Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: 0wd8BpAGkETAMHdUWBBEIqRdGWhl/hXKvUQh4ocEuk8=
Subject key identifier: 3A:D9:C5:1A:60:40:3D:A8:04:98:D5:AB:FE:E5:9B:95:68:8D:E7:80
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 019A71B8C2D55A363CB88373D11F3086C8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0593
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: RS4VEtUbMt67nYRn99Wmz1AwtELRnKZpvBCa5G7ISOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c2:d5:5a:36:3c:b8:83:73:d1:1f:30:86:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=3ad9c51a60403da80498d5abfee59b95688de780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:81:11:61:a0:e3:91:b5:2b:50:3b:c9:e6:
56:c0:d1:71:6f:76:ef:21:be:9f:84:f9:1d:65:c9:
cc:c7:3b:56:cb:53:29:13:fc:07:68:8b:48:40:26:
90:14:99:1a:69:c9:d2:e3:18:0c:57:c7:8f:12:99:
fe:74:81:1b:5a:1e:a3:2c:c8:a6:2d:0f:fb:b4:bb:
a4:b6:71:9d:0e:cf:af:aa:fe:89:c5:3f:14:b0:06:
cf:82:f1:48:c6:e4:0a:1e:e2:c3:40:d0:f3:6d:a4:
96:8c:3f:ea:16:22:09:f0:14:ac:4f:1a:d0:17:a4:
3d:ee:37:c2:ec:c0:77:a8:bb:d7:f2:26:82:6d:c3:
16:27:93:d8:ae:1a:e8:db:ac:fc:8f:19:13:f6:39:
3c:ed:64:02:e3:98:e4:13:1b:9b:0a:f8:ba:9f:b0:
13:02:9a:bb:8c:f5:d1:32:31:9b:e6:3d:ab:4a:c7:
d5:07:e4:4e:7e:48:3a:57:2f:25:70:9e:cc:21:1c:
2a:99:8f:68:b3:b9:bb:25:1c:ba:f3:7f:b3:ec:3c:
33:c9:f1:d2:7b:80:8e:f6:19:16:65:91:99:ab:2e:
d4:db:c2:ce:3b:1b:0b:d6:e0:5e:a1:6e:9a:b9:62:
3b:21:05:a5:0a:c7:e2:e7:80:81:f6:34:fc:71:ca:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:C5:1A:60:40:3D:A8:04:98:D5:AB:FE:E5:9B:95:68:8D:E7:80
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:19:92:cb:c8:1e:69:ae:8d:05:7e:e7:1b:0c:8a:69:21:7e:
70:1d:fc:82:98:03:43:92:e0:d9:36:4c:44:7d:00:a3:63:d6:
bc:a4:9f:95:42:5b:dd:ee:b2:e3:c6:7a:38:57:a8:cd:1b:2c:
d9:3f:8d:69:9f:db:6b:0f:6f:c3:94:21:66:d6:3a:40:20:be:
ba:e9:2d:b9:c3:45:1e:23:7f:c9:75:cc:89:fa:fa:17:58:a7:
33:13:63:e1:91:dc:b6:e9:90:b0:63:c6:8b:fa:08:79:4b:fc:
30:c5:f3:5c:6b:28:17:66:f7:60:53:b0:ed:90:00:aa:ba:ed:
b3:16:02:d2:de:13:2a:1b:90:5b:81:8e:a3:03:e0:12:d6:a2:
18:b4:f0:61:77:b7:f8:4f:5f:c4:1b:5c:22:f1:5a:39:aa:02:
bf:49:62:b6:05:1e:33:71:38:e0:67:9c:17:84:0c:04:be:a6:
d7:7c:a0:39:de:65:e8:9a:ec:6e:d7:f0:6b:af:3f:af:7b:fd:
11:66:da:52:7e:7c:86:e3:32:59:1e:47:45:f3:35:47:7a:c4:
88:8a:75:c3:97:59:a3:33:0c:52:bc:f6:0f:6f:44:49:7f:fe:
d0:8f:af:ef:49:cb:7f:0e:62:80:32:37:a2:c9:17:15:3c:9a:
ce:dd:7e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMLVWjY8uINz0R8whsjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm
MjhjNzcwHhcNMjUxMTExMDcwMjA1WhcNMjUxMTEyMDcwMjA1WjAzMTEwLwYDVQQD
EygzYWQ5YzUxYTYwNDAzZGE4MDQ5OGQ1YWJmZWU1OWI5NTY4OGRlNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmqBEWGg45G1K1A7yeZWwNFxb3bv
Ib6fhPkdZcnMxztWy1MpE/wHaItIQCaQFJkaacnS4xgMV8ePEpn+dIEbWh6jLMim
LQ/7tLuktnGdDs+vqv6JxT8UsAbPgvFIxuQKHuLDQNDzbaSWjD/qFiIJ8BSsTxrQ
F6Q97jfC7MB3qLvX8iaCbcMWJ5PYrhro26z8jxkT9jk87WQC45jkExubCvi6n7AT
Apq7jPXRMjGb5j2rSsfVB+ROfkg6Vy8lcJ7MIRwqmY9os7m7JRy683+z7DwzyfHS
e4CO9hkWZZGZqy7U28LOOxsL1uBeoW6auWI7IQWlCsfi54CB9jT8ccqNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrZxRpgQD2oBJjVq/7lm5VojeeAMB8GA1UdIwQY
MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt
MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi
LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRmSy8ge
aa6NBX7nGwyKaSF+cB38gpgDQ5Lg2TZMRH0Ao2PWvKSflUJb3e6y48Z6OFeozRss
2T+NaZ/baw9vw5QhZtY6QCC+uuktucNFHiN/yXXMifr6F1inMxNj4ZHctumQsGPG
i/oIeUv8MMXzXGsoF2b3YFOw7ZAAqrrtsxYC0t4TKhuQW4GOowPgEtaiGLTwYXe3
+E9fxBtcIvFaOaoCv0litgUeM3E44GecF4QMBL6m13ygOd5l6Jrsbtfwa68/r3v9
EWbaUn58huMyWR5HRfM1R3rEiIp1w5dZozMMUrz2D29ESX/+0I+v70nLfw5igDI3
oskXFTyazt1++A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client