Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: uU1zz8Ren4U2B8a+f+vgzMlsD4TYbrxCAVzolU0la5A=
Subject key identifier: E3:83:35:5A:E6:7D:47:9B:B3:99:E9:6D:5E:D4:5A:29:FC:E1:65:09
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019A7112ED0DAF81ED9427ECFC8D971832E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 049A
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: Wj44OPyMd9mb7cjuRa9F18IYh+V1jrTXd5z+n78yvmg=)
2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ed:0d:af:81:ed:94:27:ec:fc:8d:97:18:32:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=e383355ae67d479bb399e96d5ed45a29fce16509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:bf:dc:e8:52:2d:a6:7c:b7:37:f3:8d:d0:
69:10:65:9c:67:34:90:46:17:84:83:ff:81:bc:ca:
a8:d1:30:e9:a5:f2:03:cd:a8:c6:79:d9:b8:90:69:
c1:c3:db:1d:93:6f:0e:1a:2e:f2:d9:44:8f:d3:64:
7e:6d:ac:09:ae:b9:68:87:de:c3:f2:37:74:60:f7:
07:92:eb:ff:4d:2b:65:d6:26:f2:5e:db:be:f7:86:
ab:8f:93:3d:25:69:31:06:3e:ca:3e:61:cc:ed:22:
c8:f4:64:2f:5f:df:f0:02:8a:86:d0:a3:41:37:e1:
72:1a:5b:f7:b3:98:7e:50:67:62:ce:bb:7a:a8:15:
cc:de:09:2f:f0:e9:a7:ab:4b:83:c7:b1:58:36:72:
84:4f:d6:90:30:b2:c8:30:86:14:1e:86:d0:fd:4f:
b4:fc:7b:f2:b2:d5:54:a0:ef:45:67:3d:82:50:40:
76:1c:8c:77:08:72:86:bd:5f:c9:70:59:4b:07:89:
a8:d2:58:f7:a8:69:ad:8a:50:9f:be:73:37:99:70:
fe:5a:49:e7:bc:a3:04:7e:90:d0:59:fc:f3:a8:cc:
e0:93:11:15:47:17:da:94:84:06:4c:f2:ac:30:6c:
7a:d4:1e:e3:7e:71:15:9f:01:82:34:f0:50:4a:88:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:35:5A:E6:7D:47:9B:B3:99:E9:6D:5E:D4:5A:29:FC:E1:65:09
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b1:08:ab:7d:59:d2:c0:86:4e:97:95:87:7b:fa:a0:e5:91:
7b:6b:47:76:8e:98:fa:94:7c:bb:07:36:da:0d:ba:eb:7b:08:
ff:af:4d:e0:10:1e:a4:30:ab:cd:cd:c7:27:1a:a9:20:bc:48:
fb:cc:9a:af:78:21:df:88:10:d0:5c:0a:e7:12:5d:bf:84:f6:
e4:ff:23:a0:64:40:7c:93:fd:dc:c7:88:63:0a:b2:f1:a7:13:
85:4a:a2:1c:d6:dc:e1:d8:14:c8:63:d2:97:ac:51:5a:54:f4:
12:65:28:4e:e6:f5:40:ae:eb:11:ab:9c:20:be:b5:f4:58:48:
39:0a:77:2d:9d:3c:57:38:45:f0:6e:a9:f7:73:64:2a:d3:6f:
a8:bb:ea:f5:9a:43:65:c0:78:2c:8f:4b:4f:2c:72:99:30:73:
7f:23:32:9f:fd:fe:7c:c7:ca:33:80:19:5c:02:90:d8:5e:32:
70:16:d8:e9:04:72:5a:d5:f3:c4:5a:ee:43:1f:25:75:84:93:
0a:67:77:be:01:0f:fd:ff:55:20:c5:46:fe:7b:fd:fc:db:f1:
c9:0b:c3:a2:28:63:7f:73:15:5a:f3:bc:be:1c:9c:dc:2c:06:
03:a4:7f:5b:52:85:0f:df:00:99:22:6b:be:3b:f4:5f:84:b9:
f2:b5:87:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEu0Nr4HtlCfs/I2XGDLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi
NTY3NTEwHhcNMjUxMTExMDQwMDU3WhcNMjUxMTEyMDQwMDU3WjAzMTEwLwYDVQQD
EyhlMzgzMzU1YWU2N2Q0NzliYjM5OWU5NmQ1ZWQ0NWEyOWZjZTE2NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy+/3OhSLaZ8tzfzjdBpEGWcZzSQ
RheEg/+BvMqo0TDppfIDzajGedm4kGnBw9sdk28OGi7y2USP02R+bawJrrloh97D
8jd0YPcHkuv/TStl1ibyXtu+94arj5M9JWkxBj7KPmHM7SLI9GQvX9/wAoqG0KNB
N+FyGlv3s5h+UGdizrt6qBXM3gkv8Omnq0uDx7FYNnKET9aQMLLIMIYUHobQ/U+0
/HvystVUoO9FZz2CUEB2HIx3CHKGvV/JcFlLB4mo0lj3qGmtilCfvnM3mXD+Wknn
vKMEfpDQWfzzqMzgkxEVRxfalIQGTPKsMGx61B7jfnEVnwGCNPBQSoiqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOODNVrmfUebs5npbV7UWin84WUJMB8GA1UdIwQY
MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt
MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1
LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7EIq31Z
0sCGTpeVh3v6oOWRe2tHdo6Y+pR8uwc22g2663sI/69N4BAepDCrzc3HJxqpILxI
+8yar3gh34gQ0FwK5xJdv4T25P8joGRAfJP93MeIYwqy8acThUqiHNbc4dgUyGPS
l6xRWlT0EmUoTub1QK7rEaucIL619FhIOQp3LZ08VzhF8G6p93NkKtNvqLvq9ZpD
ZcB4LI9LTyxymTBzfyMyn/3+fMfKM4AZXAKQ2F4ycBbY6QRyWtXzxFruQx8ldYST
Cmd3vgEP/f9VIMVG/nv9/NvxyQvDoihjf3MVWvO8vhyc3CwGA6R/W1KFD98AmSJr
vjv0X4S58rWHFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:50 2025 by rpki-client