Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: z/vMkIckRJLyxLLk19jMXuLoAJEC6JPPmLk/Tp+oVUA=
Subject key identifier: DF:02:DF:1B:E5:BD:D1:F2:66:2C:8C:09:62:02:38:5B:B5:D7:2E:3D
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 019922FA2479268D0B21584F562D7FB3DCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 03EA
Signing time: Sun 07 Sep 2025 07:00:42 +0000
Manifest this update: Sun 07 Sep 2025 07:00:42 +0000
Manifest next update: Mon 08 Sep 2025 07:00:42 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 6uch41v2t5Gd2GquvE8AWl66eccJPd99SP4syX27NAU=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:24:79:26:8d:0b:21:58:4f:56:2d:7f:b3:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Sep 7 07:00:42 2025 GMT
Not After : Sep 8 07:00:42 2025 GMT
Subject: CN=df02df1be5bdd1f2662c8c096202385bb5d72e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:9c:8c:2d:86:08:f0:75:c3:c2:33:9b:f4:
ee:db:bf:52:11:47:dc:44:17:c0:42:22:ff:54:b4:
e6:f5:a9:8a:db:a5:1b:35:2a:a9:46:c9:cd:b8:95:
fe:40:56:8d:0b:ae:e5:7f:d5:ee:32:fd:fd:0f:37:
f9:16:91:2c:ba:8e:e0:fc:22:9d:1b:43:79:ef:b1:
84:70:a6:a2:b9:83:13:17:a0:1b:64:fe:f7:63:00:
33:01:8b:8a:66:3a:84:93:21:80:a3:b7:33:a5:b1:
70:21:df:43:77:76:95:ae:6e:d2:b9:86:10:c0:04:
e5:89:ab:5e:94:48:37:0d:ee:5e:6c:87:22:5c:43:
5d:6a:1e:3b:99:9b:b4:cd:b7:1e:97:30:de:b3:63:
31:f8:99:be:51:98:b6:ae:81:e4:1f:fb:05:4e:95:
90:46:0e:05:11:af:e7:2c:a1:0d:b6:bb:97:3c:e7:
93:a9:fb:af:28:21:09:53:17:d0:d4:bd:a3:f9:f4:
c4:7b:07:fa:73:eb:85:5d:a8:e0:56:da:f8:e3:c5:
7d:01:35:d0:8f:8d:6b:5b:fe:49:e0:2c:b7:00:b5:
c0:3e:e2:e2:06:e7:19:0b:65:42:1b:8c:3a:3f:b7:
76:b8:ad:e2:de:b2:78:57:f7:da:fa:d7:f8:53:a6:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:DF:1B:E5:BD:D1:F2:66:2C:8C:09:62:02:38:5B:B5:D7:2E:3D
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:24:e7:11:14:5f:71:26:43:ae:dd:6b:52:21:91:48:26:ab:
8a:a7:57:d4:06:89:db:d1:35:3b:b9:7e:94:f8:c3:ef:a3:1c:
1a:27:59:b0:9e:8e:e1:20:f5:84:81:fe:53:1c:6e:3b:9b:e6:
5d:c6:7f:60:b5:e1:63:b0:1d:0d:0b:b0:75:da:91:2d:61:4c:
aa:c3:46:19:0e:12:82:48:26:8e:91:e5:95:20:69:25:ac:fb:
f0:01:f0:84:d6:80:04:11:6b:b2:2f:9b:e7:24:42:33:1f:73:
71:c4:d8:78:3d:9d:bc:7f:fd:1c:f3:43:b7:75:36:c0:da:89:
d6:7d:d5:08:5a:fa:12:27:23:2b:ff:d4:ac:04:a0:6d:2b:eb:
9c:d4:57:ea:68:78:81:09:79:c0:41:12:f6:0a:3f:6c:95:a7:
7f:2f:0c:12:91:8e:27:81:c2:62:ab:bd:5b:85:ba:f8:3f:97:
a9:1d:59:0d:e0:f5:99:f3:5e:b2:16:d9:ed:62:a7:d0:24:23:
40:b4:d2:b8:5b:8c:47:01:29:d1:bb:0d:f0:e1:e8:08:bc:b5:
52:5d:0a:3c:86:bf:69:ba:e7:74:98:87:2e:fb:24:90:00:01:
4a:ea:97:17:ca:21:ef:f2:f8:1a:4f:e1:f8:4b:e3:ed:1f:67:
19:91:2b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+iR5Jo0LIVhPVi1/s9zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwOTA3MDcwMDQyWhcNMjUwOTA4MDcwMDQyWjAzMTEwLwYDVQQD
EyhkZjAyZGYxYmU1YmRkMWYyNjYyYzhjMDk2MjAyMzg1YmI1ZDcyZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yGcjC2GCPB1w8Izm/Tu279SEUfc
RBfAQiL/VLTm9amK26UbNSqpRsnNuJX+QFaNC67lf9XuMv39Dzf5FpEsuo7g/CKd
G0N577GEcKaiuYMTF6AbZP73YwAzAYuKZjqEkyGAo7czpbFwId9Dd3aVrm7SuYYQ
wATliatelEg3De5ebIciXENdah47mZu0zbcelzDes2Mx+Jm+UZi2roHkH/sFTpWQ
Rg4FEa/nLKENtruXPOeTqfuvKCEJUxfQ1L2j+fTEewf6c+uFXajgVtr448V9ATXQ
j41rW/5J4Cy3ALXAPuLiBucZC2VCG4w6P7d2uK3i3rJ4V/fa+tf4U6aq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8C3xvlvdHyZiyMCWICOFu11y49MB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCTnERRf
cSZDrt1rUiGRSCariqdX1AaJ29E1O7l+lPjD76McGidZsJ6O4SD1hIH+UxxuO5vm
XcZ/YLXhY7AdDQuwddqRLWFMqsNGGQ4SgkgmjpHllSBpJaz78AHwhNaABBFrsi+b
5yRCMx9zccTYeD2dvH/9HPNDt3U2wNqJ1n3VCFr6EicjK//UrASgbSvrnNRX6mh4
gQl5wEES9go/bJWnfy8MEpGOJ4HCYqu9W4W6+D+XqR1ZDeD1mfNeshbZ7WKn0CQj
QLTSuFuMRwEp0bsN8OHoCLy1Ul0KPIa/abrndJiHLvskkAABSuqXF8oh7/L4Gk/h
+Evj7R9nGZErgg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:39 2025 by rpki-client