Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: X4YcAeLxDA89Ag2xQ0V/HFFYLDIUM6+Vpzr/o0L/ZWk=
Subject key identifier: 22:E8:36:5A:CC:E9:CC:15:83:0F:D6:83:45:71:C7:60:C5:44:BE:1D
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019A71EE61BA538997C32E01B1D4CBB03087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: BDaigHqrnyz88Vzm0m0Zp1B9Gye/oZ9O8Gkf8b6v7GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:61:ba:53:89:97:c3:2e:01:b1:d4:cb:b0:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=22e8365acce9cc15830fd6834571c760c544be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:f6:5f:7d:e3:a5:80:4e:7d:43:14:88:c5:
f3:55:c6:33:d5:85:56:7a:2d:24:f5:4b:2a:49:0c:
29:ef:6c:e7:c0:44:99:10:50:a3:48:c4:5b:e1:20:
0e:b9:6b:50:77:c6:f9:ef:db:d8:03:13:b0:6c:4c:
ea:28:bd:bf:e1:5d:eb:4e:ad:fc:c6:23:78:1b:70:
d8:0c:70:ac:af:f5:bb:8c:7b:2f:28:42:20:78:8c:
cd:e9:44:90:79:b3:80:41:51:ca:58:1e:09:45:36:
f9:8c:50:3c:be:43:20:aa:17:51:a6:db:64:0b:59:
5e:f2:33:5a:cd:1e:19:b5:cb:fc:30:fb:47:94:b5:
c1:fe:3b:16:c3:ea:54:1d:cb:9f:3e:84:c3:53:87:
a3:ad:59:81:2f:b7:ab:20:d9:8d:78:46:ea:58:83:
4e:40:70:b4:6e:2b:0d:41:10:55:7d:d4:e5:65:63:
b0:c2:09:7d:58:11:a8:6e:81:0d:ad:bf:51:6b:13:
c8:30:0f:cb:6c:da:e3:1e:25:68:77:ef:58:89:98:
8d:7a:92:d6:20:3b:bc:bc:da:18:e4:1f:08:ba:25:
71:c5:15:a9:21:4c:bc:b4:45:6c:bc:51:74:d6:0b:
b7:ee:75:04:4c:4a:16:e4:ed:84:c1:8a:10:1b:b6:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:36:5A:CC:E9:CC:15:83:0F:D6:83:45:71:C7:60:C5:44:BE:1D
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:45:14:ef:86:d5:6d:db:8a:9d:d0:70:be:21:53:22:08:99:
38:84:cb:1c:5b:43:fe:ee:d5:0f:fb:b0:64:7e:9b:8a:5b:ed:
f7:a2:5e:37:20:87:af:a9:d9:04:4e:10:34:81:bd:89:02:d8:
c0:4a:a4:1a:d7:e5:10:4e:ae:27:76:27:9e:e1:2f:da:82:1f:
45:ba:4a:26:0b:ee:b0:c5:09:2b:b5:9d:3d:66:11:a4:f3:b5:
27:2b:25:49:b3:0a:ff:51:51:f1:a5:3a:4f:b9:fd:32:41:10:
4c:84:27:48:8e:3f:12:b1:5e:f9:cf:86:79:0e:e0:3b:ab:e4:
a7:55:c2:07:bb:fd:75:85:e7:ab:50:66:dd:91:2f:2e:5b:79:
9c:1d:a2:ca:22:22:ba:74:29:50:ab:fc:14:6d:cf:d6:f0:c3:
1f:69:c7:4b:6b:77:e6:0e:b8:82:67:3e:9a:9f:1e:f8:72:31:
e4:ac:f7:84:3e:62:4d:f2:29:c7:d0:a2:8c:c6:f0:ef:d2:8e:
61:3a:44:21:72:ba:86:d9:8e:98:7f:fc:69:30:e3:fa:cc:77:
9c:ca:b2:c9:6c:65:0e:2e:0f:8e:5f:88:c8:49:20:fd:66:74:
63:47:13:3f:b8:8d:ac:39:5f:eb:13:02:de:9f:18:2a:93:fb:
fc:35:01:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mG6U4mXwy4BsdTLsDCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
EygyMmU4MzY1YWNjZTljYzE1ODMwZmQ2ODM0NTcxYzc2MGM1NDRiZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozH2X33jpYBOfUMUiMXzVcYz1YVW
ei0k9UsqSQwp72znwESZEFCjSMRb4SAOuWtQd8b579vYAxOwbEzqKL2/4V3rTq38
xiN4G3DYDHCsr/W7jHsvKEIgeIzN6USQebOAQVHKWB4JRTb5jFA8vkMgqhdRpttk
C1le8jNazR4Ztcv8MPtHlLXB/jsWw+pUHcufPoTDU4ejrVmBL7erINmNeEbqWINO
QHC0bisNQRBVfdTlZWOwwgl9WBGoboENrb9RaxPIMA/LbNrjHiVod+9YiZiNepLW
IDu8vNoY5B8IuiVxxRWpIUy8tEVsvFF01gu37nUETEoW5O2EwYoQG7YhEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLoNlrM6cwVgw/Wg0Vxx2DFRL4dMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA10UU74bV
bduKndBwviFTIgiZOITLHFtD/u7VD/uwZH6bilvt96JeNyCHr6nZBE4QNIG9iQLY
wEqkGtflEE6uJ3YnnuEv2oIfRbpKJgvusMUJK7WdPWYRpPO1JyslSbMK/1FR8aU6
T7n9MkEQTIQnSI4/ErFe+c+GeQ7gO6vkp1XCB7v9dYXnq1Bm3ZEvLlt5nB2iyiIi
unQpUKv8FG3P1vDDH2nHS2t35g64gmc+mp8e+HIx5Kz3hD5iTfIpx9CijMbw79KO
YTpEIXK6htmOmH/8aTDj+sx3nMqyyWxlDi4Pjl+IyEkg/WZ0Y0cTP7iNrDlf6xMC
3p8YKpP7/DUBWw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:26 2025 by rpki-client