Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: 5gmR90kVtkuQY6U0h+M+id8QJmXQJtcd34CdIPNfOFA=
Subject key identifier: 8C:73:FD:64:5C:61:80:1A:3E:EE:29:40:B2:BC:C9:8A:A7:FA:B4:3E
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01993312D88D42A982CBA7D86D803C57E5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 10:01:36 +0000
Manifest this update: Wed 10 Sep 2025 10:01:36 +0000
Manifest next update: Thu 11 Sep 2025 10:01:36 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 4uaPce0NFEszG5Gpc531ND4nFcWbaO8SDeGpTdndSpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:d8:8d:42:a9:82:cb:a7:d8:6d:80:3c:57:e5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Sep 10 10:01:36 2025 GMT
Not After : Sep 11 10:01:36 2025 GMT
Subject: CN=8c73fd645c61801a3eee2940b2bcc98aa7fab43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:8b:8f:5a:bd:95:78:37:02:06:b3:d9:0b:
66:48:97:99:38:53:49:a8:46:04:18:43:a4:fd:a6:
bc:2a:58:a9:19:98:7b:f5:55:1d:14:af:7b:99:11:
e0:66:cd:af:ff:83:ca:03:ea:93:dd:99:75:20:89:
2e:fc:08:1d:4b:31:d8:42:8a:82:36:e6:ff:ea:ad:
d8:af:22:14:9c:93:c5:54:0e:66:44:7b:c5:fd:c0:
38:e3:7f:c8:b4:f3:6b:a0:5e:c4:eb:90:df:50:25:
be:c9:d2:08:d4:c9:22:0f:71:9a:b8:24:fd:1d:ff:
c5:62:94:a4:13:de:dd:38:d1:97:3d:e7:c7:f3:e6:
bf:0d:df:ee:0f:e5:73:91:ef:9d:d8:05:50:4c:4b:
02:5d:21:a5:fa:64:52:1f:27:7e:b9:b2:2c:f8:a8:
f1:3c:f4:81:f2:a0:eb:c0:e2:b5:0d:9f:af:3e:c2:
84:d9:da:b0:9e:fa:bc:4a:fd:67:b4:df:53:c8:78:
6e:f9:00:8e:61:16:0a:07:4b:a2:be:bd:92:9e:02:
97:b2:1f:c1:0b:f5:ba:f7:47:8a:57:82:a2:63:1d:
9a:a4:c0:4a:1c:3c:16:c3:de:76:10:53:dc:e3:c5:
4f:99:e8:ec:cc:17:f6:65:a3:bb:27:9e:26:3e:cd:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:FD:64:5C:61:80:1A:3E:EE:29:40:B2:BC:C9:8A:A7:FA:B4:3E
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:c5:8b:49:0e:1d:b7:0b:8a:c2:fd:8b:77:02:44:81:ff:
a4:f6:20:df:3f:74:29:78:72:b5:d5:88:ad:93:7a:6d:11:e9:
30:c6:f5:1a:f6:7a:d0:bb:61:bd:99:55:78:4a:c9:41:f1:f2:
4a:34:83:da:78:48:05:b6:60:77:9f:df:8e:78:9c:c8:b9:b4:
b7:76:d9:d3:07:c1:ff:a6:64:d4:85:6f:c9:10:52:84:c7:66:
c2:56:07:0c:b2:f0:66:32:1e:51:60:9e:f2:3d:8f:e6:a2:cf:
15:07:d0:e8:2d:7f:d2:aa:20:49:55:ae:4e:04:31:60:d3:32:
a8:22:3b:b2:aa:8d:17:42:58:35:95:6f:13:82:9b:fb:db:37:
6b:74:ee:1c:78:96:03:7e:db:1f:7c:60:31:22:b7:7e:35:72:
1b:21:1a:5f:04:b9:23:87:04:cc:ea:d5:e2:9f:5d:4e:a1:35:
02:2a:18:5d:24:c9:4e:a8:a4:85:74:e4:18:14:f9:51:da:24:
3b:27:0a:a2:bf:ec:63:fe:bc:31:8b:c0:88:ff:26:50:04:1d:
c2:0f:d6:c6:b8:84:4c:8c:a4:42:64:14:20:80:64:ee:06:6d:
3f:c6:fa:95:88:62:00:43:4d:16:e1:b0:53:d7:53:25:64:81:
0b:16:01:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEtiNQqmCy6fYbYA8V+WxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx
YTYwNDUwHhcNMjUwOTEwMTAwMTM2WhcNMjUwOTExMTAwMTM2WjAzMTEwLwYDVQQD
Eyg4YzczZmQ2NDVjNjE4MDFhM2VlZTI5NDBiMmJjYzk4YWE3ZmFiNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskWLj1q9lXg3Agaz2QtmSJeZOFNJ
qEYEGEOk/aa8KlipGZh79VUdFK97mRHgZs2v/4PKA+qT3Zl1IIku/AgdSzHYQoqC
Nub/6q3YryIUnJPFVA5mRHvF/cA443/ItPNroF7E65DfUCW+ydII1MkiD3GauCT9
Hf/FYpSkE97dONGXPefH8+a/Dd/uD+Vzke+d2AVQTEsCXSGl+mRSHyd+ubIs+Kjx
PPSB8qDrwOK1DZ+vPsKE2dqwnvq8Sv1ntN9TyHhu+QCOYRYKB0uivr2SngKXsh/B
C/W690eKV4KiYx2apMBKHDwWw952EFPc48VPmejszBf2ZaO7J54mPs28IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxz/WRcYYAaPu4pQLK8yYqn+rQ+MB8GA1UdIwQY
MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt
NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4
LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclfFi0kO
HbcLisL9i3cCRIH/pPYg3z90KXhytdWIrZN6bRHpMMb1GvZ60LthvZlVeErJQfHy
SjSD2nhIBbZgd5/fjnicyLm0t3bZ0wfB/6Zk1IVvyRBShMdmwlYHDLLwZjIeUWCe
8j2P5qLPFQfQ6C1/0qogSVWuTgQxYNMyqCI7sqqNF0JYNZVvE4Kb+9s3a3TuHHiW
A37bH3xgMSK3fjVyGyEaXwS5I4cEzOrV4p9dTqE1AioYXSTJTqikhXTkGBT5Udok
OycKor/sY/68MYvAiP8mUAQdwg/WxriETIykQmQUIIBk7gZtP8b6lYhiAENNFuGw
U9dTJWSBCxYBIA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:32:51 2025 by rpki-client