Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: eGRhtiMWtOLgY419n5dKmmstv7VvOzghk0lrxThYPF0=
Subject key identifier: 21:59:A1:4C:99:65:E9:06:FF:B2:A6:BB:A5:95:71:26:BD:FE:A8:BF
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019A22893B14FF66060E0EDE3C605990A3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0AEE
Signing time: Sun 26 Oct 2025 22:00:10 +0000
Manifest this update: Sun 26 Oct 2025 22:00:10 +0000
Manifest next update: Mon 27 Oct 2025 22:00:10 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: 7Inl6h/4VyjhBPUZSk78KzvUV5wAI+BUY0KOWzwW/BA=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:3b:14:ff:66:06:0e:0e:de:3c:60:59:90:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Oct 26 22:00:10 2025 GMT
Not After : Oct 27 22:00:10 2025 GMT
Subject: CN=2159a14c9965e906ffb2a6bba5957126bdfea8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:dc:f8:eb:56:db:01:4a:c7:b8:9a:0d:68:
12:e3:90:4d:27:54:0a:66:d4:76:e0:9d:04:e2:99:
ed:09:d2:84:3f:86:d3:16:eb:1b:00:17:c5:ef:31:
8a:08:07:d1:1f:f5:a5:d3:d1:10:26:e0:c7:d3:25:
96:d4:1f:44:51:ab:18:78:4a:bb:56:59:c0:06:fa:
66:fc:30:c2:f0:f8:e6:dd:f6:19:1b:2d:c6:6f:bf:
a8:2c:7c:3e:39:17:af:f9:5b:a8:6d:f1:dc:4a:e6:
69:eb:e2:48:77:18:ed:d4:49:d2:96:89:0d:85:ba:
3d:bf:76:79:03:f1:25:20:97:07:bf:99:0c:07:06:
da:b5:23:7e:cf:30:12:63:8d:40:05:7b:1b:dc:1d:
96:83:07:ba:d3:a4:bc:79:d5:de:8e:22:80:9e:f5:
a0:9f:aa:61:74:ac:02:00:84:15:5b:02:dd:b3:b6:
87:65:05:e8:75:aa:aa:88:c9:1e:6c:0c:52:b1:8f:
e6:a7:90:a0:68:89:35:8b:4f:34:40:f8:10:45:4a:
7f:bf:94:07:8a:74:e2:fb:10:43:98:fb:a0:e7:06:
d2:0c:50:61:97:d8:5d:ff:97:38:15:e2:30:3c:9b:
47:3d:9e:70:10:5d:47:6f:38:8a:0d:b8:9b:16:97:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:A1:4C:99:65:E9:06:FF:B2:A6:BB:A5:95:71:26:BD:FE:A8:BF
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:aa:32:70:5e:80:02:05:1f:3a:d2:19:82:35:5e:96:8d:
2c:7e:01:7d:fb:a7:e5:25:8f:c3:2b:3e:c5:ad:03:3f:23:ce:
fe:4b:ff:49:eb:86:66:e9:ea:78:9e:01:61:37:c1:94:15:ad:
7d:36:f8:ad:01:a1:5d:e5:81:d9:66:a7:18:a3:46:d5:9b:fe:
70:b5:b6:48:c5:83:b5:48:37:a1:8a:f1:1e:66:87:d2:2d:00:
4c:f1:b2:b7:89:e0:98:6f:06:79:1c:e0:6e:e8:5a:80:25:50:
aa:9e:8c:35:df:7f:41:0b:c8:e6:bf:4f:e0:3e:ac:b5:0f:1a:
1f:e9:41:4e:2b:5e:f3:67:13:32:c4:b9:d0:f6:f4:dd:4d:d0:
ea:8e:fd:79:05:7e:f1:8d:db:cc:b3:ae:27:c5:f0:84:b9:ea:
31:77:84:30:d9:99:2b:ea:74:d0:3c:25:b5:ba:3a:f9:03:05:
2f:dc:a1:9a:3e:f0:c2:2f:74:43:27:d2:cf:63:9d:6e:fc:e8:
2d:d0:c0:7b:7f:0c:36:38:3b:71:f9:5b:7c:1c:d6:21:06:86:
30:17:c8:e8:32:0a:13:82:0b:88:16:e3:d8:15:b7:0d:75:27:
e9:32:5c:95:ec:48:6c:66:d0:2d:bb:9c:d8:6e:f1:97:f4:cd:
f4:3e:63:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiTsU/2YGDg7ePGBZkKPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjUxMDI2MjIwMDEwWhcNMjUxMDI3MjIwMDEwWjAzMTEwLwYDVQQD
EygyMTU5YTE0Yzk5NjVlOTA2ZmZiMmE2YmJhNTk1NzEyNmJkZmVhOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs87c+OtW2wFKx7iaDWgS45BNJ1QK
ZtR24J0E4pntCdKEP4bTFusbABfF7zGKCAfRH/Wl09EQJuDH0yWW1B9EUasYeEq7
VlnABvpm/DDC8Pjm3fYZGy3Gb7+oLHw+ORev+VuobfHcSuZp6+JIdxjt1EnSlokN
hbo9v3Z5A/ElIJcHv5kMBwbatSN+zzASY41ABXsb3B2Wgwe606S8edXejiKAnvWg
n6phdKwCAIQVWwLds7aHZQXodaqqiMkebAxSsY/mp5CgaIk1i080QPgQRUp/v5QH
inTi+xBDmPug5wbSDFBhl9hd/5c4FeIwPJtHPZ5wEF1HbziKDbibFpc3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFZoUyZZekG/7Kmu6WVcSa9/qi/MB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4qqMnBe
gAIFHzrSGYI1XpaNLH4Bffun5SWPwys+xa0DPyPO/kv/SeuGZunqeJ4BYTfBlBWt
fTb4rQGhXeWB2WanGKNG1Zv+cLW2SMWDtUg3oYrxHmaH0i0ATPGyt4ngmG8GeRzg
buhagCVQqp6MNd9/QQvI5r9P4D6stQ8aH+lBTite82cTMsS50Pb03U3Q6o79eQV+
8Y3bzLOuJ8XwhLnqMXeEMNmZK+p00Dwltbo6+QMFL9yhmj7wwi90QyfSz2Odbvzo
LdDAe38MNjg7cflbfBzWIQaGMBfI6DIKE4ILiBbj2BW3DXUn6TJclexIbGbQLbuc
2G7xl/TN9D5jTg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:25:24 2025 by rpki-client