Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: 90MZZquA8uC8QFvbMhZURMOg9sTtoR1LAWHXBcVyDH4=
Subject key identifier: 6B:5F:C1:A8:17:65:BE:8E:5D:77:25:05:4A:A2:9B:41:33:1E:B9:B9
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019A533EA7E8EAFB04ECAF5D15D54569C662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: AA
Signing time: Wed 05 Nov 2025 09:00:06 +0000
Manifest this update: Wed 05 Nov 2025 09:00:06 +0000
Manifest next update: Thu 06 Nov 2025 09:00:06 +0000
Files and hashes: 1: dIRpTlRdZwkzOjzMpDEo5Bfz7bk.roa (hash: C+FNl7OuHMU4htW0AknPyHxKy9e5ZPEt8r7b2jyiJx8=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: tMddZn1w/vtAELMEk6ghwaCCEg13di7YIag6yLC8ZXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:a7:e8:ea:fb:04:ec:af:5d:15:d5:45:69:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Nov 5 09:00:06 2025 GMT
Not After : Nov 6 09:00:06 2025 GMT
Subject: CN=6b5fc1a81765be8e5d7725054aa29b41331eb9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:6e:ea:ae:14:81:76:94:9c:b9:f3:b9:d6:
9c:b5:a2:96:f4:41:3b:88:ef:07:ed:e2:96:84:73:
3a:d7:bc:8a:38:e2:b9:06:09:f6:3a:ae:b8:18:1a:
76:5b:13:49:ea:3a:32:3e:f9:86:c9:ea:15:ac:f4:
da:63:b0:fa:fa:9b:f5:88:1e:bd:99:46:2c:4c:2d:
99:5c:ed:36:a0:2e:57:eb:a1:1e:ae:67:34:61:72:
ac:62:74:a1:8d:bb:56:5e:a7:70:96:1d:b8:ac:2b:
3a:7e:dd:07:64:44:7c:16:5c:de:5d:3a:a3:9d:72:
cc:fc:e3:0f:20:c7:f3:28:dc:6d:cc:87:e1:15:00:
3f:a1:c6:d5:5f:fd:94:96:ec:65:ae:2a:d2:e9:2f:
90:6b:1c:40:31:77:a8:bb:60:4b:01:ba:f7:15:49:
54:7a:df:ec:c0:09:42:ad:a8:69:0d:dc:f2:a2:a8:
d0:df:08:d6:54:49:46:ce:5b:eb:a2:6c:62:44:aa:
6c:25:4c:c9:fe:75:29:fc:88:97:64:90:80:be:9e:
00:da:e4:70:a9:2b:c6:da:05:f2:ac:a8:5c:ee:2f:
d6:11:01:8b:8c:16:39:15:a9:f8:e0:97:97:cb:b2:
8d:bc:84:4a:c6:36:d1:fa:05:88:66:29:42:cc:3b:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:C1:A8:17:65:BE:8E:5D:77:25:05:4A:A2:9B:41:33:1E:B9:B9
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:51:49:00:1e:7b:9f:c1:b6:71:c7:a1:8d:13:a5:61:91:
17:c6:45:17:13:3f:87:cd:85:5d:87:42:e0:08:df:f1:8a:33:
94:25:c2:df:a9:23:b8:8d:ab:91:27:46:c6:9b:7f:e4:44:27:
98:66:bb:d2:2c:aa:56:af:fc:57:2c:6b:89:f7:0a:6c:25:e3:
d8:39:c0:f2:d6:3f:e2:1b:3f:75:04:75:d2:4b:31:c4:ac:ed:
c9:28:56:96:24:8d:4b:09:80:54:71:6b:eb:87:fc:6c:57:ec:
c1:6f:96:c2:36:e8:6d:2e:4b:d1:37:08:54:ec:9e:04:66:24:
6c:47:29:7d:a0:cc:e7:3d:ed:15:30:e5:e9:38:02:9d:87:fd:
a6:ae:0d:bf:9b:5e:b5:41:8d:aa:ac:34:05:7a:9a:28:96:61:
fa:97:c2:05:39:e9:04:48:35:9e:96:e2:da:5c:40:d7:6c:3d:
a8:8a:33:86:0b:ab:35:1a:54:5b:7c:28:10:be:86:c9:9e:ac:
4e:55:6e:ad:de:d1:5c:27:16:60:37:3a:be:d6:9e:c4:19:2b:
76:71:fe:7b:14:4b:e0:f3:b2:cd:45:1a:c2:45:de:0e:fd:2d:
5b:5d:2c:08:d0:4b:27:bd:14:9b:78:e3:89:d7:4f:52:05:54:
43:ab:a6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPqfo6vsE7K9dFdVFacZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDU0NGUxYTNlMjI4YzRkMzY0N2Y2MmE5ZDhjOTZhY2U5
ZTJjMzEwHhcNMjUxMTA1MDkwMDA2WhcNMjUxMTA2MDkwMDA2WjAzMTEwLwYDVQQD
Eyg2YjVmYzFhODE3NjViZThlNWQ3NzI1MDU0YWEyOWI0MTMzMWViOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lBu6q4UgXaUnLnzudactaKW9EE7
iO8H7eKWhHM617yKOOK5Bgn2Oq64GBp2WxNJ6joyPvmGyeoVrPTaY7D6+pv1iB69
mUYsTC2ZXO02oC5X66Eermc0YXKsYnShjbtWXqdwlh24rCs6ft0HZER8FlzeXTqj
nXLM/OMPIMfzKNxtzIfhFQA/ocbVX/2UluxlrirS6S+QaxxAMXeou2BLAbr3FUlU
et/swAlCrahpDdzyoqjQ3wjWVElGzlvromxiRKpsJUzJ/nUp/IiXZJCAvp4A2uRw
qSvG2gXyrKhc7i/WEQGLjBY5Fan44JeXy7KNvIRKxjbR+gWIZilCzDvTBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtfwagXZb6OXXclBUqim0EzHrm5MB8GA1UdIwQY
MBaAFINFROGj4ijE02R/YqnYyWrOniwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjkt
ODkyNjdlNTI4MDA5LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjktODkyNjdlNTI4MDA5
LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrRRSQAe
e5/BtnHHoY0TpWGRF8ZFFxM/h82FXYdC4Ajf8YozlCXC36kjuI2rkSdGxpt/5EQn
mGa70iyqVq/8VyxrifcKbCXj2DnA8tY/4hs/dQR10ksxxKztyShWliSNSwmAVHFr
64f8bFfswW+WwjbobS5L0TcIVOyeBGYkbEcpfaDM5z3tFTDl6TgCnYf9pq4Nv5te
tUGNqqw0BXqaKJZh+pfCBTnpBEg1npbi2lxA12w9qIozhgurNRpUW3woEL6GyZ6s
TlVurd7RXCcWYDc6vtaexBkrdnH+exRL4POyzUUawkXeDv0tW10sCNBLJ70Um3jj
iddPUgVUQ6umXg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:34:19 2025 by rpki-client