Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File: p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier: Szoh8jiBQ+1dSZLykAwzUxoeW/tWaWVFEgGliKboAjc=
Subject key identifier: 7B:BB:B9:95:FD:8C:52:C5:70:E0:45:99:F8:D7:7E:F5:72:D9:12:8E
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial: 019A221B713B49A23A38F1ECE5DABC731E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number: 0CFD
Signing time: Sun 26 Oct 2025 20:00:14 +0000
Manifest this update: Sun 26 Oct 2025 20:00:14 +0000
Manifest next update: Mon 27 Oct 2025 20:00:14 +0000
Files and hashes: 1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: /KQs0SEaB3MPUmnF8sQfZ4J+3eTrmzeXKXDAHR0m/7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:71:3b:49:a2:3a:38:f1:ec:e5:da:bc:73:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Validity
Not Before: Oct 26 20:00:14 2025 GMT
Not After : Oct 27 20:00:14 2025 GMT
Subject: CN=7bbbb995fd8c52c570e04599f8d77ef572d9128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:7d:27:3e:15:32:a8:2e:c5:5d:21:f2:25:
e1:80:2c:7e:6b:10:fd:8b:a8:0f:41:e5:4c:b1:78:
4e:76:6e:5a:97:ac:07:12:13:aa:f6:83:67:06:fc:
38:10:54:5f:51:67:8e:2c:17:4d:b9:7e:7a:d8:9c:
26:95:8f:b8:00:72:b0:72:d6:37:34:b8:e6:ed:11:
ec:21:a0:b3:db:b6:ab:25:60:4e:41:91:ca:6a:be:
87:ae:2a:98:50:67:a8:20:d3:b7:05:9b:f0:34:49:
da:59:b0:a2:a2:31:ad:f8:7d:22:b7:ab:a3:f7:c2:
cc:10:c9:20:d7:f3:ab:e8:be:26:3b:0d:fa:90:13:
ad:ac:61:6c:27:0d:bd:f4:d8:8d:06:b0:ca:ff:79:
8c:96:40:8b:8b:c7:83:a0:2e:6f:ca:8f:1d:fb:ac:
33:ff:08:1f:7b:d3:0d:97:10:34:3b:cf:f7:62:77:
d8:fc:03:b0:2a:3b:0c:40:2f:a8:14:c4:f5:20:54:
35:64:be:84:bb:ca:72:08:9a:83:92:17:0f:0b:7f:
c7:ec:45:e2:c6:ef:da:29:bc:16:62:b1:c2:3e:74:
95:73:bb:bf:02:b9:ef:b7:e0:d1:c5:2d:6a:fc:fa:
1f:0f:f4:52:d3:dd:69:31:1e:be:d4:76:2d:b7:35:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:B9:95:FD:8C:52:C5:70:E0:45:99:F8:D7:7E:F5:72:D9:12:8E
X509v3 Authority Key Identifier:
keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:aa:51:60:d9:68:6c:1f:08:66:00:31:4b:84:b7:86:d5:
32:6d:97:64:dd:15:ff:fe:bb:52:ac:c3:c7:84:0a:29:6a:73:
59:ce:ab:d9:d2:2f:59:6b:47:39:51:5b:7b:03:3a:d6:0b:61:
3e:6a:21:5c:d1:e2:61:cf:3a:2a:8c:28:8e:32:e1:97:df:39:
54:3a:0b:ae:83:1d:60:a9:3b:5a:d8:0a:4c:a7:cb:41:93:9c:
32:92:ff:d4:d3:34:a3:30:22:40:2b:b6:66:6a:9c:6c:df:9e:
df:15:f5:69:63:6f:e6:32:1d:fc:80:ae:44:f5:38:13:1d:2a:
d8:ac:54:26:d3:6b:82:79:67:41:08:51:36:e1:77:be:84:23:
07:54:5a:58:5f:d7:7a:b8:b0:42:a1:d9:b9:e5:57:ca:50:11:
46:2c:b7:b3:ef:40:f0:4d:96:27:fa:06:81:e1:c4:1a:f9:99:
4c:b4:ae:e5:75:e2:4e:18:5f:5e:ac:9d:bb:92:e6:2b:a6:0c:
7a:b8:5d:f7:4e:29:7d:88:38:36:92:09:d6:c2:72:f7:db:9f:
12:7d:f2:cb:70:02:0a:50:46:5b:1a:9c:1d:b5:52:de:73:13:
4b:00:fb:ec:96:14:a9:33:b5:40:df:05:9e:38:c8:fc:dc:55:
22:db:99:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG3E7SaI6OPHs5dq8cx5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjAwZDFiZmZmZjNhNTNlOTRmODY3ZDc0M2QwMzFiOTIy
ZGI1YjEwHhcNMjUxMDI2MjAwMDE0WhcNMjUxMDI3MjAwMDE0WjAzMTEwLwYDVQQD
Eyg3YmJiYjk5NWZkOGM1MmM1NzBlMDQ1OTlmOGQ3N2VmNTcyZDkxMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04h9Jz4VMqguxV0h8iXhgCx+axD9
i6gPQeVMsXhOdm5al6wHEhOq9oNnBvw4EFRfUWeOLBdNuX562JwmlY+4AHKwctY3
NLjm7RHsIaCz27arJWBOQZHKar6HriqYUGeoINO3BZvwNEnaWbCiojGt+H0it6uj
98LMEMkg1/Or6L4mOw36kBOtrGFsJw299NiNBrDK/3mMlkCLi8eDoC5vyo8d+6wz
/wgfe9MNlxA0O8/3YnfY/AOwKjsMQC+oFMT1IFQ1ZL6Eu8pyCJqDkhcPC3/H7EXi
xu/aKbwWYrHCPnSVc7u/Arnvt+DRxS1q/PofD/RS091pMR6+1HYttzWZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu7uZX9jFLFcOBFmfjXfvVy2RKOMB8GA1UdIwQY
MBaAFKfwDRv//zpT6U+GfXQ9AxuSLbWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTct
N2VlMDkwNTA0ZmJhLzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTctN2VlMDkwNTA0ZmJh
LzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkaqUWDZ
aGwfCGYAMUuEt4bVMm2XZN0V//67UqzDx4QKKWpzWc6r2dIvWWtHOVFbewM61gth
PmohXNHiYc86KowojjLhl985VDoLroMdYKk7WtgKTKfLQZOcMpL/1NM0ozAiQCu2
ZmqcbN+e3xX1aWNv5jId/ICuRPU4Ex0q2KxUJtNrgnlnQQhRNuF3voQjB1RaWF/X
eriwQqHZueVXylARRiy3s+9A8E2WJ/oGgeHEGvmZTLSu5XXiThhfXqydu5LmK6YM
erhd904pfYg4NpIJ1sJy99ufEn3yy3ACClBGWxqcHbVS3nMTSwD77JYUqTO1QN8F
njjI/NxVItuZog==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:18 2025 by rpki-client