Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier: bYmx7FEJmdMF5pnpFq1aCjFh9WEG1puO1EFOKLIWwoA=
Subject key identifier: 3A:B6:CC:C3:9C:9D:61:F0:4C:99:7C:AB:4A:75:E4:42:2D:21:4F:CA
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 01992E5A3EB3BA2B45C938ABB801AD021C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number: 07CE
Signing time: Tue 09 Sep 2025 12:01:30 +0000
Manifest this update: Tue 09 Sep 2025 12:01:30 +0000
Manifest next update: Wed 10 Sep 2025 12:01:30 +0000
Files and hashes: 1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: F1PE/hipSXi3msTbbMrhlnpcdD3g66xozXqpVb7i0cU=)
5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:3e:b3:ba:2b:45:c9:38:ab:b8:01:ad:02:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Sep 9 12:01:30 2025 GMT
Not After : Sep 10 12:01:30 2025 GMT
Subject: CN=3ab6ccc39c9d61f04c997cab4a75e4422d214fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:e3:a6:60:be:0a:cb:51:55:5a:a6:19:39:
31:f0:3a:df:f3:42:31:11:9d:66:f4:ed:8e:41:d9:
dc:e8:35:30:ee:17:ee:53:24:57:f8:27:f2:51:31:
50:f4:77:4a:13:68:ed:54:f3:9f:da:4d:63:55:34:
20:8e:0a:d3:18:55:41:57:c5:d3:58:cf:78:7f:54:
04:a2:46:55:58:3c:f1:82:60:9a:af:55:22:41:bd:
32:81:3d:02:4e:a7:d8:81:d7:43:08:a6:44:8f:b1:
b7:a4:31:60:82:ff:1c:00:a2:32:7b:78:f9:9b:ae:
3e:1d:4c:e4:62:51:ef:63:3a:08:0f:bf:13:6f:7a:
f9:f5:e3:fb:2d:51:dc:f6:8e:32:82:41:d8:2c:28:
c8:1c:a7:74:6c:f7:fc:2b:be:45:5c:81:ab:a4:a8:
57:7a:5c:af:ac:9a:7b:46:04:7c:aa:76:eb:f6:4a:
cb:f2:82:c9:78:01:7c:ba:78:99:77:5f:f2:10:26:
9e:9a:9c:80:c2:64:b3:e9:54:ba:0c:fe:63:d4:fd:
3a:69:ae:a8:5b:30:54:5b:4b:39:48:75:19:2a:d5:
51:23:7b:5d:0b:c2:20:24:27:b6:b9:3f:e3:54:b1:
c4:ac:29:ca:c5:a8:b0:b4:5c:a3:1e:a9:26:b9:45:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:CC:C3:9C:9D:61:F0:4C:99:7C:AB:4A:75:E4:42:2D:21:4F:CA
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:fb:36:d6:f0:19:b4:1f:6a:e9:9f:41:29:7e:26:c8:ff:
2f:ac:49:25:f8:d2:b0:4a:c1:02:b1:ac:91:20:46:a5:bb:19:
60:51:e8:e7:62:af:46:ce:9f:ac:1b:55:84:32:d6:a2:65:b4:
a7:41:73:50:e9:01:b5:29:27:14:f4:20:2c:2c:2d:f4:2f:30:
a9:a7:3c:44:00:ed:85:a1:32:30:2d:e3:12:8d:ba:c5:f6:c2:
d7:de:f9:6a:3a:33:06:10:ea:1b:66:83:a8:2e:94:08:1e:bc:
c7:f6:dd:af:ab:76:50:76:1c:65:d8:59:df:e7:a3:7c:2c:a6:
c5:b0:cb:73:e0:8d:3d:af:19:f4:2f:32:6a:40:54:be:a0:4b:
d2:0b:93:e0:13:ea:86:8d:23:c9:3c:b7:97:8a:25:16:03:49:
1e:e3:2c:6f:68:e4:40:a9:4e:2d:16:85:ef:00:b7:0c:c6:bc:
39:bf:22:54:f7:30:9e:7f:06:2c:7d:96:b0:a0:c5:29:91:67:
c1:4d:df:2d:c5:0f:a3:36:1c:cd:77:61:22:c7:8a:c6:5d:b5:
23:c4:ba:01:b7:05:04:0d:6e:2c:74:14:c7:9d:9e:df:fb:c4:
f2:b3:6e:f9:f1:a7:ab:f3:42:db:61:1e:23:f4:91:83:49:8b:
e7:f1:8f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkuWj6zuitFyTiruAGtAhw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0
NjM0MDUwHhcNMjUwOTA5MTIwMTMwWhcNMjUwOTEwMTIwMTMwWjAzMTEwLwYDVQQD
EygzYWI2Y2NjMzljOWQ2MWYwNGM5OTdjYWI0YTc1ZTQ0MjJkMjE0ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnLjpmC+CstRVVqmGTkx8Drf80Ix
EZ1m9O2OQdnc6DUw7hfuUyRX+CfyUTFQ9HdKE2jtVPOf2k1jVTQgjgrTGFVBV8XT
WM94f1QEokZVWDzxgmCar1UiQb0ygT0CTqfYgddDCKZEj7G3pDFggv8cAKIye3j5
m64+HUzkYlHvYzoID78Tb3r59eP7LVHc9o4ygkHYLCjIHKd0bPf8K75FXIGrpKhX
elyvrJp7RgR8qnbr9krL8oLJeAF8uniZd1/yECaempyAwmSz6VS6DP5j1P06aa6o
WzBUW0s5SHUZKtVRI3tdC8IgJCe2uT/jVLHErCnKxaiwtFyjHqkmuUUA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq2zMOcnWHwTJl8q0p15EItIU/KMB8GA1UdIwQY
MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt
ZjlkOWMwM2Q0YjRjLzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj
LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk77Ntbw
GbQfaumfQSl+Jsj/L6xJJfjSsErBArGskSBGpbsZYFHo52KvRs6frBtVhDLWomW0
p0FzUOkBtSknFPQgLCwt9C8wqac8RADthaEyMC3jEo26xfbC1975ajozBhDqG2aD
qC6UCB68x/bdr6t2UHYcZdhZ3+ejfCymxbDLc+CNPa8Z9C8yakBUvqBL0guT4BPq
ho0jyTy3l4olFgNJHuMsb2jkQKlOLRaF7wC3DMa8Ob8iVPcwnn8GLH2WsKDFKZFn
wU3fLcUPozYczXdhIseKxl21I8S6AbcFBA1uLHQUx52e3/vE8rNu+fGnq/NC22Ee
I/SRg0mL5/GPNg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:05 2025 by rpki-client