Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: XtsVxsmdAF03XHsPAl4slZEWwy+PgRF2Seeny7BXfug=
Subject key identifier: A0:F5:FA:71:C0:9C:20:8F:1A:64:F6:79:A9:06:C8:A4:97:0D:3F:9F
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 019922FAAC0F3C0FDB862D393C6C36B0CA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:17 +0000
Manifest this update: Sun 07 Sep 2025 07:01:17 +0000
Manifest next update: Mon 08 Sep 2025 07:01:17 +0000
Files and hashes: 1: 8b2Sz4cL93cXk3-Io7s2vbwBznU.roa (hash: OdYsHSgXYM8f8BmJb0rgKjd3SquS1uJD7loVl2Lg/xI=)
2: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: AyCRnKp9ji93OyrumUKcmxydZo0Lk/a0u5WdI6Qxlyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ac:0f:3c:0f:db:86:2d:39:3c:6c:36:b0:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Sep 7 07:01:17 2025 GMT
Not After : Sep 8 07:01:17 2025 GMT
Subject: CN=a0f5fa71c09c208f1a64f679a906c8a4970d3f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:92:52:b0:3c:5c:1b:f5:67:24:8a:c1:32:
ca:02:74:16:82:1d:a4:ae:d9:f5:a8:7c:0c:12:1e:
b2:02:9c:87:e3:c4:42:fe:6d:71:62:98:08:76:48:
e7:f8:0d:3f:30:87:bd:dc:88:70:46:ac:12:88:fa:
79:dd:5a:68:f1:50:bd:b2:82:07:07:6f:4c:8d:25:
7f:5b:58:8a:a4:94:bf:d5:2b:55:6b:d8:e3:d7:aa:
2d:9b:1e:93:51:0c:aa:d8:22:3d:49:1c:1f:0b:92:
0c:94:0d:f3:fd:7b:3d:df:5b:a3:2c:0f:18:72:49:
cc:46:26:fe:7c:09:90:61:31:9c:fd:0a:eb:d0:dd:
15:3c:1e:31:16:bc:5f:dd:68:2f:59:53:68:ea:44:
ab:f1:b9:86:d4:43:dc:8a:35:2c:03:68:b6:5c:2b:
82:85:1e:03:91:66:02:76:29:6e:8e:ad:c0:89:ce:
38:4a:d2:26:a7:39:4c:83:ad:7c:84:8a:b3:e0:e0:
cf:17:64:e7:9b:0f:cf:24:fd:ae:74:ca:df:f9:42:
63:6c:cd:55:c1:65:9d:72:0e:62:67:1e:35:16:84:
72:09:ad:c2:cc:1b:87:77:84:41:cd:eb:8f:50:b5:
46:4d:78:aa:81:94:c1:d4:fc:80:32:4e:b6:73:26:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F5:FA:71:C0:9C:20:8F:1A:64:F6:79:A9:06:C8:A4:97:0D:3F:9F
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:54:1c:a9:e7:2c:7b:eb:36:18:2c:12:6f:36:15:25:ca:
c3:8f:81:dc:af:1d:2d:99:f5:65:ea:de:c5:50:07:88:b9:8a:
03:e5:02:73:2d:7d:08:9d:69:75:35:74:08:1b:93:e1:84:d4:
38:74:6a:cb:14:63:69:16:13:3e:1a:5d:f6:7c:5c:6d:db:2f:
ad:6f:ab:63:6b:70:dc:cb:35:1f:50:8d:86:7e:d3:07:d0:bf:
90:a4:cd:31:74:40:94:b0:b8:c3:5b:4a:00:b5:b6:3e:eb:99:
c6:29:87:bf:65:d2:17:b8:4c:4d:33:96:b5:04:ea:e9:7d:c5:
ab:47:af:91:a6:de:9e:b1:be:73:7e:25:c1:01:92:2d:f6:72:
40:24:6c:1b:a6:a9:88:64:49:63:5f:ee:1d:dc:6e:19:6e:ba:
b3:8b:37:db:74:4f:06:87:31:ef:ac:4c:e9:0d:d6:71:3a:27:
2a:bb:74:00:da:15:3b:3f:f0:66:22:ee:b7:e6:5b:c9:83:3c:
5a:bd:d8:b3:91:2f:c5:f5:fd:63:17:54:95:27:63:a4:0c:e2:
da:8d:1d:0c:6a:2c:e9:65:6d:3e:c4:0c:e5:f0:1e:7c:df:d8:
f9:bd:60:73:c8:ea:a1:41:e1:fe:b4:57:86:5e:08:0d:33:38:
e4:0d:ba:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+qwPPA/bhi05PGw2sMqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0
MTg4ZGYwHhcNMjUwOTA3MDcwMTE3WhcNMjUwOTA4MDcwMTE3WjAzMTEwLwYDVQQD
EyhhMGY1ZmE3MWMwOWMyMDhmMWE2NGY2NzlhOTA2YzhhNDk3MGQzZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS6SUrA8XBv1ZySKwTLKAnQWgh2k
rtn1qHwMEh6yApyH48RC/m1xYpgIdkjn+A0/MIe93IhwRqwSiPp53Vpo8VC9soIH
B29MjSV/W1iKpJS/1StVa9jj16otmx6TUQyq2CI9SRwfC5IMlA3z/Xs931ujLA8Y
cknMRib+fAmQYTGc/Qrr0N0VPB4xFrxf3WgvWVNo6kSr8bmG1EPcijUsA2i2XCuC
hR4DkWYCdilujq3Aic44StImpzlMg618hIqz4ODPF2Tnmw/PJP2udMrf+UJjbM1V
wWWdcg5iZx41FoRyCa3CzBuHd4RBzeuPULVGTXiqgZTB1PyAMk62cyZpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD1+nHAnCCPGmT2eakGyKSXDT+fMB8GA1UdIwQY
MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt
MWIzZTM1OTUxMDFiLzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi
LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcxUHKnn
LHvrNhgsEm82FSXKw4+B3K8dLZn1ZerexVAHiLmKA+UCcy19CJ1pdTV0CBuT4YTU
OHRqyxRjaRYTPhpd9nxcbdsvrW+rY2tw3Ms1H1CNhn7TB9C/kKTNMXRAlLC4w1tK
ALW2PuuZximHv2XSF7hMTTOWtQTq6X3Fq0evkabenrG+c34lwQGSLfZyQCRsG6ap
iGRJY1/uHdxuGW66s4s323RPBocx76xM6Q3WcTonKrt0ANoVOz/wZiLut+ZbyYM8
Wr3Ys5EvxfX9YxdUlSdjpAzi2o0dDGos6WVtPsQM5fAefN/Y+b1gc8jqoUHh/rRX
hl4IDTM45A26zg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:02 2025 by rpki-client