Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: OT9TKLF7LEX5yi5rN6VdrvhDRdhBPv2fHTWQPZDRMkw=
Subject key identifier: C2:ED:70:51:E3:9C:7C:8C:97:81:F5:FE:EE:2A:78:E1:11:77:9A:78
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 019A711355799E863863BA33679A1AA4751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: 8b2Sz4cL93cXk3-Io7s2vbwBznU.roa (hash: OdYsHSgXYM8f8BmJb0rgKjd3SquS1uJD7loVl2Lg/xI=)
2: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: SS+I5v3k7+H2LPr6L7JHjcPDKtaAoHwMoHnHHFSu0Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:55:79:9e:86:38:63:ba:33:67:9a:1a:a4:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=c2ed7051e39c7c8c9781f5feee2a78e111779a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:4c:84:43:34:82:c7:60:ff:2d:63:01:58:
b6:3b:a7:8f:5a:0e:68:a3:ed:03:70:21:56:9c:38:
13:55:ef:d7:1f:4c:86:d6:19:0a:23:53:a6:c1:9c:
42:b2:ab:1f:17:1b:44:07:9f:c1:cd:64:3d:a7:68:
51:bf:32:4d:da:07:3a:1c:19:e9:d3:2f:bc:16:d1:
89:a7:fe:33:f9:cf:78:53:86:d6:e7:63:8b:26:c5:
a7:ff:41:cd:af:40:c4:e3:9b:18:08:e6:ef:76:82:
fc:8e:82:b8:45:78:a9:07:be:b5:89:18:9e:be:f2:
55:aa:50:62:59:6f:13:60:a7:bb:23:03:2e:3a:ea:
f3:6f:31:7b:9b:90:71:f4:0d:87:34:0e:f1:36:38:
91:a9:85:91:d8:cf:ee:8e:67:13:03:3e:40:c8:1b:
04:74:a1:3e:ac:c2:df:0c:31:f5:73:3c:60:ba:91:
96:50:e9:a8:25:d9:88:fc:25:4a:48:d3:82:88:42:
99:a9:6d:d8:25:7d:ba:28:a1:9d:1f:d5:3d:c9:d6:
fb:d5:f7:9c:49:ec:90:5b:6b:8d:4e:2c:6f:ee:43:
0d:3d:3d:44:ab:b2:b1:47:9e:5c:32:3b:a5:14:50:
03:ec:07:75:54:e0:f5:19:c8:0e:de:13:9e:53:24:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:ED:70:51:E3:9C:7C:8C:97:81:F5:FE:EE:2A:78:E1:11:77:9A:78
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:f5:50:4c:e3:c5:56:2e:28:7c:e5:42:dd:c7:5a:a2:62:
47:70:d4:2f:2c:c8:0b:ef:0f:5b:3f:4c:de:11:29:61:43:4a:
37:24:96:cc:19:3a:7c:9c:12:c6:0a:84:36:ed:55:84:02:74:
dc:e6:d5:37:33:1e:e4:e4:8e:b2:44:76:27:be:f9:db:1b:11:
3d:c1:36:01:9e:98:b7:ce:79:cc:a9:82:05:a1:eb:eb:3f:b9:
3a:0b:b1:b6:2b:55:bf:e8:08:55:4a:6d:19:e7:23:b2:16:33:
8e:3b:01:3d:e8:e0:f8:ee:59:f4:6c:92:4b:b2:10:79:1c:6d:
52:ce:cb:de:ce:13:19:dd:ec:0a:c9:28:f2:29:31:88:49:47:
08:7b:74:f9:e1:f9:2c:68:52:45:2d:c4:bb:9f:06:f9:35:18:
b9:c8:f3:42:23:44:86:22:46:c3:42:35:65:02:9f:9e:47:2c:
48:4c:a1:df:be:81:6b:0f:08:9d:de:0d:e0:b7:17:8e:e2:23:
fc:3e:f7:72:b4:2b:03:6b:e9:60:8f:20:33:f3:f4:3e:18:fe:
41:28:57:de:4b:92:ac:a2:bf:fd:1a:92:d9:52:18:c8:1f:3e:
29:97:95:51:c1:ef:53:45:08:08:ee:34:6d:38:8c:90:cb:89:
af:17:38:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1V5noY4Y7ozZ5oapHUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNWE4MTIyYzI0N2QzZWZiYmQyZjZhODE0YTVmNjg3NDU0
MTg4ZGYwHhcNMjUxMTExMDQwMTIzWhcNMjUxMTEyMDQwMTIzWjAzMTEwLwYDVQQD
EyhjMmVkNzA1MWUzOWM3YzhjOTc4MWY1ZmVlZTJhNzhlMTExNzc5YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZMhEM0gsdg/y1jAVi2O6ePWg5o
o+0DcCFWnDgTVe/XH0yG1hkKI1OmwZxCsqsfFxtEB5/BzWQ9p2hRvzJN2gc6HBnp
0y+8FtGJp/4z+c94U4bW52OLJsWn/0HNr0DE45sYCObvdoL8joK4RXipB761iRie
vvJVqlBiWW8TYKe7IwMuOurzbzF7m5Bx9A2HNA7xNjiRqYWR2M/ujmcTAz5AyBsE
dKE+rMLfDDH1czxgupGWUOmoJdmI/CVKSNOCiEKZqW3YJX26KKGdH9U9ydb71fec
SeyQW2uNTixv7kMNPT1Eq7KxR55cMjulFFAD7Ad1VOD1GcgO3hOeUyTR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLtcFHjnHyMl4H1/u4qeOERd5p4MB8GA1UdIwQY
MBaAFAJagSLCR9Pvu9L2qBSl9odFQYjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgt
MWIzZTM1OTUxMDFiLzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjk5MWEtZGIwZi00YzNmLWJjMDgtMWIzZTM1OTUxMDFi
LzEvQWxxQklzSkgwLS03MHZhb0ZLWDJoMFZCaU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZD1UEzj
xVYuKHzlQt3HWqJiR3DULyzIC+8PWz9M3hEpYUNKNySWzBk6fJwSxgqENu1VhAJ0
3ObVNzMe5OSOskR2J7752xsRPcE2AZ6Yt855zKmCBaHr6z+5OguxtitVv+gIVUpt
GecjshYzjjsBPejg+O5Z9GySS7IQeRxtUs7L3s4TGd3sCsko8ikxiElHCHt0+eH5
LGhSRS3Eu58G+TUYucjzQiNEhiJGw0I1ZQKfnkcsSEyh376Baw8Ind4N4LcXjuIj
/D73crQrA2vpYI8gM/P0Phj+QShX3kuSrKK//RqS2VIYyB8+KZeVUcHvU0UICO40
bTiMkMuJrxc4Kw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:01 2025 by rpki-client