Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: yekrNXY1S3IZLDhFQ22l5R93ssgSJZnzjo5eq4IhOOs=
Subject key identifier: CA:07:49:81:30:25:8B:2F:8B:61:7B:C3:60:2E:07:88:3F:65:6B:6D
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019A71B8497F90A9CC42359847F65E05E711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 07FD
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: eY7JdVCkndHPaLJ+nJ5zEfJfPAj24iXIp8BvxogcH5o=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:49:7f:90:a9:cc:42:35:98:47:f6:5e:05:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=ca07498130258b2f8b617bc3602e07883f656b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:68:0b:29:6b:85:db:05:c6:32:d9:5d:bb:
5f:59:f1:88:68:e7:3d:0f:bc:fd:a4:c3:41:08:f6:
23:a1:96:5a:96:b4:a0:a5:00:73:74:2a:6e:c1:f5:
ce:9c:2a:89:a1:1f:36:80:cb:6e:7a:17:24:f8:f3:
6e:d6:b6:53:81:4d:ce:75:b7:73:e7:67:6b:41:9d:
60:19:f6:61:ee:13:08:e1:8f:ee:25:49:51:cd:95:
c7:ff:b0:a9:14:78:eb:db:04:d1:02:1f:03:d5:b9:
bd:7c:91:1d:d0:af:aa:b0:21:4c:38:f0:63:b7:9c:
c9:d4:75:fe:42:9d:d9:ad:a6:c5:24:40:62:54:d5:
34:03:f7:dd:35:ea:52:b4:5d:c2:1e:30:41:f9:e7:
6f:d4:c7:bd:87:06:37:db:d3:be:26:25:4f:6b:1d:
18:35:e1:ba:62:c7:cb:0a:87:b7:9b:48:7d:24:59:
1a:df:58:b9:fe:8f:49:a8:81:fd:7a:98:13:53:04:
1d:0c:89:87:d2:ce:13:f9:84:ad:99:50:e7:a5:7d:
f2:d1:1e:08:75:69:3e:17:54:a7:13:23:a1:91:b8:
73:74:2a:b2:e0:b9:89:10:5d:d6:7f:1d:23:3b:d3:
2c:60:78:9e:7a:e4:34:1c:08:c6:0d:24:a0:6d:36:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:49:81:30:25:8B:2F:8B:61:7B:C3:60:2E:07:88:3F:65:6B:6D
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ed:e6:7d:48:a2:d2:70:e1:4e:d0:33:13:0c:30:2d:12:12:
fe:d3:65:40:fd:8e:c6:fa:c3:dd:a6:71:3b:73:c7:8b:2d:a0:
4c:f8:58:c1:bf:ca:6d:88:44:1d:8e:29:20:db:ca:1a:49:42:
bb:4a:f8:8e:7f:f2:16:77:e0:b3:91:9c:ad:6c:70:35:55:33:
74:6e:58:6f:41:62:be:13:c8:f2:a0:24:c8:45:73:57:4a:49:
e8:58:7b:77:7f:f1:a9:c8:5b:5d:7d:e7:d7:e8:19:75:4c:50:
81:34:95:da:25:b5:84:ff:8b:05:00:8c:64:40:ed:d8:4e:58:
92:26:e9:95:0c:a2:52:d2:81:0e:1b:19:5a:0e:b5:3d:c8:73:
ba:30:f4:74:79:2b:90:df:db:0d:f7:02:e0:2c:ca:8b:fc:34:
97:f0:32:2a:21:0d:6f:71:ca:26:5c:3a:32:83:95:9a:b1:e6:
17:a6:05:70:ca:88:81:af:7c:3f:0d:d7:7d:6f:08:65:db:ae:
96:89:1f:0f:3f:77:1c:f1:fa:36:2f:30:8a:41:2d:a9:03:04:
1d:06:01:7e:3c:21:53:92:3d:45:4d:62:62:b0:84:12:07:cf:
31:68:9c:2c:ba:44:e5:b2:e9:70:16:4e:46:ef:68:05:58:a9:
d1:a1:be:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEl/kKnMQjWYR/ZeBecRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
EyhjYTA3NDk4MTMwMjU4YjJmOGI2MTdiYzM2MDJlMDc4ODNmNjU2YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo01oCylrhdsFxjLZXbtfWfGIaOc9
D7z9pMNBCPYjoZZalrSgpQBzdCpuwfXOnCqJoR82gMtuehck+PNu1rZTgU3Odbdz
52drQZ1gGfZh7hMI4Y/uJUlRzZXH/7CpFHjr2wTRAh8D1bm9fJEd0K+qsCFMOPBj
t5zJ1HX+Qp3ZrabFJEBiVNU0A/fdNepStF3CHjBB+edv1Me9hwY329O+JiVPax0Y
NeG6YsfLCoe3m0h9JFka31i5/o9JqIH9epgTUwQdDImH0s4T+YStmVDnpX3y0R4I
dWk+F1SnEyOhkbhzdCqy4LmJEF3Wfx0jO9MsYHieeuQ0HAjGDSSgbTZeMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoHSYEwJYsvi2F7w2AuB4g/ZWttMB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe3mfUii
0nDhTtAzEwwwLRIS/tNlQP2OxvrD3aZxO3PHiy2gTPhYwb/KbYhEHY4pINvKGklC
u0r4jn/yFnfgs5GcrWxwNVUzdG5Yb0FivhPI8qAkyEVzV0pJ6Fh7d3/xqchbXX3n
1+gZdUxQgTSV2iW1hP+LBQCMZEDt2E5YkibplQyiUtKBDhsZWg61PchzujD0dHkr
kN/bDfcC4CzKi/w0l/AyKiENb3HKJlw6MoOVmrHmF6YFcMqIga98Pw3XfW8IZduu
lokfDz93HPH6Ni8wikEtqQMEHQYBfjwhU5I9RU1iYrCEEgfPMWicLLpE5bLpcBZO
Ru9oBVip0aG+3A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:57 2025 by rpki-client