Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: JBgUuBfIfXQi5+99Se841mPehLjtpE9+R6tEbQPosNc=
Subject key identifier: F9:D8:C6:95:FE:33:D3:7A:DC:51:34:1F:CF:30:AE:0F:F5:CE:25:9E
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0199228D19711DB3D2203B2631A6A23D652E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 02C5
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: OmDqgXMBamZsesyXqJ8y1xNeOGBji0peHOVVc2hJOiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:19:71:1d:b3:d2:20:3b:26:31:a6:a2:3d:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=f9d8c695fe33d37adc51341fcf30ae0ff5ce259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:71:35:59:66:b8:db:9a:6e:a2:e0:4d:c6:
bb:8e:a8:60:6f:0e:55:34:7d:76:58:62:ae:bf:f2:
22:f2:51:40:71:26:77:46:ea:c0:4a:e0:da:59:e0:
08:32:b3:7e:38:52:81:c5:d7:72:36:54:11:0e:fb:
f2:3a:8b:cf:68:db:75:72:94:51:5e:91:38:ee:41:
25:82:85:38:34:ae:ce:f0:85:66:1e:08:e3:d3:86:
6f:ff:bc:b3:2b:b7:3d:67:10:7d:3c:f9:db:ac:8c:
4d:62:dc:68:bb:85:6e:77:d1:d3:68:93:26:6e:7a:
6a:90:74:55:f4:1d:d7:dc:3c:b3:03:d0:53:68:b2:
7b:c2:14:b2:bc:30:6b:14:f1:03:cb:e5:d8:69:3a:
9a:67:8c:79:7d:80:be:32:9a:ea:ed:16:2c:8f:6c:
e1:89:29:5e:ed:a4:7f:3e:48:ad:eb:41:1f:99:09:
1d:08:5b:d6:e7:b2:7a:ea:db:26:ab:87:fa:1c:dd:
1d:4d:e1:e6:c9:a8:32:67:32:2a:03:43:04:37:4b:
ca:c1:f3:b2:22:73:76:3e:86:c1:37:6c:e5:ba:00:
9e:fc:56:fa:3f:c5:41:27:17:bd:63:f7:76:a1:cc:
32:a6:f4:94:fa:68:3d:13:48:6a:cd:30:74:5f:73:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:C6:95:FE:33:D3:7A:DC:51:34:1F:CF:30:AE:0F:F5:CE:25:9E
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:97:7b:be:eb:fc:cb:46:a2:dd:96:a7:71:66:77:fa:20:62:
5b:5d:f0:7d:da:2b:c8:94:5c:55:ae:08:9e:2f:9e:15:22:9d:
0a:e1:db:33:00:e6:85:b3:d1:f6:9e:fd:ee:60:aa:2b:f9:92:
ae:15:79:ec:40:0e:b2:5b:ab:3d:17:3e:c8:0c:33:90:53:20:
d1:bc:f7:41:c7:ba:cb:9f:46:79:31:63:a2:6d:05:ec:4c:d2:
c7:03:4a:e3:47:82:f1:8d:2f:b7:29:f2:e7:59:02:6c:fc:5a:
60:df:ce:72:9d:00:fe:14:9d:ce:a6:fd:9c:7e:da:77:8d:6c:
2d:1c:10:de:4c:98:77:1f:1d:a1:1f:9a:9c:55:7e:c9:08:d5:
ef:91:76:7d:8f:da:79:20:cb:92:b0:b6:15:3a:4e:f5:d6:ce:
44:85:21:61:24:7c:c4:0b:16:de:e8:07:38:da:03:4c:ae:7c:
22:9b:11:69:e7:1f:ea:20:7d:28:ca:51:15:89:29:31:20:d4:
fd:6c:6e:70:83:23:ec:54:1b:c7:cb:1c:52:ff:04:fd:f9:aa:
70:fb:97:35:8c:6e:7a:a4:88:60:c1:bb:6c:0b:a9:c1:af:db:
eb:5e:86:33:5b:0d:d0:f4:f5:06:dd:b5:b3:a1:b2:2e:78:3f:
ec:2f:ca:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRlxHbPSIDsmMaaiPWUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl
NjQ4YzMwHhcNMjUwOTA3MDUwMTM2WhcNMjUwOTA4MDUwMTM2WjAzMTEwLwYDVQQD
EyhmOWQ4YzY5NWZlMzNkMzdhZGM1MTM0MWZjZjMwYWUwZmY1Y2UyNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+txNVlmuNuabqLgTca7jqhgbw5V
NH12WGKuv/Ii8lFAcSZ3RurASuDaWeAIMrN+OFKBxddyNlQRDvvyOovPaNt1cpRR
XpE47kElgoU4NK7O8IVmHgjj04Zv/7yzK7c9ZxB9PPnbrIxNYtxou4Vud9HTaJMm
bnpqkHRV9B3X3DyzA9BTaLJ7whSyvDBrFPEDy+XYaTqaZ4x5fYC+Mprq7RYsj2zh
iSle7aR/Pkit60EfmQkdCFvW57J66tsmq4f6HN0dTeHmyagyZzIqA0MEN0vKwfOy
InN2PobBN2zlugCe/Fb6P8VBJxe9Y/d2ocwypvSU+mg9E0hqzTB0X3M2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnYxpX+M9N63FE0H88wrg/1ziWeMB8GA1UdIwQY
MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt
N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2
LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJd7vuv8
y0ai3ZancWZ3+iBiW13wfdoryJRcVa4Ini+eFSKdCuHbMwDmhbPR9p797mCqK/mS
rhV57EAOslurPRc+yAwzkFMg0bz3Qce6y59GeTFjom0F7EzSxwNK40eC8Y0vtyny
51kCbPxaYN/Ocp0A/hSdzqb9nH7ad41sLRwQ3kyYdx8doR+anFV+yQjV75F2fY/a
eSDLkrC2FTpO9dbORIUhYSR8xAsW3ugHONoDTK58IpsRaecf6iB9KMpRFYkpMSDU
/WxucIMj7FQbx8scUv8E/fmqcPuXNYxueqSIYMG7bAupwa/b616GM1sN0PT1Bt21
s6GyLng/7C/Khg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:22 2025 by rpki-client