Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: Q1ohK/9CyXsFlotXMbmVvGLaJMcfQjM/JBbu/qA+skU=
Subject key identifier: BF:72:3D:E7:1E:A4:8D:BB:2A:37:B2:36:89:92:94:2B:90:51:C7:E9
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 0199356EBA98B3F821FB8BDD6BBBF5E3B0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 07D9
Signing time: Wed 10 Sep 2025 21:01:13 +0000
Manifest this update: Wed 10 Sep 2025 21:01:13 +0000
Manifest next update: Thu 11 Sep 2025 21:01:13 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: Tuxpfp5nqlWcvK7vyN9IZzV4Ew3ionJ9ldkSe0p8idM=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:ba:98:b3:f8:21:fb:8b:dd:6b:bb:f5:e3:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Sep 10 21:01:13 2025 GMT
Not After : Sep 11 21:01:13 2025 GMT
Subject: CN=bf723de71ea48dbb2a37b2368992942b9051c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:57:e3:30:cf:3a:51:53:20:e1:f8:d7:7b:
38:75:5b:cb:f7:c0:b3:91:ab:22:09:45:09:9d:db:
45:a9:9a:13:5e:91:51:f6:02:16:d7:34:79:f1:7f:
52:59:a0:e0:77:16:73:e2:f5:0a:32:de:6e:f0:d0:
a2:69:dd:2f:bc:70:c5:02:d8:9b:6c:8b:90:aa:49:
b9:40:cd:8d:c9:9a:9b:dc:8c:2c:6a:93:bc:df:97:
e0:ce:09:3e:28:2e:cb:5e:fa:2f:51:06:86:a9:a1:
ed:5b:cd:7e:39:51:91:02:cf:fb:34:45:85:74:99:
eb:70:ac:fd:a9:ae:9c:91:35:cb:62:7c:49:e1:b7:
f3:af:d1:e3:21:ad:8e:5f:64:81:91:c1:cd:5a:2d:
73:13:8a:bc:a3:47:e2:00:48:2c:2d:a9:ee:4c:e4:
3f:4a:68:64:bc:13:40:7c:5e:27:5e:74:fb:aa:09:
d9:05:49:1d:f1:3a:ed:4f:03:e7:b4:5a:bd:14:2d:
14:e1:4e:f9:1f:6a:2a:01:28:59:4c:5e:18:4d:5e:
8e:7b:a7:74:2c:6d:05:ed:11:22:bf:2b:df:53:ae:
b4:27:d4:67:9f:4d:cb:31:4a:49:d0:07:49:bd:d9:
b3:95:97:35:41:95:5c:84:60:60:90:00:a0:7e:22:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:3D:E7:1E:A4:8D:BB:2A:37:B2:36:89:92:94:2B:90:51:C7:E9
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:02:a3:a9:df:b9:0f:1c:24:15:4a:5a:f0:3d:2d:19:a0:ae:
3d:ed:06:0e:d3:d5:77:6f:57:07:e2:da:15:95:68:4e:94:1f:
4c:94:66:83:f7:0c:f4:e5:f5:eb:04:00:37:7d:45:df:ce:ee:
a2:8d:33:d7:2e:a2:c5:23:ea:89:4f:3a:25:f5:74:ea:32:08:
ac:51:72:3c:8d:5d:d3:37:dc:3d:f7:f1:80:50:99:44:ae:ea:
7a:f0:8f:7a:95:a2:5f:fa:78:d3:36:fe:b4:1f:29:fe:46:2f:
6d:af:07:81:0e:98:2e:66:46:81:4f:8d:79:04:3e:34:73:71:
3a:08:7d:4a:9a:3e:36:a7:7d:03:4a:85:ab:d7:be:40:19:b7:
11:e1:2c:e6:31:bf:46:df:73:4c:42:86:ab:73:e5:dd:af:79:
f8:22:01:ec:bb:fd:24:a1:82:b0:0c:81:06:32:01:03:b6:56:
dc:8f:6a:8b:68:94:61:12:5b:bf:b1:2a:f1:b8:f0:85:92:1a:
1e:19:7e:2f:c6:0f:af:e5:61:33:8a:4a:5b:7f:09:d0:03:23:
39:01:53:0c:8c:7c:3c:6a:50:2a:dc:79:bf:9f:5a:3b:c3:7d:
a3:de:19:6f:96:a6:60:f4:09:42:21:f9:c0:ef:fb:72:84:8f:
c7:93:4f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1brqYs/gh+4vda7v147C0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjUwOTEwMjEwMTEzWhcNMjUwOTExMjEwMTEzWjAzMTEwLwYDVQQD
EyhiZjcyM2RlNzFlYTQ4ZGJiMmEzN2IyMzY4OTkyOTQyYjkwNTFjN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFX4zDPOlFTIOH413s4dVvL98Cz
kasiCUUJndtFqZoTXpFR9gIW1zR58X9SWaDgdxZz4vUKMt5u8NCiad0vvHDFAtib
bIuQqkm5QM2NyZqb3IwsapO835fgzgk+KC7LXvovUQaGqaHtW81+OVGRAs/7NEWF
dJnrcKz9qa6ckTXLYnxJ4bfzr9HjIa2OX2SBkcHNWi1zE4q8o0fiAEgsLanuTOQ/
SmhkvBNAfF4nXnT7qgnZBUkd8TrtTwPntFq9FC0U4U75H2oqAShZTF4YTV6Oe6d0
LG0F7REivyvfU660J9Rnn03LMUpJ0AdJvdmzlZc1QZVchGBgkACgfiJgxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9yPecepI27KjeyNomSlCuQUcfpMB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQKjqd+5
DxwkFUpa8D0tGaCuPe0GDtPVd29XB+LaFZVoTpQfTJRmg/cM9OX16wQAN31F387u
oo0z1y6ixSPqiU86JfV06jIIrFFyPI1d0zfcPffxgFCZRK7qevCPepWiX/p40zb+
tB8p/kYvba8HgQ6YLmZGgU+NeQQ+NHNxOgh9Spo+Nqd9A0qFq9e+QBm3EeEs5jG/
Rt9zTEKGq3Pl3a95+CIB7Lv9JKGCsAyBBjIBA7ZW3I9qi2iUYRJbv7Eq8bjwhZIa
Hhl+L8YPr+VhM4pKW38J0AMjOQFTDIx8PGpQKtx5v59aO8N9o94Zb5amYPQJQiH5
wO/7coSPx5NPTg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 03:13:10 2025 by rpki-client