Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: UnPItoEMg7ESTX+6IJXYtKv3cN3OKKwpEeQusf9g0no=
Subject key identifier: 31:A7:CF:6F:B7:54:5D:04:7B:44:DC:3B:DA:3C:C8:57:44:C6:25:12
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 0199331439EAA8463899BCEC0CFD6386308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0A72
Signing time: Wed 10 Sep 2025 10:03:07 +0000
Manifest this update: Wed 10 Sep 2025 10:03:07 +0000
Manifest next update: Thu 11 Sep 2025 10:03:07 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: QxpDCurBz6kdlNsk2ZVKKrgDJjme2o6W1jB9JEoomyY=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:39:ea:a8:46:38:99:bc:ec:0c:fd:63:86:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Sep 10 10:03:07 2025 GMT
Not After : Sep 11 10:03:07 2025 GMT
Subject: CN=31a7cf6fb7545d047b44dc3bda3cc85744c62512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:fe:1e:11:01:8b:0c:6b:e1:a6:b2:1e:7e:
98:71:f5:f7:c1:c4:5e:1f:b2:10:fb:a4:f0:c1:60:
fe:c2:78:fa:39:d1:02:78:8b:34:0d:c0:25:b0:e4:
90:03:16:73:1b:6f:48:a4:8d:49:be:2c:43:c5:5f:
f2:ab:9f:f5:a6:76:67:84:6d:72:37:5f:cd:e3:f3:
02:d7:f7:09:46:e3:f3:65:b8:24:a3:1a:7b:39:b7:
78:4d:4e:61:b6:f2:f1:23:cd:80:9d:8f:f9:19:2b:
af:91:6a:1b:5d:7a:e9:8b:5b:e2:07:76:a9:4f:d6:
63:e8:43:89:1d:49:43:bd:18:54:cc:ca:54:bb:f3:
d5:7e:f9:55:42:c4:29:cf:52:ae:4b:e5:93:bc:21:
a4:ed:9c:d4:b5:c1:97:be:0d:c9:0f:9f:13:e5:64:
91:2c:a0:21:d0:af:05:65:e6:73:dc:b5:bc:9f:70:
c6:06:eb:4b:c8:b0:d6:00:be:24:9f:a6:15:4b:d7:
db:80:c1:57:f2:c3:43:2b:c1:1e:32:a3:0c:78:e2:
48:d6:6e:31:27:9d:f7:2b:9f:de:6f:6a:6f:5e:ff:
a2:03:6f:d1:d9:5e:ba:5a:52:54:23:0f:39:29:9d:
23:5e:aa:53:aa:9d:5c:53:4d:57:13:b8:e8:01:e8:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:CF:6F:B7:54:5D:04:7B:44:DC:3B:DA:3C:C8:57:44:C6:25:12
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ea:18:9c:69:e1:83:35:63:4e:28:f0:24:d6:f8:12:05:b3:
e1:35:f6:0d:a8:48:dd:52:01:58:bc:64:fc:ce:b4:2d:22:76:
64:a2:a8:1e:33:38:79:ff:db:a9:12:c4:95:8a:50:99:ce:f0:
ae:6e:ff:89:7c:2c:45:6e:72:18:db:5a:ee:09:42:ed:05:6a:
91:ce:08:ff:55:02:58:15:47:d9:fa:7f:84:0c:9f:43:ba:79:
1f:eb:c1:95:f1:4f:db:9f:5e:f6:19:ef:4d:44:a7:48:49:03:
6e:63:a7:d1:7d:77:6c:4a:d7:03:cd:07:97:28:5e:ea:ae:91:
6f:4f:c3:f3:69:18:fc:52:fa:2a:5c:b1:69:56:16:73:17:29:
d5:b4:61:2f:06:01:c7:ad:a2:bf:c0:8f:da:95:af:cf:8d:98:
dd:03:d7:84:c8:da:78:75:91:27:3a:80:ea:ac:3d:d5:c3:c1:
d0:73:6f:86:b9:6f:ef:4b:4a:a7:8c:df:78:ee:b3:3d:35:00:
b6:df:67:6c:47:59:71:d3:81:b5:65:ee:50:c7:a0:df:17:4f:
d4:10:70:36:b6:7b:3e:dd:75:f1:c8:a6:b0:db:94:ad:d9:72:
3d:a0:53:5a:d0:71:9a:5a:61:72:a1:90:59:69:9b:38:de:e2:
ae:7d:f8:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzFDnqqEY4mbzsDP1jhjCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjUwOTEwMTAwMzA3WhcNMjUwOTExMTAwMzA3WjAzMTEwLwYDVQQD
EygzMWE3Y2Y2ZmI3NTQ1ZDA0N2I0NGRjM2JkYTNjYzg1NzQ0YzYyNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ob+HhEBiwxr4aayHn6YcfX3wcRe
H7IQ+6TwwWD+wnj6OdECeIs0DcAlsOSQAxZzG29IpI1JvixDxV/yq5/1pnZnhG1y
N1/N4/MC1/cJRuPzZbgkoxp7Obd4TU5htvLxI82AnY/5GSuvkWobXXrpi1viB3ap
T9Zj6EOJHUlDvRhUzMpUu/PVfvlVQsQpz1KuS+WTvCGk7ZzUtcGXvg3JD58T5WSR
LKAh0K8FZeZz3LW8n3DGButLyLDWAL4kn6YVS9fbgMFX8sNDK8EeMqMMeOJI1m4x
J533K5/eb2pvXv+iA2/R2V66WlJUIw85KZ0jXqpTqp1cU01XE7joAehkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGnz2+3VF0Ee0TcO9o8yFdExiUSMB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeoYnGnh
gzVjTijwJNb4EgWz4TX2DahI3VIBWLxk/M60LSJ2ZKKoHjM4ef/bqRLElYpQmc7w
rm7/iXwsRW5yGNta7glC7QVqkc4I/1UCWBVH2fp/hAyfQ7p5H+vBlfFP259e9hnv
TUSnSEkDbmOn0X13bErXA80Hlyhe6q6Rb0/D82kY/FL6KlyxaVYWcxcp1bRhLwYB
x62iv8CP2pWvz42Y3QPXhMjaeHWRJzqA6qw91cPB0HNvhrlv70tKp4zfeO6zPTUA
tt9nbEdZcdOBtWXuUMeg3xdP1BBwNrZ7Pt118cimsNuUrdlyPaBTWtBxmlphcqGQ
WWmbON7irn34cg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 19:51:56 2025 by rpki-client