Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: DThJwVbzXTb2dHE6cw/bvD5c8D8M5UBQikBij/Zko04=
Subject key identifier: CD:05:36:76:37:47:D4:CC:0F:0C:25:12:9D:1E:3C:85:FC:80:89:7F
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 019A71B967076F26CD281A3432641237BB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 0844
Signing time: Tue 11 Nov 2025 07:02:47 +0000
Manifest this update: Tue 11 Nov 2025 07:02:47 +0000
Manifest next update: Wed 12 Nov 2025 07:02:47 +0000
Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=)
2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: H7L29lurlHVidfqC4zWDdMfBw76oNYeX/fz1EWY5CNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:67:07:6f:26:cd:28:1a:34:32:64:12:37:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Nov 11 07:02:47 2025 GMT
Not After : Nov 12 07:02:47 2025 GMT
Subject: CN=cd0536763747d4cc0f0c25129d1e3c85fc80897f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:ff:0f:a3:3b:cc:3c:a1:fe:5d:83:a2:7a:
24:ab:56:52:3f:18:01:d0:5c:8a:17:21:a6:ae:69:
7b:b2:d6:c9:a6:d3:4e:0b:09:83:04:72:9b:38:87:
04:56:40:91:ed:fb:c8:f5:5c:3c:89:3e:5f:90:00:
aa:a3:fa:94:31:82:ef:03:a5:b9:bd:51:fb:88:89:
08:8c:5d:0c:10:6c:e1:a8:13:67:31:c3:32:8a:a1:
1e:be:46:57:2f:47:15:b4:c7:ff:0e:a8:a3:96:d5:
59:2e:9e:ed:85:22:ce:80:bc:d4:7d:fb:d8:7f:9b:
9a:c1:2f:52:4c:7c:4e:90:a4:8e:7d:c4:7f:88:ab:
ef:7e:a3:32:1d:bb:7b:f2:bc:05:0c:5a:44:ac:a5:
a4:32:a0:92:8c:be:5a:9c:c5:3d:a8:d0:c6:df:61:
8e:1f:25:e7:b4:0c:94:2c:10:e1:5b:e1:c9:61:83:
83:9c:39:83:8f:af:20:2c:12:82:88:18:d9:84:7a:
1a:5b:61:a2:6f:0b:74:8b:ec:07:38:8b:cb:07:6e:
12:e3:fb:c7:c2:69:36:c4:46:03:5f:54:6a:76:65:
12:72:d2:cf:2c:cf:e4:d4:84:96:e2:d3:24:05:a6:
d7:d5:c6:05:ce:c7:c8:b9:db:f8:41:d1:b0:14:a8:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:36:76:37:47:D4:CC:0F:0C:25:12:9D:1E:3C:85:FC:80:89:7F
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:f9:79:1c:52:57:72:33:62:c5:5e:3e:fa:95:58:fd:ba:
66:c8:f8:9b:4f:b5:14:cc:af:01:c4:2f:5c:1a:ac:79:9c:68:
98:e9:4c:74:e9:6c:be:84:0a:37:e2:d2:3b:cd:87:db:40:26:
b3:61:56:47:4c:81:6c:65:40:49:82:d1:64:7f:c1:2b:de:80:
0c:e2:c1:a9:9d:00:c0:0a:16:e4:b2:28:71:e0:b1:29:ff:30:
84:47:cf:a0:3e:ed:6c:79:ba:c9:a3:7c:f4:de:d5:f2:9c:30:
4a:1a:68:ba:db:e6:12:51:a8:e8:36:20:05:c3:b8:67:5e:21:
d2:94:56:db:75:d4:fd:8a:4a:45:0f:34:39:96:cb:39:39:c3:
ef:7e:46:74:d6:5a:5d:64:bc:59:6e:d6:6c:ab:92:dc:11:5b:
b5:c0:00:5e:ce:aa:42:7d:c6:f5:10:d0:87:4a:b7:dd:f3:b4:
aa:c1:52:8c:43:69:bf:a4:b7:ed:70:a0:93:6f:ed:d9:4e:ab:
8b:df:c5:71:09:73:43:23:a8:54:1d:90:14:a4:bf:b2:1f:af:
b1:50:76:10:cb:f0:c7:df:80:a5:79:80:f4:12:c3:53:25:f3:
8d:e9:98:3e:32:65:46:83:e2:c7:4a:07:fa:55:a0:6d:d7:77:
9a:1b:7d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuWcHbybNKBo0MmQSN7uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1
OTEzNGEwHhcNMjUxMTExMDcwMjQ3WhcNMjUxMTEyMDcwMjQ3WjAzMTEwLwYDVQQD
EyhjZDA1MzY3NjM3NDdkNGNjMGYwYzI1MTI5ZDFlM2M4NWZjODA4OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5L/D6M7zDyh/l2Donokq1ZSPxgB
0FyKFyGmrml7stbJptNOCwmDBHKbOIcEVkCR7fvI9Vw8iT5fkACqo/qUMYLvA6W5
vVH7iIkIjF0MEGzhqBNnMcMyiqEevkZXL0cVtMf/DqijltVZLp7thSLOgLzUffvY
f5uawS9STHxOkKSOfcR/iKvvfqMyHbt78rwFDFpErKWkMqCSjL5anMU9qNDG32GO
HyXntAyULBDhW+HJYYODnDmDj68gLBKCiBjZhHoaW2Gibwt0i+wHOIvLB24S4/vH
wmk2xEYDX1RqdmUSctLPLM/k1ISW4tMkBabX1cYFzsfIudv4QdGwFKhDjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0FNnY3R9TMDwwlEp0ePIX8gIl/MB8GA1UdIwQY
MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct
NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2
LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+75eRxS
V3IzYsVePvqVWP26Zsj4m0+1FMyvAcQvXBqseZxomOlMdOlsvoQKN+LSO82H20Am
s2FWR0yBbGVASYLRZH/BK96ADOLBqZ0AwAoW5LIoceCxKf8whEfPoD7tbHm6yaN8
9N7V8pwwShpoutvmElGo6DYgBcO4Z14h0pRW23XU/YpKRQ80OZbLOTnD735GdNZa
XWS8WW7WbKuS3BFbtcAAXs6qQn3G9RDQh0q33fO0qsFSjENpv6S37XCgk2/t2U6r
i9/FcQlzQyOoVB2QFKS/sh+vsVB2EMvwx9+ApXmA9BLDUyXzjemYPjJlRoPix0oH
+lWgbdd3mht99g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:17 2025 by rpki-client