Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: znoLXSkY4tUxP7IdxeCSTyVi04HyllE9n2U9SHgN7s4=
Subject key identifier: 17:F7:88:6C:98:D1:2D:CC:F8:0B:A4:5A:87:52:8C:4D:0E:DA:33:6A
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019A71B7E9A7F898F4BF9EAB46F38FFF26EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 04E0
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: D7BtcKl6857wqfa3ifdfcct6r5BanuorglRmRQtIllI=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:a7:f8:98:f4:bf:9e:ab:46:f3:8f:ff:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=17f7886c98d12dccf80ba45a87528c4d0eda336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:04:8f:bb:5d:75:ff:1f:96:66:3a:60:85:
1a:d1:ad:20:06:12:20:5b:0b:2d:be:8b:97:5e:0d:
5a:eb:27:d7:ca:38:2a:71:cf:db:5b:1b:89:25:46:
53:bc:42:58:22:38:67:20:93:b5:76:3d:1c:3a:a6:
08:41:e0:d3:e1:a3:c8:b7:c3:6d:cd:19:2e:bf:09:
01:14:ef:f5:6d:88:52:fc:0a:00:73:93:2d:77:07:
6c:d8:0f:c1:2f:dc:73:dd:ef:5d:ba:07:31:77:61:
41:5e:f4:20:f0:a0:a8:f4:c3:97:9e:d3:f3:cf:6f:
5d:e6:a5:bf:9f:87:92:5c:2a:2c:76:50:b9:5e:88:
8a:13:99:62:97:9b:42:7d:d4:61:35:15:49:fe:28:
cd:7e:a0:44:b9:12:c3:f7:bb:df:8a:a0:90:16:a3:
e1:8e:9d:10:e9:6c:97:b9:09:df:7c:0d:1a:1e:78:
44:30:01:db:bb:ca:9f:99:85:09:ec:1c:39:ea:db:
d3:51:fb:d4:07:1d:e7:34:9e:f3:b2:b8:8c:97:4f:
ee:e9:3a:05:3a:32:67:d3:fa:00:2c:9b:f8:d0:b3:
aa:7a:c2:5f:26:08:c3:54:0f:b8:c6:99:7f:2a:e8:
33:b6:33:ba:4b:98:20:a3:8b:92:10:2c:a9:74:59:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:88:6C:98:D1:2D:CC:F8:0B:A4:5A:87:52:8C:4D:0E:DA:33:6A
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:83:10:e8:38:c2:9a:42:a0:a2:be:a5:b2:0f:68:b1:84:88:
20:f4:ec:98:19:01:d1:46:f1:b0:96:9e:ac:08:e1:15:7a:9d:
02:35:1b:a2:a3:90:23:e0:74:08:08:8b:cb:24:47:13:45:36:
81:19:ae:78:bb:b4:f7:b5:e0:16:3b:90:02:c6:9c:2e:92:8d:
d7:a9:1a:4d:83:5b:bc:27:9b:1d:94:de:93:41:98:1d:b9:20:
0c:0c:bb:1d:25:10:3b:50:52:6d:c6:49:ed:bd:ff:3d:61:17:
c4:dd:96:6e:c4:a9:38:a0:9c:d5:62:ba:2e:6d:d3:8d:08:2a:
86:6d:02:6c:cb:62:b1:2c:29:44:5e:24:5a:72:4a:9b:58:ec:
3d:75:81:90:b4:ef:fe:6c:6d:ff:c0:69:a1:76:c5:01:11:99:
c0:fd:3e:47:0a:65:ec:0c:ee:06:fe:2a:7b:a3:fb:e1:93:1a:
a7:b6:b8:07:55:17:18:c3:a5:f7:77:36:a2:60:44:07:aa:d7:
bf:a3:dd:1f:f8:bc:f7:74:84:56:1d:73:19:5f:ee:5b:96:11:
a1:c4:5c:c3:f3:ff:88:ff:66:93:7b:80:49:a2:f2:12:80:cf:
9f:df:78:a5:db:72:33:35:f5:4e:4e:1a:14:89:78:09:2b:78:
25:9f:73:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+mn+Jj0v56rRvOP/ybsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw
MTBiMGIwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
EygxN2Y3ODg2Yzk4ZDEyZGNjZjgwYmE0NWE4NzUyOGM0ZDBlZGEzMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IwEj7tddf8flmY6YIUa0a0gBhIg
WwstvouXXg1a6yfXyjgqcc/bWxuJJUZTvEJYIjhnIJO1dj0cOqYIQeDT4aPIt8Nt
zRkuvwkBFO/1bYhS/AoAc5Mtdwds2A/BL9xz3e9dugcxd2FBXvQg8KCo9MOXntPz
z29d5qW/n4eSXCosdlC5XoiKE5lil5tCfdRhNRVJ/ijNfqBEuRLD97vfiqCQFqPh
jp0Q6WyXuQnffA0aHnhEMAHbu8qfmYUJ7Bw56tvTUfvUBx3nNJ7zsriMl0/u6ToF
OjJn0/oALJv40LOqesJfJgjDVA+4xpl/KugztjO6S5ggo4uSECypdFlvxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf3iGyY0S3M+AukWodSjE0O2jNqMB8GA1UdIwQY
MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt
M2IyODk0ZjBlNjljLzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj
LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIMQ6DjC
mkKgor6lsg9osYSIIPTsmBkB0UbxsJaerAjhFXqdAjUboqOQI+B0CAiLyyRHE0U2
gRmueLu097XgFjuQAsacLpKN16kaTYNbvCebHZTek0GYHbkgDAy7HSUQO1BSbcZJ
7b3/PWEXxN2WbsSpOKCc1WK6Lm3TjQgqhm0CbMtisSwpRF4kWnJKm1jsPXWBkLTv
/mxt/8BpoXbFARGZwP0+Rwpl7AzuBv4qe6P74ZMap7a4B1UXGMOl93c2omBEB6rX
v6PdH/i893SEVh1zGV/uW5YRocRcw/P/iP9mk3uASaLyEoDPn994pdtyMzX1Tk4a
FIl4CSt4JZ9znw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:32 2025 by rpki-client