Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: ZMPoG4TV9BeReSNnsvGaxxErGok3PBUpbmIWOcWaRys=
Subject key identifier: 80:51:32:F9:D9:E6:7E:52:65:AC:1E:47:E9:61:76:8C:EA:81:40:09
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019A706E3ADDAD0D6347C89255AF4993A71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 08C2
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: d8St/Zvm7vJrn/QasB8Gf+4w86GC1wqRf9bxaKFk43c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3a:dd:ad:0d:63:47:c8:92:55:af:49:93:a7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=805132f9d9e67e5265ac1e47e961768cea814009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:db:0f:b5:a1:e9:28:56:72:df:c6:e0:a5:
8a:ef:e6:85:5e:a7:7e:c9:cd:15:37:07:df:80:e7:
d7:49:8f:5b:f3:bd:0e:f8:32:54:84:e5:e2:92:de:
73:55:c4:0d:e2:94:83:8a:1b:d6:5b:ec:21:26:9e:
e4:72:eb:e3:a5:45:8c:df:3e:b6:24:23:da:e7:61:
69:5c:11:11:55:57:55:72:53:16:00:89:95:c9:40:
60:e2:c4:34:4f:6e:e3:ee:bf:28:fd:a4:48:0f:88:
20:6d:2b:31:89:52:cd:2f:b9:33:20:7b:80:79:a6:
0f:a2:6e:62:30:13:12:4d:5c:5d:7e:52:ca:97:87:
bb:ec:94:f3:c7:67:8f:28:37:bc:8d:28:fb:d7:f9:
61:8d:53:61:44:26:26:78:17:eb:c3:1c:b3:1e:d5:
64:59:72:1e:34:60:eb:c7:e8:ab:32:60:1e:49:bb:
be:91:c7:b9:11:ea:77:4a:bc:7d:d3:18:3d:78:d6:
42:42:36:3c:c5:3c:d3:b3:ca:d6:0b:fb:af:fc:43:
21:06:aa:1b:37:ca:a8:13:34:69:ab:32:7e:a4:6e:
f2:c7:0c:f9:a2:79:51:69:c8:75:1d:48:b4:b0:56:
24:94:8e:8b:8b:3f:7e:e6:22:ab:b1:86:ad:b0:73:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:32:F9:D9:E6:7E:52:65:AC:1E:47:E9:61:76:8C:EA:81:40:09
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:89:32:18:b1:be:9e:be:4f:01:0e:02:0e:ff:33:26:b4:
4c:3f:b3:ff:1d:41:6f:7d:3b:8d:74:29:d3:e6:d2:f9:e0:fb:
31:d4:d1:d8:6d:45:c4:42:9a:63:69:79:d9:b7:e0:60:84:5b:
6f:fc:9a:c1:62:32:39:a1:52:fe:0e:9c:ce:58:43:83:1c:ff:
73:db:5b:f2:a7:93:ed:14:90:0b:94:d4:40:87:1f:6c:6c:d3:
93:47:20:1a:15:90:c1:2e:f0:95:ce:2c:e9:d1:e1:23:c4:9d:
9d:16:31:fb:79:ba:22:ec:3b:da:52:8a:f5:ad:02:80:cc:32:
22:e8:fd:2e:37:5a:54:58:3d:ee:7b:cc:b3:69:84:82:d9:2e:
d8:a3:e0:75:fe:34:b6:25:8c:39:ad:f2:13:6f:58:16:c3:d8:
aa:55:b8:b6:87:ad:7a:86:55:e6:ce:f2:8c:a2:9d:af:4d:df:
06:6c:24:a9:df:7a:b2:d3:a7:0e:ac:7e:c1:27:ba:b7:9d:fa:
eb:f1:8c:a7:66:f6:48:61:51:bc:ed:05:62:ae:43:aa:4e:1c:
21:dc:83:48:fd:dd:0e:82:38:d8:91:ef:ec:e1:af:04:f5:fc:
40:74:58:fc:ac:78:49:e3:a7:7f:92:97:6b:e1:03:33:eb:e6:
9f:e4:86:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbjrdrQ1jR8iSVa9Jk6cdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk
ZTllMGYwHhcNMjUxMTExMDEwMTAzWhcNMjUxMTEyMDEwMTAzWjAzMTEwLwYDVQQD
Eyg4MDUxMzJmOWQ5ZTY3ZTUyNjVhYzFlNDdlOTYxNzY4Y2VhODE0MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5bbD7Wh6ShWct/G4KWK7+aFXqd+
yc0VNwffgOfXSY9b870O+DJUhOXikt5zVcQN4pSDihvWW+whJp7kcuvjpUWM3z62
JCPa52FpXBERVVdVclMWAImVyUBg4sQ0T27j7r8o/aRID4ggbSsxiVLNL7kzIHuA
eaYPom5iMBMSTVxdflLKl4e77JTzx2ePKDe8jSj71/lhjVNhRCYmeBfrwxyzHtVk
WXIeNGDrx+irMmAeSbu+kce5Eep3Srx90xg9eNZCQjY8xTzTs8rWC/uv/EMhBqob
N8qoEzRpqzJ+pG7yxwz5onlRach1HUi0sFYklI6Liz9+5iKrsYatsHNdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBRMvnZ5n5SZaweR+lhdozqgUAJMB8GA1UdIwQY
MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt
YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5
LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGeJMhix
vp6+TwEOAg7/Mya0TD+z/x1Bb307jXQp0+bS+eD7MdTR2G1FxEKaY2l52bfgYIRb
b/yawWIyOaFS/g6czlhDgxz/c9tb8qeT7RSQC5TUQIcfbGzTk0cgGhWQwS7wlc4s
6dHhI8SdnRYx+3m6Iuw72lKK9a0CgMwyIuj9LjdaVFg97nvMs2mEgtku2KPgdf40
tiWMOa3yE29YFsPYqlW4toeteoZV5s7yjKKdr03fBmwkqd96stOnDqx+wSe6t536
6/GMp2b2SGFRvO0FYq5Dqk4cIdyDSP3dDoI42JHv7OGvBPX8QHRY/Kx4SeOnf5KX
a+EDM+vmn+SG7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client