:a3:b3:d1:fe:a5:5d:15:8a:f6:6b:
b7:6f:1d:f1:0c:bf:37:71:15:aa:ff:0c:34:89:1a:
8a:33:d5:82:c1:14:4d:54:62:2f:e9:a3:ce:2a:14:
12:a0:18:25:80:80:37:b9:19:31:22:97:12:81:98:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:8A:22:01:65:6D:7D:D7:28:27:F8:EC:59:CF:6C:2E:0F:E2:AD
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bb:67:88:f9:b3:a5:5d:b8:79:e5:69:f8:02:3b:e5:fb:81:
d1:2e:27:c1:c5:7c:fa:8e:f9:ed:81:f2:ca:ff:97:14:68:f7:
7a:95:b1:20:98:ee:b4:4b:36:39:73:d8:d1:e3:ac:25:01:d2:
8f:46:46:b6:63:c3:0d:72:58:71:e7:92:4a:4b:0e:9b:53:47:
21:32:2f:f7:32:1b:b8:e6:f8:6f:42:09:90:b3:bf:bc:13:3b:
58:b7:d0:f2:01:14:db:d5:71:b9:f9:ae:5f:b1:1c:3f:a3:bf:
34:07:f7:39:f7:01:8e:3f:82:43:a2:25:b4:b7:02:21:40:ec:
fd:d0:e5:86:21:99:6d:32:04:05:ae:4c:92:a1:87:51:c9:14:
fc:22:96:8e:bd:ee:15:71:4b:fb:19:31:1a:24:fe:6c:3e:23:
15:93:2f:db:48:39:94:9c:74:08:4a:94:47:2e:10:92:14:a8:
2d:03:06:71:b6:65:59:51:ef:9e:ca:6f:39:65:26:32:e2:78:
7b:fe:5e:f2:d7:85:82:4b:0c:d9:2b:76:e3:67:7b:85:dc:68:
1b:d4:34:9c:8b:9d:88:2c:18:d0:20:89:6c:b3:55:78:2f:ea:
ad:e7:70:76:88:ae:b9:18:a6:b0:51:ce:3d:23:fd:64:12:9c:
ab:5c:e4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEulL6UKX7oKqyJ28Q1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NmQxODQwNDkzZWVlMzQ1ZjhjMDJhZDhhYTdmMGYwZjQx
YmE0NTAwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
Eyg1ZTQ4OGEyMjAxNjU2ZDdkZDcyODI3ZjhlYzU5Y2Y2YzJlMGZlMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY5gvDcC0ZwEqUvDmgJho4wA+N/z
PAMjZNEZ82WAY0/44b0sIEhQMyXSLc+ZwVXLxc07Ca7zNx5X+5GUc7oMkYxB1T/d
WbP279/thnKka+pmzt8il8EznqpYsRIRx2bENPjdk//7kbXIn+AhscrTeKKCh8sm
jJ8u/8ay/XDdNraCUq/mznbcdZk9vBmLu/sOH9BMUTig8Tdt5ihqO04qIWJMLz7Q
spFDZfmtezr5ieFnW+BU+NxOVgrtAwwOT2+Obvu2930iQaOz0f6lXRWK9mu3bx3x
DL83cRWq/ww0iRqKM9WCwRRNVGIv6aPOKhQSoBglgIA3uRkxIpcSgZgekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5IiiIBZW191ygn+OxZz2wuD+KtMB8GA1UdIwQY
MBaAFGhtGEBJPu40X4wCrYqn8PD0G6RQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAt
ODI2ZDA1Y2NmZTI1LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAtODI2ZDA1Y2NmZTI1
LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALtniPmz
pV24eeVp+AI75fuB0S4nwcV8+o757YHyyv+XFGj3epWxIJjutEs2OXPY0eOsJQHS
j0ZGtmPDDXJYceeSSksOm1NHITIv9zIbuOb4b0IJkLO/vBM7WLfQ8gEU29Vxufmu
X7EcP6O/NAf3OfcBjj+CQ6IltLcCIUDs/dDlhiGZbTIEBa5MkqGHUckU/CKWjr3u
FXFL+xkxGiT+bD4jFZMv20g5lJx0CEqURy4QkhSoLQMGcbZlWVHvnspvOWUmMuJ4
e/5e8teFgksM2St242d7hdxoG9Q0nIudiCwY0CCJbLNVeC/qredwdoiuuRimsFHO
PSP9ZBKcq1zkTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:22 2025 by rpki-client