Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: T+KNMgmxMgs9miBtFHvFPy/0INKT2Gaun9fV4f10lro=
Subject key identifier: DE:37:DE:0E:95:5F:39:60:3F:BF:62:D9:0B:AE:4F:3F:2A:97:F9:5D
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019A70DC584326AC4D28E9CCA0C32FBAEBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0836
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: oN1EBJdoRmeeTFeL5jLlSW3/4Xy7IqyGp8lXmaa/M54=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:58:43:26:ac:4d:28:e9:cc:a0:c3:2f:ba:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=de37de0e955f39603fbf62d90bae4f3f2a97f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:85:96:30:0d:35:07:32:20:57:2a:9b:01:
5c:ef:c0:5e:03:14:ea:58:9b:d3:38:47:e9:b5:5d:
73:73:8b:63:86:b8:78:c8:ef:85:8b:6d:a9:5c:23:
60:1b:c3:1d:ff:cc:0c:a5:4e:31:90:5f:f0:71:40:
ac:48:01:49:be:4d:db:fe:94:dc:91:28:cb:1f:a5:
71:24:53:d7:5d:66:f7:7b:b3:ef:e9:41:58:ef:24:
4e:f5:6e:aa:0e:1f:2e:d4:e0:8a:9f:41:97:0d:fb:
d2:76:ce:b3:97:e0:1c:cb:42:15:af:68:e0:42:46:
37:d0:c7:be:a1:c6:d3:8c:01:ba:95:85:30:93:7f:
47:4d:da:ad:d5:72:de:7f:63:6a:a8:55:26:54:18:
39:d7:b1:78:24:89:d6:7a:34:84:d6:80:a1:45:ec:
eb:24:c6:2d:69:c9:69:0f:ba:02:36:6e:ec:ba:ee:
3e:84:46:c9:ff:b3:c9:4b:a6:8a:2f:8c:a0:d6:8d:
dc:d0:79:91:0f:bc:29:5d:5e:71:ce:bf:17:c0:b6:
ab:1c:04:6f:84:4b:4c:d6:2d:5d:25:3f:25:49:74:
fa:55:76:77:1e:31:14:9d:c4:44:6f:46:90:2d:77:
80:92:14:ee:d4:8b:53:35:f3:dc:7e:f4:1e:85:47:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:DE:0E:95:5F:39:60:3F:BF:62:D9:0B:AE:4F:3F:2A:97:F9:5D
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a9:75:de:c7:4c:f1:9f:8f:10:92:8b:1f:1a:84:0d:01:9a:
73:69:45:fc:c0:e1:15:3b:64:b4:a9:f2:fa:a2:40:55:72:67:
27:c0:fd:2d:4b:e9:92:4e:84:4b:61:71:f7:38:d8:ff:2c:27:
1c:42:ed:09:9e:06:66:86:10:c3:27:66:3e:2a:58:10:e0:96:
4c:fa:00:06:cd:89:fc:24:0d:ce:a8:5e:60:99:d0:c4:9a:bb:
02:5f:1b:42:cf:78:29:6f:72:2e:db:9b:34:c4:13:64:2f:d6:
79:ed:85:2c:ce:42:b3:7e:af:4c:8d:69:85:62:7d:78:df:c3:
c3:7b:b8:94:da:0a:f7:75:ce:35:fb:e3:58:e2:36:b2:20:6b:
45:9b:ea:1d:68:d9:3f:e7:e2:ed:f5:35:fe:aa:f3:31:25:30:
9b:ed:66:04:89:0a:8d:df:13:68:a7:17:c0:d2:19:ee:8a:8e:
0b:d8:7c:9c:17:cf:3f:93:d1:e5:74:c4:f9:df:a0:c1:d8:f1:
23:25:f2:c2:32:87:11:98:15:41:1f:4b:92:1f:4a:fb:c2:7a:
62:e2:0c:47:78:96:f9:f9:72:21:7a:59:09:16:cc:1f:b4:b5:
e3:ca:25:3b:f4:87:e5:11:57:ca:e3:bb:b2:bf:50:6d:f4:c0:
6a:b5:65:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FhDJqxNKOnMoMMvuuvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjUxMTExMDMwMTE5WhcNMjUxMTEyMDMwMTE5WjAzMTEwLwYDVQQD
EyhkZTM3ZGUwZTk1NWYzOTYwM2ZiZjYyZDkwYmFlNGYzZjJhOTdmOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1uFljANNQcyIFcqmwFc78BeAxTq
WJvTOEfptV1zc4tjhrh4yO+Fi22pXCNgG8Md/8wMpU4xkF/wcUCsSAFJvk3b/pTc
kSjLH6VxJFPXXWb3e7Pv6UFY7yRO9W6qDh8u1OCKn0GXDfvSds6zl+Acy0IVr2jg
QkY30Me+ocbTjAG6lYUwk39HTdqt1XLef2NqqFUmVBg517F4JInWejSE1oChRezr
JMYtaclpD7oCNm7suu4+hEbJ/7PJS6aKL4yg1o3c0HmRD7wpXV5xzr8XwLarHARv
hEtM1i1dJT8lSXT6VXZ3HjEUncREb0aQLXeAkhTu1ItTNfPcfvQehUdBWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN433g6VXzlgP79i2QuuTz8ql/ldMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlql13sdM
8Z+PEJKLHxqEDQGac2lF/MDhFTtktKny+qJAVXJnJ8D9LUvpkk6ES2Fx9zjY/ywn
HELtCZ4GZoYQwydmPipYEOCWTPoABs2J/CQNzqheYJnQxJq7Al8bQs94KW9yLtub
NMQTZC/Wee2FLM5Cs36vTI1phWJ9eN/Dw3u4lNoK93XONfvjWOI2siBrRZvqHWjZ
P+fi7fU1/qrzMSUwm+1mBIkKjd8TaKcXwNIZ7oqOC9h8nBfPP5PR5XTE+d+gwdjx
IyXywjKHEZgVQR9Lkh9K+8J6YuIMR3iW+flyIXpZCRbMH7S148olO/SH5RFXyuO7
sr9QbfTAarVlVA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client