Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: ZNYvvKFdVeS3NchKvRKuuavCWn1+oftNfec6s/y5nE0=
Subject key identifier: 7E:E2:23:58:9D:5B:BF:A1:AF:1B:D5:61:35:0A:1C:69:57:3C:41:73
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 0199225583D4B9285D1FC808C07604F4DA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 1276
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: Dco7VPIzs8r8UOSKGmZgsdD3/gYBPdK7+g1nIhl6fGE=)
2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:83:d4:b9:28:5d:1f:c8:08:c0:76:04:f4:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=7ee223589d5bbfa1af1bd561350a1c69573c4173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:2d:19:08:e9:c3:98:cd:fc:e5:dc:14:87:
05:0f:af:27:78:0d:7e:57:18:0c:23:ff:34:1a:f7:
23:81:3d:f0:5d:83:b0:cc:7a:b8:50:d4:81:86:7c:
57:44:70:be:97:b5:c5:09:5c:37:85:c8:ac:7d:d9:
c2:dd:cd:45:e3:9e:fd:75:ab:c8:16:2d:d4:f1:2e:
59:2e:a2:fb:74:e7:11:c6:11:c1:01:10:3b:4e:b9:
71:ec:fa:4b:02:a3:40:1e:ac:9d:3d:9a:32:b5:40:
f1:11:3e:f2:f5:30:1d:96:dd:90:87:b6:05:5b:13:
d1:d8:08:b3:66:5c:a8:c4:f1:a5:52:06:94:b6:60:
96:ef:49:ca:09:57:ec:28:f8:a1:31:dc:31:c7:d0:
a9:7e:51:79:4a:f1:a2:c6:d0:c2:9f:75:64:67:bb:
da:80:47:9a:bc:60:73:5a:7f:e9:05:5a:72:e2:ef:
18:06:ce:43:12:c8:a8:75:36:cd:24:5e:ad:59:84:
29:13:46:9a:c2:20:7d:72:b7:b7:53:19:57:82:12:
c0:4f:2f:a0:a5:b9:2a:84:9d:90:7d:71:ec:dc:d2:
5d:d8:b7:36:f4:2a:22:b5:5a:2b:a2:b8:99:db:61:
5c:52:61:f3:48:b7:6c:e1:a7:a2:6f:88:35:e9:79:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:23:58:9D:5B:BF:A1:AF:1B:D5:61:35:0A:1C:69:57:3C:41:73
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d9:df:c0:75:c9:3c:f9:22:5d:d1:bd:60:89:a2:c2:39:5c:
e0:ae:ec:b2:43:39:11:cd:36:99:90:16:fc:76:c5:3a:27:b4:
c2:96:ea:f6:5d:ec:89:87:87:86:89:df:16:e6:c1:98:da:1c:
79:18:c3:63:bc:02:94:bf:18:82:76:9d:19:cf:80:c2:41:35:
30:1d:99:55:02:07:3a:12:a8:72:bb:02:62:db:78:06:fe:9d:
28:02:83:e0:26:ab:74:95:38:d4:a0:b2:46:03:0e:78:03:6b:
5e:70:92:28:ea:7a:0a:ed:60:6f:09:63:36:f4:cf:ff:b9:51:
4c:4a:74:b6:fa:cd:22:b2:2d:78:28:89:09:93:be:23:25:f2:
80:07:8c:cc:63:33:5f:86:b8:0e:9c:d1:f6:dd:f0:76:c1:72:
ca:e1:e1:0e:67:04:e9:13:12:ad:59:dd:4c:ee:72:73:7c:fa:
0e:26:6b:b5:73:42:f9:3f:d1:9b:f6:e5:b5:15:fc:dd:f3:1b:
b6:d9:ca:2f:f7:11:5e:8e:aa:e0:e5:15:ff:0e:5f:d7:40:26:
5e:e4:e3:29:dc:25:fd:cd:3e:fc:5e:c7:52:a4:36:f5:48:d9:
36:29:94:7a:67:bd:f0:b1:c0:99:b4:a5:60:d7:e7:6d:82:5c:
ac:2b:e0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYPUuShdH8gIwHYE9NqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNDg1ZmJkYjBiMWEwNGQ1MmU4MWRjZGI5NTg1ODkxNmEx
ZGRhZTQwHhcNMjUwOTA3MDQwMDUzWhcNMjUwOTA4MDQwMDUzWjAzMTEwLwYDVQQD
Eyg3ZWUyMjM1ODlkNWJiZmExYWYxYmQ1NjEzNTBhMWM2OTU3M2M0MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOctGQjpw5jN/OXcFIcFD68neA1+
VxgMI/80GvcjgT3wXYOwzHq4UNSBhnxXRHC+l7XFCVw3hcisfdnC3c1F4579davI
Fi3U8S5ZLqL7dOcRxhHBARA7Trlx7PpLAqNAHqydPZoytUDxET7y9TAdlt2Qh7YF
WxPR2AizZlyoxPGlUgaUtmCW70nKCVfsKPihMdwxx9CpflF5SvGixtDCn3VkZ7va
gEeavGBzWn/pBVpy4u8YBs5DEsiodTbNJF6tWYQpE0aawiB9cre3UxlXghLATy+g
pbkqhJ2QfXHs3NJd2Lc29CoitVororiZ22FcUmHzSLds4aeib4g16XnnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7iI1idW7+hrxvVYTUKHGlXPEFzMB8GA1UdIwQY
MBaAFANIX72wsaBNUugdzblYWJFqHdrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDkt
NDQ5MTg0NWRjZDQ3LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDktNDQ5MTg0NWRjZDQ3
LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNnfwHXJ
PPkiXdG9YImiwjlc4K7sskM5Ec02mZAW/HbFOie0wpbq9l3siYeHhonfFubBmNoc
eRjDY7wClL8YgnadGc+AwkE1MB2ZVQIHOhKocrsCYtt4Bv6dKAKD4CardJU41KCy
RgMOeANrXnCSKOp6Cu1gbwljNvTP/7lRTEp0tvrNIrIteCiJCZO+IyXygAeMzGMz
X4a4DpzR9t3wdsFyyuHhDmcE6RMSrVndTO5yc3z6DiZrtXNC+T/Rm/bltRX83fMb
ttnKL/cRXo6q4OUV/w5f10AmXuTjKdwl/c0+/F7HUqQ29UjZNimUeme98LHAmbSl
YNfnbYJcrCvgsw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:57 2025 by rpki-client