Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: lkJwX69UytlksmbqBtteiN8J+v/MybY63kLFiBkDZIw=
Subject key identifier: 38:A4:8A:C2:A4:18:5A:19:29:DF:AE:41:74:4A:F9:B4:FF:CD:2E:45
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01992BC68FA74CD118AAC41E59D8F9345788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0246
Signing time: Tue 09 Sep 2025 00:00:57 +0000
Manifest this update: Tue 09 Sep 2025 00:00:57 +0000
Manifest next update: Wed 10 Sep 2025 00:00:57 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: xHOMXGGp36ODpGTcScW1hCyO87sNJDS6uvkli9Qdf4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:8f:a7:4c:d1:18:aa:c4:1e:59:d8:f9:34:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Sep 9 00:00:57 2025 GMT
Not After : Sep 10 00:00:57 2025 GMT
Subject: CN=38a48ac2a4185a1929dfae41744af9b4ffcd2e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:ee:c0:83:62:7b:2c:a1:4e:1b:33:37:fb:
cc:69:11:e7:39:e7:0d:4e:68:3f:56:1f:c2:37:0f:
a0:17:6c:92:d2:4a:c8:28:76:10:b8:38:15:f8:a4:
b2:1f:39:13:a0:d9:e4:59:46:43:aa:9a:1d:d5:cb:
24:80:e4:81:ad:85:47:52:52:b3:36:07:dd:a5:3c:
8b:ba:79:23:80:e4:84:77:d4:0d:24:68:2f:e8:45:
49:14:77:93:1e:e5:e2:62:82:07:d4:90:f4:56:1e:
d6:d6:1a:f0:a5:9b:fa:ba:5f:11:95:95:5c:96:47:
ad:14:27:9e:1a:11:91:dd:02:10:d8:21:f3:a6:4c:
73:32:05:95:26:5c:f5:e7:a6:0f:79:94:fb:ce:e0:
77:25:29:c0:88:d1:ab:53:77:8f:8c:d3:07:b6:88:
20:6a:f7:2f:ae:00:81:74:f6:10:2c:a8:34:f2:84:
5e:12:c1:7a:a3:b0:20:ca:dd:22:6f:1c:6d:7e:94:
7c:39:3e:7d:12:19:77:50:71:57:36:6c:ff:7c:26:
c6:73:26:99:ab:61:24:5c:44:9e:5e:d2:14:aa:ea:
db:71:c0:97:60:f9:e5:47:cd:22:cd:c9:3a:b9:a4:
27:0d:f2:dc:5f:d8:c0:de:24:4e:1f:ce:3c:f6:b2:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:8A:C2:A4:18:5A:19:29:DF:AE:41:74:4A:F9:B4:FF:CD:2E:45
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:8e:5a:bb:05:53:48:87:fb:99:d9:fd:04:65:ec:c2:a3:
0d:6e:81:51:8d:c3:a2:4f:d2:f4:d9:f1:9d:86:24:95:df:8f:
be:a0:77:bb:ec:5b:ef:bc:86:47:6f:be:48:55:97:7a:27:87:
22:84:7f:cd:49:82:ca:13:fe:88:55:a1:11:e3:82:a9:6f:9f:
3d:ac:32:33:91:9d:f9:03:43:4c:21:33:c8:6e:42:e2:32:28:
2a:44:b7:31:da:1a:cd:bf:6f:9f:62:50:00:2d:15:7b:84:25:
59:61:0f:23:fa:0d:bd:f7:a6:66:df:9e:9d:8f:88:e5:d1:00:
1b:b9:fe:4d:ec:4f:72:9f:00:57:8d:bb:25:b4:40:3a:80:9d:
a4:4f:2c:c7:65:9b:ae:2b:cf:ce:2b:9e:7b:ec:82:a5:f1:1e:
a6:26:bd:55:72:22:32:1a:db:92:8d:a1:bd:b0:f2:4c:7b:7b:
1f:29:a8:66:63:fb:3f:06:bd:5c:16:0d:ab:88:72:84:da:18:
84:16:27:ef:35:89:f8:00:c0:3b:91:3b:04:44:c7:97:6a:a8:
15:09:c7:99:bd:db:83:d4:7a:6c:94:67:f9:84:46:1d:c2:38:
a2:e2:7d:93:e8:46:97:77:89:6b:e6:52:9a:f9:b3:2c:d0:94:
cc:82:0a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxo+nTNEYqsQeWdj5NFeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjUwOTA5MDAwMDU3WhcNMjUwOTEwMDAwMDU3WjAzMTEwLwYDVQQD
EygzOGE0OGFjMmE0MTg1YTE5MjlkZmFlNDE3NDRhZjliNGZmY2QyZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzbuwINieyyhThszN/vMaRHnOecN
Tmg/Vh/CNw+gF2yS0krIKHYQuDgV+KSyHzkToNnkWUZDqpod1cskgOSBrYVHUlKz
NgfdpTyLunkjgOSEd9QNJGgv6EVJFHeTHuXiYoIH1JD0Vh7W1hrwpZv6ul8RlZVc
lketFCeeGhGR3QIQ2CHzpkxzMgWVJlz156YPeZT7zuB3JSnAiNGrU3ePjNMHtogg
avcvrgCBdPYQLKg08oReEsF6o7Agyt0ibxxtfpR8OT59Ehl3UHFXNmz/fCbGcyaZ
q2EkXESeXtIUqurbccCXYPnlR80izck6uaQnDfLcX9jA3iROH8489rKTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDikisKkGFoZKd+uQXRK+bT/zS5FMB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJuOWrsF
U0iH+5nZ/QRl7MKjDW6BUY3Dok/S9NnxnYYkld+PvqB3u+xb77yGR2++SFWXeieH
IoR/zUmCyhP+iFWhEeOCqW+fPawyM5Gd+QNDTCEzyG5C4jIoKkS3Mdoazb9vn2JQ
AC0Ve4QlWWEPI/oNvfemZt+enY+I5dEAG7n+TexPcp8AV427JbRAOoCdpE8sx2Wb
rivPziuee+yCpfEepia9VXIiMhrbko2hvbDyTHt7HymoZmP7Pwa9XBYNq4hyhNoY
hBYn7zWJ+ADAO5E7BETHl2qoFQnHmb3bg9R6bJRn+YRGHcI4ouJ9k+hGl3eJa+ZS
mvmzLNCUzIIK/A==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:07:42 2025 by rpki-client