Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: W/5LUbLAhJiUieHhvjaNdf83MVv0Lh02dfT5bqYJ3Vw=
Subject key identifier: 96:0F:B5:8F:C3:48:70:EE:82:E3:33:89:F2:80:A0:94:62:47:7E:74
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019A722632821A578AD33B37D5A761FF538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0879
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: LYbsc4/U8SImWXFgpBshz4uwQXj5yMgK7zbCSQ959oE=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:32:82:1a:57:8a:d3:3b:37:d5:a7:61:ff:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=960fb58fc34870ee82e33389f280a09462477e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:50:ad:be:b1:8c:2f:ac:cb:1f:15:94:77:
1c:85:59:39:d3:52:69:95:4a:c8:3e:ea:98:e2:a3:
5d:7f:d9:6c:87:c1:9a:2c:5e:02:30:af:73:d0:ae:
98:d9:56:b1:5f:f8:b2:f8:48:01:a9:9b:e7:83:01:
f8:9e:3d:0b:ce:23:e8:58:ba:15:26:0f:a4:f2:76:
56:06:c0:3f:2a:b3:1a:82:46:5e:fa:02:05:e6:9d:
e7:c2:6b:c9:d2:25:8f:3c:7a:bb:44:df:3f:24:7e:
0d:97:95:06:d8:fa:a4:11:19:78:47:42:97:79:4e:
7d:26:23:a6:10:fd:d6:da:91:63:c9:b6:b2:cc:56:
f9:c5:48:c0:35:fb:2d:75:37:13:01:a5:59:03:e2:
4e:0a:e3:01:ab:27:0f:d6:1e:6a:73:ba:e1:77:1c:
6c:f6:16:03:1b:44:50:4c:26:72:0e:0e:d8:19:32:
be:e1:6d:be:b1:a5:e8:cc:04:98:fd:e1:e3:5a:05:
19:4d:f4:0b:53:e2:c9:a6:64:b6:4b:41:0e:00:2e:
b7:8d:42:1e:cd:00:ef:95:af:27:67:28:3e:fd:d0:
09:60:36:00:29:44:fd:76:47:15:84:e6:7b:29:5b:
bd:99:d1:76:e9:4b:5b:1c:15:fa:00:2a:08:54:dd:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:B5:8F:C3:48:70:EE:82:E3:33:89:F2:80:A0:94:62:47:7E:74
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2b:79:f8:78:a3:ad:e5:eb:48:d1:0f:35:1e:b5:0f:41:95:
56:51:cb:12:eb:8c:e7:66:31:db:95:ec:f2:ba:a6:41:01:86:
83:b6:3c:65:31:10:f1:a2:80:93:90:e5:9e:b3:a1:cf:21:86:
0b:6a:3a:ad:80:94:3e:30:3a:5b:f2:cf:d3:c3:7d:2a:55:e3:
f2:4c:f6:b2:7f:3d:de:d6:de:70:e6:4a:8f:26:a1:f5:a2:06:
42:fd:0d:99:ea:7c:14:02:ec:2e:80:60:d6:87:0f:81:5f:33:
9c:45:c1:a9:6b:9a:f9:a7:b9:24:8e:6d:1d:fb:ac:39:e2:78:
24:09:ff:74:e5:b8:5f:c0:dd:be:55:19:7b:42:32:e3:68:fb:
18:47:17:33:6e:3d:ff:8e:40:97:d1:4e:24:b5:46:e1:3b:39:
3a:34:41:fe:60:c2:83:81:43:c1:84:40:0f:0e:2b:56:10:a7:
01:2f:a6:63:69:e6:74:d2:9e:a6:35:92:c3:2c:d6:7f:24:0e:
ab:c0:c3:e9:2d:2f:9b:2e:c6:29:ef:9d:84:21:cf:be:9c:85:
a2:d8:7d:14:21:c0:07:78:36:49:1b:3b:f8:d0:ad:e6:3b:20:
20:cf:50:a0:72:e9:c4:2b:f8:f5:f4:c5:12:fb:90:2a:fd:3d:
49:cb:8e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjKCGleK0zs31adh/1OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0
NDFhYzAwHhcNMjUxMTExMDkwMTM3WhcNMjUxMTEyMDkwMTM3WjAzMTEwLwYDVQQD
Eyg5NjBmYjU4ZmMzNDg3MGVlODJlMzMzODlmMjgwYTA5NDYyNDc3ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFQrb6xjC+syx8VlHcchVk501Jp
lUrIPuqY4qNdf9lsh8GaLF4CMK9z0K6Y2VaxX/iy+EgBqZvngwH4nj0LziPoWLoV
Jg+k8nZWBsA/KrMagkZe+gIF5p3nwmvJ0iWPPHq7RN8/JH4Nl5UG2PqkERl4R0KX
eU59JiOmEP3W2pFjybayzFb5xUjANfstdTcTAaVZA+JOCuMBqycP1h5qc7rhdxxs
9hYDG0RQTCZyDg7YGTK+4W2+saXozASY/eHjWgUZTfQLU+LJpmS2S0EOAC63jUIe
zQDvla8nZyg+/dAJYDYAKUT9dkcVhOZ7KVu9mdF26UtbHBX6ACoIVN3OSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYPtY/DSHDuguMzifKAoJRiR350MB8GA1UdIwQY
MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt
OGFhZTQzMDYzYmNhLzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh
LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCt5+Hij
reXrSNEPNR61D0GVVlHLEuuM52Yx25Xs8rqmQQGGg7Y8ZTEQ8aKAk5DlnrOhzyGG
C2o6rYCUPjA6W/LP08N9KlXj8kz2sn893tbecOZKjyah9aIGQv0Nmep8FALsLoBg
1ocPgV8znEXBqWua+ae5JI5tHfusOeJ4JAn/dOW4X8DdvlUZe0Iy42j7GEcXM249
/45Al9FOJLVG4Ts5OjRB/mDCg4FDwYRADw4rVhCnAS+mY2nmdNKepjWSwyzWfyQO
q8DD6S0vmy7GKe+dhCHPvpyFoth9FCHAB3g2SRs7+NCt5jsgIM9QoHLpxCv49fTF
EvuQKv09ScuOQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:24 2025 by rpki-client